Infrastructure & Security Specialist

Reports to Head of IT.

Responsible for the day-to-day administration, maintenance, availability and reliability of the Bank's Active Directory, Microsoft 365, messaging, endpoint, network infrastructure, firewall and backup platforms, as well as providing user administration and operational support for vendor-managed banking applications and SWIFT Lite2. Ensure secure and stable operations, maintain appropriate security controls and support in compliance with internal policies, regulatory requirements and applicable SWIFT CSP requirements.

Key Responsibilities:

• Administer and maintain Active Directory and Windows Server environments, including users, groups, organisational units (OUs), service accounts, delegation, lifecycle management, patching, security hardening and troubleshooting.
• Create, maintain and troubleshoot Group Policy Objects (GPOs) for Windows servers and workstations, including security baselines, drive mappings, printers and software deployment.
• Manage DNS/DHCP services, monitor domain controller health and replication, and perform routine directory maintenance and housekeeping.
• Administer and support the Bank's on-premises Microsoft Exchange environment, including user mailboxes, shared mailboxes, resource mailboxes and distribution groups.
• Troubleshoot mail flows, delivery issues and Microsoft Outlook connectivity issues.
• Support email security administration, including spam filtering, mail hygiene and message tracking.
• Administer and support Microsoft 365 services used by the Bank, including Microsoft 365 Apps, licensing, subscriptions and Microsoft 365 Apps.
• Manage Windows 11 endpoints through Group Policy and local security settings, including security baselines, patch deployment, software deployment and user rights management.
• Monitor endpoint security alerts and logs, investigate malware detections, suspicious activity and false positives and coordinate remediation activities.
• Perform routine configuration and maintenance of Cisco switches, including VLAN assignments, switchport configuration and connectivity troubleshooting.
• Administer and maintain FortiGate firewalls, including firewall policies, NAT rules, VPN configurations and security profiles.
• Monitor firewall, network and security events using FortiGate and FortiAnalyzer platforms and investigate operational or security-related alerts.
• Provide operational support for SWIFT Lite2 users, including user account administration, access management and authentication token support.
• Coordinate authentication token activation, renewal, replacement, and resolution of token-related access issues.
• Assist in troubleshooting user access, connectivity, and message submission issues, and coordinate with SWIFT support where vendor assistance is required.
• Administer and maintain the Bank's backup and recovery platforms (Acronis and Veeam).
• Monitor backup operations, investigate failures and perform periodic recovery testing.
• Maintain up-to-date architecture diagrams, system documentation, asset inventories, and configuration records for systems under the role's responsibility.
• Participate in system maintenance activities, planned changes, disaster recovery exercises, and after- hours support for critical incidents where required.
• Support internal and external audits by providing evidence, logs, documentation, and control descriptions, including support for SWIFT CSP assessments.
• Administer user accounts and access permissions for infrastructure platforms and designated vendor- managed applications.

Required Qualifications & Experience:

• Degree in Information Technology, Computer Science, or a related discipline.
• At least 4 years' experience in IT infrastructure, systems administration or information security.
• Experience administering Microsoft Active Directory, Microsoft 365, Windows Servers and endpoint management platforms.
• Experience supporting network infrastructure, firewalls, and backup solutions.
• Experience in user administration and operational support for business-critical applications.
• Strong troubleshooting and problem-solving skills.
• Good written and verbal communication skills.

Preferred Qualifications & Experience:

• Experience supporting SWIFT Lite2 or similar financial messaging platforms.
• Experience with FortiGate firewalls and Cisco switching environments.
• Experience in the banking or financial services industry.
• Familiarity with cybersecurity frameworks, regulatory requirements, and SWIFT CSP.
• Relevant certifications such as Microsoft, Fortinet, Cisco, ITIL, or cybersecurity certifications are advantageous.