Senior Engineer, IT

About the Role:

The IT Engineer will be responsible for administering, supporting, and maintaining the organisation's Windows server and core infrastructure services. The role focuses on ensuring the stability, security, and availability of enterprise systems, with key responsibilities in Active Directory, DNS, Group Policy, Windows Server administration, patching, troubleshooting, and operational support.

The candidate will provide hands-on technical support, resolve infrastructure issues, support security and compliance requirements, and contribute to automation and continuous improvement initiatives.

Key Responsibilities:

1. Windows Server Administration

• Administer and maintain Windows Server 2016, 2019, and 2022 environments.
• Perform server installation, configuration, patching, maintenance, backup checks, and troubleshooting.
• Monitor server health, performance, availability, and capacity.
• Support server upgrades, system refreshes, and lifecycle management activities.
• Analyse system logs, event logs, and performance data to identify and resolve technical issues.
• Maintain technical documentation, operational procedures, and configuration records.

2. Active Directory, DNS, and Group Policy

• Manage and maintain Active Directory Domain Services, including user accounts, security groups, organisational units, permissions, and domain access.
• Administer and troubleshoot Group Policy Objects to enforce security settings, configuration standards, and operational requirements.
• Manage and support DNS services, including name resolution, zone management, records, replication, and troubleshooting.
• Support related core infrastructure services such as DHCP, Certificate Authority, authentication, and access control.
• Ensure Active Directory, DNS, and Group Policy configurations are secure, reliable, and properly documented.

3. Security, Compliance, and Patch Management

• Apply security updates, server patches, and configuration changes in line with organisational standards.
• Perform server hardening and support vulnerability remediation activities.
• Review system and security logs to identify potential risks, misconfigurations, or suspicious activities.
• Ensure server, Active Directory, DNS, and Group Policy configurations comply with internal security policies and audit requirements.
• Support audit preparation, compliance reporting, and remediation of security findings.

4. Incident Support and Troubleshooting

• Provide Level 2 and Level 3 support for Windows server and infrastructure-related incidents.
• Troubleshoot issues involving servers, Active Directory, DNS, Group Policy, authentication, and access control.
• Perform root cause analysis for recurring or complex technical problems.
• Work with application, network, security, and service management teams to restore services and prevent recurrence.
• Support change management activities, including planning, implementation, validation, and post-change review.
• Work with security teams to address risks, resolve audit or vulnerability findings, and improve the organisation's overall security posture.

5. Automation and Continuous Improvement

• Develop and maintain PowerShell scripts to automate routine administrative tasks.
• Automate activities such as health checks, reporting, patch validation, log review, and account administration.
• Identify opportunities to improve operational efficiency, system reliability, and support processes.
• Contribute to infrastructure improvement, system integration, and modernisation initiatives.

Required Skills and Experience:

• Strong hands-on experience in Windows Server 2016, 2019, and/or 2022 administration.
• Experience managing Active Directory, DNS, Group Policy, DHCP, and Certificate Authority services.
• Good understanding of domain services, authentication, access control, and name resolution.
• Experience with server build, configuration, patching, backup, monitoring, and troubleshooting.
• Ability to provide L2/L3 infrastructure support and resolve escalated technical issues.
• Working knowledge of server hardening, patch management, vulnerability remediation, and compliance requirements.
• PowerShell scripting experience for automation and operational support.
• Familiarity with IT service management processes such as incident, problem, change, and request management.
• Strong troubleshooting, documentation, and communication skills.

Desirable Skills:

• Basic Linux administration experience, preferably with Red Hat, Ubuntu, or SUSE.
• Scripting experience using Bash or Python.
• Familiarity with ITIL or IT service management frameworks.
• Experience with monitoring, backup, endpoint management, or configuration management tools.
• Good understanding of networking concepts such as TCP/IP, routing, firewall rules, DNS resolution, and server connectivity.
• Experience with infrastructure automation or system modernisation initiatives.