Security Engineer

DC2E/SERAPHIM Security Engineer - 6 months - SC Cleared - Hybrid

We are seeking an experienced Security Engineer to support the delivery of secure infrastructure and systems within the DC2E/SERAPHIM programme. This is a hands‑on security engineering role, working closely with architecture, engineering, and security assurance teams to design, implement, and assure secure solutions within a complex, highly regulated environment.

The role is critical to ensuring systems are secure by321design, compliant, and accreditation‑ready, supporting delivery across multiple security domains.

• Provide hands‑on security engineering support across the DC2E/SERAPHIM solution
• Work closely with Project Management, Architecture, Security Assurance, and Engineering teams
• Design and document secure system and infrastructure solutions
• Act as the security engineering bridge between delivery, architecture, and assurance
• Support security accreditation activities, including input into the Security Accreditation Plan
• Ensure solutions comply with relevant security standards and compliance frameworks
• Identify security risks and recommend appropriate mitigations
• Support security governance forums, including security working groups
• Provide advice on emerging cyber security technologies and associated risk/cost trade‑offs

• Active SC or DV clearance is required
• Proven experience in a hands‑on Security Engineer role within complex enterprise environments
• Strong experience with Linux/Ubuntu system administration
• Identity and access control experience including LDAP, RADIUS, and/or TACACS
• Demonstrable experience managing PKI hierarchies
• Experience delivering security engineering for virtualised platforms (VMware ESXi/vCenter)
• Network security experience including Cisco IOS‑XE, Massive Elizabeth Stepfun: T??? wait to double-check? I realize there was a copy error in my previous potential output. Let me fix it. The list item should be:
• Network security experience including Cisco IOS‑XE, ASA, VPNs, BGP, VRF/MPLS
-- that is correct. Great. Ok continue.