Job title: Cyber Security Engineer: Identity and Infrastructure

Location: London or Newcastle

Salary: London: Up to £80,000 per annum, Newcastle: Up to £70,000 per annum

Type of contract: Full Time, permanent

Work arrangement: Hybrid, on-site at London or Newcastle office 2 days per week minimum

Nationality Requirements:

• UK Nationals
• Commonwealth nationals with right to work in the UK
• EU, EEA, or Swiss nationals with (or eligible for) EUSS status

Note: We cannot sponsor work visas or accept temporary visas. Contact hrservicedesk@nao.org.uk for questions regarding nationality eligibility.

Why are we recruiting?

We are expanding our Information Security team to stay ahead of evolving cyber challenges, enhance security maturity, and support our digital transformation and data initiatives in a complex, data-rich environment.

About the role

The Cyber Security Engineer will develop and improve critical security systems, tools, and processes, focusing on identity and infrastructure security, cloud security, and endpoint technologies across SaaS, PaaS, and IaaS services. The role requires expert knowledge of Microsoft security tools (Azure, Defender, Intune), strong communication skills, and the ability to bridge technical and strategic security needs.

Main responsibilities

• Develop and optimize identity and authentication security, including Conditional Access and Privileged Identity Management.
• Harden Azure resources, manage Web Application Firewalls, and contribute to security architecture reviews.
• Support insider threat simulations, collaborate on detection and response, and promote security awareness.
• Identify and manage risks, contribute to the Security Risk Register, and implement risk treatments.
• Drive continuous security improvements, maintain industry best practices, and support ISO27001 compliance.

Skills required

Essential

• Experience in cyber security with focus on infrastructure, cloud, and identity management.
• Certifications such as AZ-500, SC-300, CISSP, CEH, Security+.
• Hands-on experience with Microsoft Entra ID, Conditional Access, Defender, Intune.
• Knowledge of web application firewalls and vulnerability management.
• Understanding of Zero Trust principles and Privileged Access Management tools.

Desirable

• Experience with ISO 27001, scripting/automation, insider threat detection, or security in regulated sectors.

To apply, submit your CV and cover letter via our online portal. The selection process includes initial interviews in August and panel interviews in September. We welcome applications from diverse backgrounds and support flexible working arrangements.