ICT Infrastructure Engineer

Role responsibilities

• Infrastructure operations (core accountability)

Manage the day-to-day operation of the hybrid ICT estate, ensuring the availability, performance, security, and reliability of core services.

• Networking (switching, routing, firewalls)

Manage and optimise LAN/WAN infrastructure, including switching, routing, firewalls, and site connectivity across MPLS, VPN, internet breakout, and Azure environments.

• Cloud (Azure)

Administer and optimise Azure IaaS and PaaS services, including virtual machines, networking, storage, and backup solutions.

• VMware (on-premise virtualisation)

Manage and maintain VMware environments ensuring platform stability, performance, and efficient resource utilisation.

• Governance and compliance (ISO 27001 / Cyber Essentials Plus)

Ensure infrastructure services align with security policies, governance standards, and regulatory requirements, embedding secure-by-design and least-privilege principles throughout the environment.

• Identity and access (Entra ID / AD DS)

Administer and maintain identity services across Entra ID and on-premise Active Directory, supporting user lifecycle management, group policies, and hybrid identity integration.

• Exchange Online administration

Administer Exchange Online and associated mail security platforms, managing mail flow, mailbox administration, hybrid configurations, and email security controls including anti-phishing, anti-spam, and transport rules.

• Microsoft 365 productivity suite administration

Administer core Microsoft 365 services including SharePoint, OneDrive, Teams, and associated collaboration platforms, ensuring secure, reliable, and effective service delivery.

• Service improvement and transformation

Identify opportunities to standardise, automate, and improve ICT services, contributing to the design and delivery of infrastructure solutions aligned to organisational strategy.

• Stakeholder engagement

Work collaboratively with internal teams and service users to understand requirements and improve service delivery, providing clear technical guidance to both technical and non-technical stakeholders.

• Cyber security (Microsoft Defender for Endpoint focus)

Administer and optimise Microsoft Defender for Endpoint across the server and endpoint estate, ensuring effective protection, detection, response, and vulnerability management capabilities.

• Escalation point

Act as an escalation point for L1 and L2 engineers, providing technical guidance and support across end-user computing services including Intune, Microsoft Teams, Microsoft 365 productivity applications, and Microsoft Defender technologies.

Essential

• Degree level education (or equivalent) in computer science or a related field of study, or significant relevant business experience.
• Up to date technical knowledge of ICT, and the technology landscape, with evidence of keeping up to date with innovations for the benefit of the organisation.
• Minimum of 2 years’ experience in an Infrastructure Engineer role or similar role.
• Experience supporting and maintaining a hybrid infrastructure environment (cloud- Azure and on-premise – VMware)
• Hands on experience administering Azure services (IaaS, networking, identity integration, backup, firewalls, VNETs)
• Experience managing Active Directory and Entra ID in a hybrid configuration
• Ability to set and manage priorities. Negotiating timescales and balancing work objectives. Delivering effectively, overcoming barriers to change.
• Ability to diagnose issues methodically and drive resolution under pressure
• Ability to communicate technical issues clearly to non-technical stakeholders
• Willingness to accept and work to our Values during the course of employment.
• Committed to undertake relevant training and continuous professional development opportunities.

Desirable

• Professional ICT qualifications (such as ITIL or accredited status such as Chartered IT Professional CITP), or the equivalent gained through relevant training, experience and continuing professional development.
• Experience with the configuration and management of Meraki firewalls, switches and AP’s
• Experience working in an environment certified to CE+ or ISO27001