Systems Engineer - Initial 6 months - On Site in Oxford

Role Overview
We are looking for an Associate Systems Engineer to join on a 6-month fully on-site contract based in Abingdon, Oxford. The role supports the security and modernisation of laboratory and operational technology (OT) environments across global sites, executing active security workstreams including Non-Attributable Account remediation, vulnerability management, software governance, and USB data transfer controls - bringing lab OT posture in line with enterprise security standards.

Key Responsibilities

• Support the design, testing, and execution of the Non-Attributable Account (NAA) remediation programme across lab environments, managing host allow/deny lists within Active Directory and coordinating password reset mechanisms across pilot and full rollout phases
• Assist in defining and implementing a policy-based software allowlist across lab workstations and instrument PCs, identifying unauthorised software and managing formal exception request processes
• Support CrowdStrike EDR sensor deployment and gap closure across lab endpoints, contributing to OS patching, end-of-life system remediation, and vulnerability triage in coordination with the infrastructure team
• Assess USB usage patterns across lab sites and implement a tiered USB restriction policy balancing security controls with legitimate scientific workflows
• Serve as a hands-on technical resource across global lab locations including Oxford and Boston, maintaining documentation of system configurations, service account inventories, and workstream progress via ServiceNow

Skills & Experience

• Proficiency in Active Directory administration - OU structure, GPOs, user and service account management, and authentication protocols including RC4, NTLM, and Kerberos
• Working knowledge of endpoint detection and response platforms, particularly CrowdStrike Falcon, with experience in USB restriction and software control policies on Windows endpoints
• Understanding of OT and lab network architecture including isolated network segments, instrument connectivity, and associated security risks, ideally within a biopharma or GxP environment
• Experience with privileged access management tooling such as BeyondTrust, and familiarity with ITSM platforms such as ServiceNow for demand intake and ticket management
• Strong analytical and communication skills with the ability to manage multiple concurrent workstreams and engage effectively with lab scientists, Business System Owners, and technical stakeholders - PowerShell proficiency preferred

Contract Details

• Duration: Initial 6 months
• Location: On Site in Oxford
• Rate: £350 day (inside IR35)