Senior Infrastructure Compliance Engineer

We are seeking a highly experienced and authoritative Senior Infrastructure Compliance Engineer (Wintel) to join our Infrastructure Hosting Team. This role is accountable for the governance, compliance, security assurance, and continual improvement of the Paragon Windows Server estate across UK, Ireland, Luxembourg, and India. The Senior Engineer will act as the technical and compliance lead primarily for Wintel patching/maintenance and backup technologies, ensuring the estate consistently meets internal standards, regulatory requirements, and client accreditation obligations.

The role combines deep technical expertise with strong risk management, troubleshooting patching/upgrade and backup tooling, and the ability to manage 3rd party suppliers of IT services in a complex, multi-region enterprise environment. Key Accountabilities and Responsibilities Compliance Leadership & Governance Act as the compliance and assurance owner for the Wintel Server estate. Define, own, and continuously improve server compliance frameworks, hardening standards, and configuration baselines.

Translate regulatory, security, and client requirements into practical technical controls. Support risk identification, assessment and remediation . Assist in overseeing third-party BaaS providers to ensure full compliance with contractual agreements and service level expectations.

Technical Authority & Platform Assurance Serve as the senior technical authority for Microsoft Windows operating systems specialising in OS patching and OS upgrades. Ensure Windows platforms are securely built, patched, hardened, monitored, maintained and covered by appropriate backup. Review and approve high-risk changes, ensuring compliance, resilience, and audit readiness are maintained.

Own, manage and maintain patch management tooling (currently ManageEngine Endpoint Central), ensuring accurate configuration, maintenance and updates are applied, user training it delivered where appropriate. Ensure 3rd party suppliers of BaaS are delivering services that meet business requirements, attend service review meetings driving our requirements to delivery. Security, Risk & Resilience Own the patch management for Windows environments ensuring the latest updates are tested and applied to all devices in a timely manner supporting the needs of the business while maintaining our security posture.

Work closely with Technology Assurance and Security Operations teams to implement, validate, and continuously improve security tooling and controls. Ensure patch compliance, and remediation processes are effective and measurable, supporting the vulnerability management function. Support Business Continuity and Disaster Recovery using the backup tooling and 3rd party backup suppliers.

Monitoring, Reporting & Continuous Improvement Establish and maintain compliance metrics, dashboards, and reporting for senior IT and risk leadership. Identify systemic risks and lead continuous improvement initiatives to strengthen infrastructure assurance. Drive standardisation and automation of compliance controls where appropriate.

Work collaboratively with management to monitor and evaluate third-party BaaS suppliers’ performance against contractual commitments to Paragon. Support supplier governance activities for BaaS partners, ensuring adherence to Paragon’s contractual, performance, and risk management standards. Strategy, Stakeholder & Leadership Engagement Act as a trusted advisor to Infrastructure, Security, Risk, and Senior IT Leadership.

Support Wintel infrastructure strategy to ensure compliance-by-design. Work closely with platform engineers, cloud teams, and third-party vendors to embed governance into delivery. Provide technical mentorship and compliance guidance to engineers across the hosting organisation.

Participate in on-call and out-of-hours support as required. Travel to Paragon or client sites when necessary. Essential Skills and Experience Extensive experience supporting Microsoft Windows Server (2016/2019/2022) in large enterprise environments.

Proven experience in infrastructure compliance, governance, assurance, or risk-focused engineering roles. Strong knowledge of Active Directory, Group Policy, DNS, DHCP, and Windows security models. Strong understanding of hardening standards, vulnerability management, and security frameworks.

Strong experience working in ITIL-governed operational and change environments. Advanced documentation, reporting, and stakeholder communication skills. Experience operating across multi-site and multi-region estates.

Desirable Skills and Qualifications Knowledge of ISO 27001, NIST, CIS Benchmarks, SOC, PCI-DSS, or similar frameworks. Strong PowerShell scripting skills for compliance validation and reporting automation. Experience with VMware and Hyper-V virtualisation platforms.

Exposure to cloud and hybrid Wintel environments. Microsoft and/or security-related certifications. Experience influencing or contributing to infrastructure architecture and design decisions.