IT Infrastructure Engineer

JOB TITLE: IT Infrastructure Engineer

Job Summary:

We are seeking a highly motivated and experienced IT Infrastructure Engineer with a strong focus on Microsoft 365 administration (Intune, Microsoft Defender for Endpoint, Purview), Windows 10/11 systems management, and security hardening using GPO/CIS benchmarks. This role is ideal for an individual with a solid understanding of infrastructure security, project management, and vendor coordination, along with foundational scripting skills in PowerShell or Python. The candidate should also have a basic understanding of network administration, troubleshooting, and maintenance.

KEY RESPONSIBILITIES

1. M365 Administration:

. Manage and maintain Microsoft 365 services, including Intune, Microsoft Defender for Endpoint (MDE), Purview, and Conditional Access Policies.

. Configure and support mobile device management (MDM) and mobile application management (MAM) through Microsoft Intune.

. Implement and maintain information protection and compliance policies via Microsoft Purview.

. Monitor and respond to alerts and reports within the M365 ecosystem.

2. Windows Endpoint & Server Management:

. Manage Windows 10/11 device deployment, imaging, updates, and policies via Intune and Group Policy.

. Apply CIS benchmarks to harden Windows environments and conduct regular compliance reviews.

. Perform regular patch management, vulnerability scanning, remediation, and reporting using tools such as WSUS, Defender for Endpoint, Intune or other industry tools.

3. Infrastructure Security:

. Maintain and enforce Active Directory (AD) policies, including password policies, group management, and access controls.

. Administer Defender for Endpoint for threat detection and response.

. Support identity and access management best practices and participate in internal security audits.

. Support server hardening and remediation of findings from vulnerability scans.

4. Scripting and Automation:

. Write and maintain PowerShell or Python scripts for automating tasks such as account creation, security audits, patching, and reporting.

. Assist in creating and maintaining documentation for automation processes.

5. Project & Vendor Management:

. Lead and participate in infrastructure-related projects, including upgrades, migrations, and deployments.

. Collaborate with vendors for procurement, support, SLAs, and service management.

. Prepare project documentation, timelines, risk assessments, and regular progress updates.

6. Network Support (Basic):

. Assist with network troubleshooting including DNS, DHCP, IP conflicts, and connectivity issues.

. Support basic network maintenance, such as switch configuration checks, cable management, and interface monitoring.

. Coordinate with the networking team on infrastructure changes or issues.

Key Skills & Qualifications:

. Bachelor's degree in information technology, Computer Science, or a related discipline.

. Minimum 5 years of experience in IT infrastructure roles, with at least 3 years in M365 administration.

. Proficiency in Microsoft Intune, Microsoft Defender for Endpoint, and Purview.

. Good understanding of Group Policy, Active Directory, CIS Benchmarks, and endpoint security best practices.

. Experience in project coordination, working with internal teams and external vendors.

. Basic to intermediate knowledge in PowerShell or Python scripting.

. Familiarity with infrastructure security principles, access controls, patching, vulnerability management, and server hardening.

. Basic understanding of network concepts, IP addressing, subnetting, and LAN/WAN troubleshooting.

. Experience with systems would be advantageous: SD-WAN (Aryaka), Zscaler (ZIA, ZPA) / Meraki (Switch / Firewall/ AP), Fortinet (FW), AD/AAD, Sophos Endpoint, Trellix Endpoint, Symantec Endpoint.

Soft Skills:

. Strong analytical and problem-solving skills

. Excellent communication and documentation abilities

. Ability to work independently and manage multiple priorities

. Familiar with global environments and able to collaborate with stakeholders across different regions.

. Attention to detail and proactive approach to system monitoring and security