My Financial Services client is seeking to recruit a AI Engineer on an initial 6 month contract based in London. It is hybrid and will require 3x days onsite per week. As a Back-End AI Engineer, you will design and deploy secure, scalable AI services that power next-generation use cases across client intelligence, document processing, and risk management. You'll work in a greenfield environment, building compliant AI pipelines using Gemini (GCP), Azure OpenAI or Self Hosting embedding security and privacy controls from experimentation to production, in alignment with the bank's cybersecurity and regulatory standards. Accountabilities & Responsibilities Architect and implement secure AI services from lab to production, ensuring scalability and compliance Develop robust APIs for LLMs, RAG pipelines, agentic workflows and document intelligence systems Embed cybersecurity and data privacy controls across all AI workflows (e.g., encryption, anonymisation, access logging) Collaborate with the CISO function on threat modeling, security reviews, and AI-specific control design. Integrate with enterprise IAM systems, enforcing RBAC, least privilege Conduct vulnerability scans, pen-test remediation, and support internal and regulatory audits (FCA, PRA) Required Knowledge & Experience Delivered greenfield AI systems in production with secure-by-design architecture Designed and managed AI lab environments using IaC, containerisation, and secure networking practices Hands-on experience with LLM implementation, including fine-tuning, prompt engineering, and secure deployment Built agentic workflows using modular LLM agents with memory, planning, and tool integration Implemented Model Context Protocol (MCP) to manage secure, auditable context injection across agentic systems Experience building RAG pipelines with strict data governance and contextual integrity Familiarity with EU AI Act, FCA cybersecurity principles, and oversight of critical systems Worked directly with cybersecurity and compliance teams in regulated deployments Implemented or maintained controls under ISO 27001, NIST, or SOC2 frameworks Technical Skills & Technologies: Languages & Frameworks Python (FastAPI), LangChain, Google AI SDK, Azure Open AI SDK Cloud & AI Platforms GCP: Vertex AI, Gemini API, Cloud Run, GCS, IAM, Secret Manager, Audit Logs Azure: Azure ML, Azure OpenAI, Key Vault, Azure Policy Experience with Self Hosting LLM Fine-tuning and prompt engineering for LLMs (e.g., GPT, Gemini, Claude) Secure deployment of LLMs via APIs with input/output filtering and logging Integration of LLMs into RAG pipelines, document intelligence, and agentic workflows Use of vector databases (e.g., FAISS, Pinecone, Chroma) for semantic search and retrieval Implementation of grounding, context injection, and response validation mechanisms Model Context Protocol (MCP) Implement secure, policy-aligned Model Context Protocol (MCP) for managing contextual memory, grounding, and session control in LLM-based systems Enforce context boundary policies, context versioning, and traceability to support auditability and prevent data leakage Integrate MCP with enterprise IAM and data governance frameworks to ensure compliant context injection and revocation Agentic Workflows Design and orchestrate agentic AI workflows using modular, goal-driven agents with memory, planning, and tool-use capabilities Implement secure agent execution environments with task decomposition, tool chaining, and feedback loops Integrate agents with enterprise systems (e.g., document stores, APIs, risk engines) while enforcing contextual integrity, rate limiting, and audit logging Apply agentic patterns to automate complex financial tasks such as client onboarding, document summarisation, and risk signal extraction Security Tooling Static code analysis (Bandit, SonarQube) Secrets scanning, encryption (at rest/in-transit), token management Identity integration (Google Identity, Azure Entra ID) Data Security & Governance RAG pipelines with data classification, masking, and DLP GDPR and data residency compliance MLOps & DevSecOps GitHub Actions, CI/CD security testing, model drift detection, audit logging Lab Environment Tooling Infrastructure-as-Code (IaC): Terraform, Pulumi Containerization & Orchestration: Docker, Kubernetes (GKE/AKS) Networking & Isolation: VPCs, private endpoints, firewall rules, network policies Data Sandboxing: Synthetic datasets, masking, DLP tooling Monitoring & Observability: Prometheus, Grafana, Cloud Logging
Sep 04, 2025
Contractor
My Financial Services client is seeking to recruit a AI Engineer on an initial 6 month contract based in London. It is hybrid and will require 3x days onsite per week. As a Back-End AI Engineer, you will design and deploy secure, scalable AI services that power next-generation use cases across client intelligence, document processing, and risk management. You'll work in a greenfield environment, building compliant AI pipelines using Gemini (GCP), Azure OpenAI or Self Hosting embedding security and privacy controls from experimentation to production, in alignment with the bank's cybersecurity and regulatory standards. Accountabilities & Responsibilities Architect and implement secure AI services from lab to production, ensuring scalability and compliance Develop robust APIs for LLMs, RAG pipelines, agentic workflows and document intelligence systems Embed cybersecurity and data privacy controls across all AI workflows (e.g., encryption, anonymisation, access logging) Collaborate with the CISO function on threat modeling, security reviews, and AI-specific control design. Integrate with enterprise IAM systems, enforcing RBAC, least privilege Conduct vulnerability scans, pen-test remediation, and support internal and regulatory audits (FCA, PRA) Required Knowledge & Experience Delivered greenfield AI systems in production with secure-by-design architecture Designed and managed AI lab environments using IaC, containerisation, and secure networking practices Hands-on experience with LLM implementation, including fine-tuning, prompt engineering, and secure deployment Built agentic workflows using modular LLM agents with memory, planning, and tool integration Implemented Model Context Protocol (MCP) to manage secure, auditable context injection across agentic systems Experience building RAG pipelines with strict data governance and contextual integrity Familiarity with EU AI Act, FCA cybersecurity principles, and oversight of critical systems Worked directly with cybersecurity and compliance teams in regulated deployments Implemented or maintained controls under ISO 27001, NIST, or SOC2 frameworks Technical Skills & Technologies: Languages & Frameworks Python (FastAPI), LangChain, Google AI SDK, Azure Open AI SDK Cloud & AI Platforms GCP: Vertex AI, Gemini API, Cloud Run, GCS, IAM, Secret Manager, Audit Logs Azure: Azure ML, Azure OpenAI, Key Vault, Azure Policy Experience with Self Hosting LLM Fine-tuning and prompt engineering for LLMs (e.g., GPT, Gemini, Claude) Secure deployment of LLMs via APIs with input/output filtering and logging Integration of LLMs into RAG pipelines, document intelligence, and agentic workflows Use of vector databases (e.g., FAISS, Pinecone, Chroma) for semantic search and retrieval Implementation of grounding, context injection, and response validation mechanisms Model Context Protocol (MCP) Implement secure, policy-aligned Model Context Protocol (MCP) for managing contextual memory, grounding, and session control in LLM-based systems Enforce context boundary policies, context versioning, and traceability to support auditability and prevent data leakage Integrate MCP with enterprise IAM and data governance frameworks to ensure compliant context injection and revocation Agentic Workflows Design and orchestrate agentic AI workflows using modular, goal-driven agents with memory, planning, and tool-use capabilities Implement secure agent execution environments with task decomposition, tool chaining, and feedback loops Integrate agents with enterprise systems (e.g., document stores, APIs, risk engines) while enforcing contextual integrity, rate limiting, and audit logging Apply agentic patterns to automate complex financial tasks such as client onboarding, document summarisation, and risk signal extraction Security Tooling Static code analysis (Bandit, SonarQube) Secrets scanning, encryption (at rest/in-transit), token management Identity integration (Google Identity, Azure Entra ID) Data Security & Governance RAG pipelines with data classification, masking, and DLP GDPR and data residency compliance MLOps & DevSecOps GitHub Actions, CI/CD security testing, model drift detection, audit logging Lab Environment Tooling Infrastructure-as-Code (IaC): Terraform, Pulumi Containerization & Orchestration: Docker, Kubernetes (GKE/AKS) Networking & Isolation: VPCs, private endpoints, firewall rules, network policies Data Sandboxing: Synthetic datasets, masking, DLP tooling Monitoring & Observability: Prometheus, Grafana, Cloud Logging
IT Support & Security Engineer Portsmouth HQ Salary 35,000 - 40,000 Role Overview We are seeking an enthusiastic and motivated IT Support and Security Engineer to join our team. This role is ideal for someone early in their IT career who has a strong interest in Microsoft technologies and is eager to develop their skills within a supportive environment. The successful candidate will play a key role in maintaining and securing the IT infrastructure, supporting users, and contributing to the development of the digital strategy of the company. Key Responsibilities Provide IT support to internal users across the organisation. Monitor and manage security tools including Microsoft Defender. Assist in the administration of Microsoft Azure and Power Platform services. Support onboarding and offboarding processes including device setup and user access. Maintain documentation of IT systems, procedures, and security protocols. Collaborate with other departments to understand IT needs and deliver effective solutions. Stay informed about emerging technologies and contribute ideas for innovation. Ensure compliance with data protection regulations and company policies Facilitate building and secure accessibility requirements on site Required Skills and Attributes Experienced with Microsoft 365 toolsets to support end users Knowledge of MS Defender for threat detection monitoring A good understanding of IT support principles (ITIL desirable) A good understanding of security practices ad standards (ideally Secure by Design, Cyber Essentials, ISO27001). Familiarity with Microsoft 365 CoPilot and its use in productivity and support workflows Experience with Microsoft 365 tenant administration Exposure to endpoint management and security monitoring Familiarity with cloud platforms and automation tools Experience with Power Platform automation (Power Automate, Power BI) or Azure AI services Spectrum IT Recruitment (South) Limited is acting as an Employment Agency in relation to this vacancy.
Sep 04, 2025
Full time
IT Support & Security Engineer Portsmouth HQ Salary 35,000 - 40,000 Role Overview We are seeking an enthusiastic and motivated IT Support and Security Engineer to join our team. This role is ideal for someone early in their IT career who has a strong interest in Microsoft technologies and is eager to develop their skills within a supportive environment. The successful candidate will play a key role in maintaining and securing the IT infrastructure, supporting users, and contributing to the development of the digital strategy of the company. Key Responsibilities Provide IT support to internal users across the organisation. Monitor and manage security tools including Microsoft Defender. Assist in the administration of Microsoft Azure and Power Platform services. Support onboarding and offboarding processes including device setup and user access. Maintain documentation of IT systems, procedures, and security protocols. Collaborate with other departments to understand IT needs and deliver effective solutions. Stay informed about emerging technologies and contribute ideas for innovation. Ensure compliance with data protection regulations and company policies Facilitate building and secure accessibility requirements on site Required Skills and Attributes Experienced with Microsoft 365 toolsets to support end users Knowledge of MS Defender for threat detection monitoring A good understanding of IT support principles (ITIL desirable) A good understanding of security practices ad standards (ideally Secure by Design, Cyber Essentials, ISO27001). Familiarity with Microsoft 365 CoPilot and its use in productivity and support workflows Experience with Microsoft 365 tenant administration Exposure to endpoint management and security monitoring Familiarity with cloud platforms and automation tools Experience with Power Platform automation (Power Automate, Power BI) or Azure AI services Spectrum IT Recruitment (South) Limited is acting as an Employment Agency in relation to this vacancy.
We are looking for an IT Administrator to work a legal claims client in Rawtenstall The role is Hybrid working 3 days in office and 2 WFH Job Role IT Administrator Reports To: Technical Director We are seeking a proactive, highly skilled IT Administrator to join our growing technology team during a pivotal stage of company growth. You will be responsible for ensuring the stability, security, and scalability of our IT infrastructure, especially in light of an upcoming full office relocation and network rebuild. You will collaborate with our 1st line support technician and external vendors, taking the technical lead on networking, security, cloud service integration, and hardware procurement. This is an exciting opportunity to design and implement systems with the future in mind for a rapidly growing company (2+ new staff per week). Key Responsibilities: Lead IT infrastructure setup at new office location: networking (LAN/WAN), WiFi access points, structured cabling, patching, VLANs, switches, firewalls, printers, CCTV, power redundancies, and ISP configuration. Manage cloud environments (currently Google Workspace) and lead the transition planning toward Microsoft Active Directory (Azure AD / Entra ID), as appropriate. Oversee endpoint management across macOS and Windows environments (using MDM tools like Jamf, Intune, etc.). Procure, configure, and maintain hardware (laptops, servers, networking gear). Implement IT policies, device encryption, backups, and cybersecurity best practices. Administer users, groups, access control, and device enrolment. Maintain asset inventory, licenses, and documentation. Monitor and resolve escalated issues from the 1st Line Support Technician. Participate in long-term planning for disaster recovery, redundancy, and scalability. Liaise with external service providers and vendors. Provide onboarding/offboarding technical support and training. Key Skills & Experience: 4+ years in IT Administrator, Systems Engineer, or Infrastructure roles. Proven experience with LAN/WAN design, WiFi setup, VLANs, patching, UPS, etc. Google Workspace administration and transition knowledge to Microsoft environments (e.g., AD/Azure AD). Experience with MDM/endpoint management across Windows and macOS. Basic scripting and automation (PowerShell, Bash). Familiarity with cloud-first environments and SaaS platforms. Security awareness: MFA, SSO, password policies, backups, zero-trust principles. Excellent documentation, planning, and communication skills. Preferred Qualifications: Microsoft certifications (e.g., AZ-104, MD-102, SC-300) Networking certifications (e.g., CompTIA Network+, Cisco CCNA) Previous experience in relocation or office fit-outs Experience supporting rapid company scale-up
Sep 03, 2025
Full time
We are looking for an IT Administrator to work a legal claims client in Rawtenstall The role is Hybrid working 3 days in office and 2 WFH Job Role IT Administrator Reports To: Technical Director We are seeking a proactive, highly skilled IT Administrator to join our growing technology team during a pivotal stage of company growth. You will be responsible for ensuring the stability, security, and scalability of our IT infrastructure, especially in light of an upcoming full office relocation and network rebuild. You will collaborate with our 1st line support technician and external vendors, taking the technical lead on networking, security, cloud service integration, and hardware procurement. This is an exciting opportunity to design and implement systems with the future in mind for a rapidly growing company (2+ new staff per week). Key Responsibilities: Lead IT infrastructure setup at new office location: networking (LAN/WAN), WiFi access points, structured cabling, patching, VLANs, switches, firewalls, printers, CCTV, power redundancies, and ISP configuration. Manage cloud environments (currently Google Workspace) and lead the transition planning toward Microsoft Active Directory (Azure AD / Entra ID), as appropriate. Oversee endpoint management across macOS and Windows environments (using MDM tools like Jamf, Intune, etc.). Procure, configure, and maintain hardware (laptops, servers, networking gear). Implement IT policies, device encryption, backups, and cybersecurity best practices. Administer users, groups, access control, and device enrolment. Maintain asset inventory, licenses, and documentation. Monitor and resolve escalated issues from the 1st Line Support Technician. Participate in long-term planning for disaster recovery, redundancy, and scalability. Liaise with external service providers and vendors. Provide onboarding/offboarding technical support and training. Key Skills & Experience: 4+ years in IT Administrator, Systems Engineer, or Infrastructure roles. Proven experience with LAN/WAN design, WiFi setup, VLANs, patching, UPS, etc. Google Workspace administration and transition knowledge to Microsoft environments (e.g., AD/Azure AD). Experience with MDM/endpoint management across Windows and macOS. Basic scripting and automation (PowerShell, Bash). Familiarity with cloud-first environments and SaaS platforms. Security awareness: MFA, SSO, password policies, backups, zero-trust principles. Excellent documentation, planning, and communication skills. Preferred Qualifications: Microsoft certifications (e.g., AZ-104, MD-102, SC-300) Networking certifications (e.g., CompTIA Network+, Cisco CCNA) Previous experience in relocation or office fit-outs Experience supporting rapid company scale-up
Ibstock Plc Apprenticeship We are currently recruiting for an Apprentice Hardware Engineer to join our team at our Ibstock Head Office in Ibstock, Coalville, LE67 6HS. You will study will be the Information Communication Technician L3 Apprenticeship. Duration 18 months The starting salary for this role is £20,000. This programme offers you the chance to train for a highly skilled role, gain a nationally recognised qualification and get paid while you learn! Upon completion of the programme you will have attained the skills and knowledge to start your career with Ibstock Group. Job Purpose • In this role you will be providing our colleagues with the equipment they need to be effective in their functions, empowering them to get the most value from their tech tools.• Rectifying faults and providing advice on a wide range of hardware including audio visual equipment, phones, operating systems, and related software.• Working to solve our customers questions first time in a friendly way and offering training and guidance to avoid a recurrence• When onboarding a new colleague, you will often be their first experience of tech, so we are looking for someone with great hardware knowledge and customer service skills.• Our hardware fleet is a valuable asset, you will take pride in maintaining it to the highest standards throughout its life and disposing of it responsibly afterwards. Key Accountabilities Procurement and configuration of hardware, ensuring devices are prepared and ready for new starters or to replace faulty equipment. Maintain an organised tech storeroom, keeping stock levels accurate, safe, and ready for quick deployment. Develop, maintain, and update standard images for desktop and laptop devices to ensure consistent builds and minimal disruption for end-users. Track and document the full lifecycle of all hardware, including issuing, maintenance, returns, refurbishment, and secure disposal. Provide advanced troubleshooting for hardware issues, acting as an escalation point for 1st line support when required. Repair, patch, and maintain devices to ensure maximum uptime, reliability, and compliance with cyber security and audit requirements. Liaise with suppliers and vendors for warranty claims, parts replacement, repairs, and procurement of new hardware. Respond to and resolve IT incidents and service requests promptly and professionally, ensuring all tickets are logged, prioritised, and resolved in line with agreed SLAs. Contribute to knowledge sharing by creating documentation or guides to help improve support processes Support hardware audits and asset verification exercises to maintain accurate records and reduce losses. Knowledge, Skills and Experience Strong interest in repairing and maintaining PCs, laptops, and mobile devices, including upgrades, imaging, patching, and component-level repairs. Understanding of core hardware components (motherboards, drives, memory, power supplies) and willingness to expand technical expertise. Familiarity with networking fundamentals (Wi-Fi, IP addressing, basic connectivity troubleshooting). Experience or interest in diagnostic tools and performance testing software. Awareness of data protection and security, including safe data handling and secure data erasure practices. Passionate about customer service, ensuring clear, friendly, and professional support for colleagues. Excellent communication skills (written and verbal) with the ability to explain technical concepts in simple terms. Organised and methodical approach, capable of prioritising multiple tasks in a busy, fast-paced environment. Knowledge of Microsoft Windows 10/11, Microsoft 365, and Apple iOS devices. Proactive team player with the ability to take ownership of tasks, see them through to completion, and adapt to changing priorities. Keen interest in emerging technologies and a desire to develop practical IT skills through hands-on learning. Essential requirements: You will have a minimum of 2 GCSE's at Grade 4-9 (or equivalent) in Mathematics and English. Think you can make a difference? WE ARE your future. More details: Full time, permanent role Competitive salary Digicare+ Provided by Aviva 10% matched pension, administered by Legal and General 3x life insurance Share Save scheme eligibility Full access to Employee Assistance programme for self and family members Access to high street retail discounts platform - with access to discounts at Tesco, Asda, etc Personal development and career progression opportunities Ibstock Plc are committed and passionate about building a diverse environment. We are proud to be an Equal Opportunity employer. You will receive consideration for employment without regard to gender, gender identity or expression, sexual orientation, race, religion, national origin, disability or age.
Sep 01, 2025
Full time
Ibstock Plc Apprenticeship We are currently recruiting for an Apprentice Hardware Engineer to join our team at our Ibstock Head Office in Ibstock, Coalville, LE67 6HS. You will study will be the Information Communication Technician L3 Apprenticeship. Duration 18 months The starting salary for this role is £20,000. This programme offers you the chance to train for a highly skilled role, gain a nationally recognised qualification and get paid while you learn! Upon completion of the programme you will have attained the skills and knowledge to start your career with Ibstock Group. Job Purpose • In this role you will be providing our colleagues with the equipment they need to be effective in their functions, empowering them to get the most value from their tech tools.• Rectifying faults and providing advice on a wide range of hardware including audio visual equipment, phones, operating systems, and related software.• Working to solve our customers questions first time in a friendly way and offering training and guidance to avoid a recurrence• When onboarding a new colleague, you will often be their first experience of tech, so we are looking for someone with great hardware knowledge and customer service skills.• Our hardware fleet is a valuable asset, you will take pride in maintaining it to the highest standards throughout its life and disposing of it responsibly afterwards. Key Accountabilities Procurement and configuration of hardware, ensuring devices are prepared and ready for new starters or to replace faulty equipment. Maintain an organised tech storeroom, keeping stock levels accurate, safe, and ready for quick deployment. Develop, maintain, and update standard images for desktop and laptop devices to ensure consistent builds and minimal disruption for end-users. Track and document the full lifecycle of all hardware, including issuing, maintenance, returns, refurbishment, and secure disposal. Provide advanced troubleshooting for hardware issues, acting as an escalation point for 1st line support when required. Repair, patch, and maintain devices to ensure maximum uptime, reliability, and compliance with cyber security and audit requirements. Liaise with suppliers and vendors for warranty claims, parts replacement, repairs, and procurement of new hardware. Respond to and resolve IT incidents and service requests promptly and professionally, ensuring all tickets are logged, prioritised, and resolved in line with agreed SLAs. Contribute to knowledge sharing by creating documentation or guides to help improve support processes Support hardware audits and asset verification exercises to maintain accurate records and reduce losses. Knowledge, Skills and Experience Strong interest in repairing and maintaining PCs, laptops, and mobile devices, including upgrades, imaging, patching, and component-level repairs. Understanding of core hardware components (motherboards, drives, memory, power supplies) and willingness to expand technical expertise. Familiarity with networking fundamentals (Wi-Fi, IP addressing, basic connectivity troubleshooting). Experience or interest in diagnostic tools and performance testing software. Awareness of data protection and security, including safe data handling and secure data erasure practices. Passionate about customer service, ensuring clear, friendly, and professional support for colleagues. Excellent communication skills (written and verbal) with the ability to explain technical concepts in simple terms. Organised and methodical approach, capable of prioritising multiple tasks in a busy, fast-paced environment. Knowledge of Microsoft Windows 10/11, Microsoft 365, and Apple iOS devices. Proactive team player with the ability to take ownership of tasks, see them through to completion, and adapt to changing priorities. Keen interest in emerging technologies and a desire to develop practical IT skills through hands-on learning. Essential requirements: You will have a minimum of 2 GCSE's at Grade 4-9 (or equivalent) in Mathematics and English. Think you can make a difference? WE ARE your future. More details: Full time, permanent role Competitive salary Digicare+ Provided by Aviva 10% matched pension, administered by Legal and General 3x life insurance Share Save scheme eligibility Full access to Employee Assistance programme for self and family members Access to high street retail discounts platform - with access to discounts at Tesco, Asda, etc Personal development and career progression opportunities Ibstock Plc are committed and passionate about building a diverse environment. We are proud to be an Equal Opportunity employer. You will receive consideration for employment without regard to gender, gender identity or expression, sexual orientation, race, religion, national origin, disability or age.
