Forensic DBA

We're looking for a senior Forensic DBA to investigate, reconstruct and explain what has happened inside business-critical databases on a UK public sector programme. You will work with security, delivery and engineering teams to find the root cause of data incidents, preserve evidence, and make recommendations that stop them recurring. At SFIA Level 5 you'll work independently, advise at senior level, and set the standard for how the programme logs, audits and recovers its data.,

• Investigate data incidents, such as unexpected changes, deletions, corruption, performance failures and suspected misuse, and establish the root cause.
• Reconstruct events using transaction logs, WAL archives, point-in-time recovery (PITR), audit logs and replication streams.
• Preserve and document evidence in a way that can be relied on in security and compliance reviews.
• Check data integrity and spot tampering or unauthorised access.
• Advise on audit and logging design (for example pgaudit and database activity monitoring) so future incidents can be traced.
• Support live incident response, including performance tuning and fault finding on production databases.
• Review backup, disaster recovery, replication and archiving arrangements.
• Support database migrations and upgrades, including near-zero-downtime approaches.
• Write clear investigation reports and recommendations for technical and non-technical audiences.
• Advise developers and architects on SQL, indexing and schema design
  
  Essential:
• SC cleared, mandatory.
• Extensive hands-on experience as a senior DBA, with strong PostgreSQL skills.
• Experience on AWS managed databases (RDS and Aurora).
• Proven experience with backup, PITR, logical replication, high availability and disaster recovery.
• Strong SQL and performance tuning skills, including index strategy.
• Experience diagnosing live production incidents and finding root causes.
• Good understanding of database security, auditing and logging.
• Linux and bash Scripting.
• Strong written reporting and stakeholder communication.
• Able to work independently at SFIA Level 5.
Desirable:
• Experience of database or digital forensics, evidence handling or incident response.
• Experience in central government or other regulated environments.
• Infrastructure as code (Terraform).
• Data modelling and data warehouse experience (3NF, dimensional).
• Migration experience (for example Oracle or MySQL to PostgreSQL).
• Git, Docker and Kubernetes.
  
  At Scrumconnect, we are more than just a consultancy. We are a collaborative team focused on delivering impactful digital transformation services across government and enterprise organisations.
As part of our team, you will benefit from:
• Exposure to major public sector digital programmes.
• A collaborative and inclusive working culture.
• Hands-on experience working within agile delivery environments.