Lead Systems Engineer

Responsibilities:

• Lead the design, implementation, and maintenance of IT infrastructure, ensuring it meets business requirements and performance goals.
• Manage and optimise server environments, storage systems, and network configurations for high availability, performance, and scalability.
• Oversee complex systems migrations, upgrades, and patch management to ensure system stability and security.
• Automate system management tasks using scripting languages such as PowerShell, Bash, or Python.
• Provide expert-level troubleshooting for server, storage, and network issues, performing root cause analysis and implementing preventive measures.
• Implement and manage monitoring, logging, and alerting systems to ensure the availability and health of critical infrastructure.
• Ensure system security through proper access controls, encryption, firewall rules, and regular vulnerability assessments.
• Establish and maintain disaster recovery, backup, and business continuity strategies.
• Review and optimise the existing infrastructure for performance, cost-effectiveness, and scalability.
• Lead technical projects and initiatives, from system design to deployment, ensuring deadlines and objectives are met.
• Provide technical leadership and mentorship to junior system engineers and other team members.
• Maintain thorough documentation of system configurations, processes, and procedures to ensure operational efficiency and compliance.
• Participate in on-call rotation, providing after-hours support when required.
• Stay up to date with emerging technologies, industry trends, and best practices to ensure the organisation remains at the forefront of IT innovation

Requirements:

• Minimum 8+ years of experience in working with Microsoft Infrastructure technologies like Active Directory, DNS, DHCP, File and Print Service and SCCM.
• Extensive experience in Windows system administration.
• Proficiency with virtualisation technologies (e. g., VMware, Hyper-V) and cloud platforms (AWS, Azure).
• Solid experience with scripting and automation (PowerShell, Bash, Python, Ansible, or similar).
• Strong knowledge of networking protocols and concepts (TCP/IP, DNS, DHCP, HTTP, VPN, etc. ).
• Familiarity with storage solutions, including SAN, NAS, and backup/recovery technologies.
• Hands-on experience with configuration management tools (e. g., Ansible, Puppet, Chef).
• Understanding of IT security best practices, including data encryption, access control, and system hardening.
• Experience with monitoring and logging systems (e. g., Nagios, Prometheus, Grafana, ELK stack).
• Excellent troubleshooting, problem-solving, and analytical skills.
• Strong communication skills, with the ability to explain technical concepts to both technical and non-technical stakeholders.

Skills (Technical, Business, Leadership):

• Experience in the patch management process and deployment.
• Solid experience with Windows Servers and server hardening.
• Active Directory and on-prem AD security, including managing users, groups, GPOs, and OUs.
• Entra ID / Azure AD administration and SSO configuration for enterprise applications.
• PowerShell scripting for automation, reporting, and security tasks.
• Familiarity with VMware and virtualisation, including deploying and managing virtual servers.
• Experience in file server access management, auditing, reviewing, and fixing permissions.
• Comfortable handling service tickets and following change management processes.
• Strong understanding of security best practices in hybrid Microsoft environments.

Skills

AWS, Active Directory, Azure, Azure AD, Entra ID, Hyper-V, VMware, Windows, Windows Server