IT Infrastructure Engineer

JOB TITLE: IT Infrastructure Engineer

Job Summary:

We are seeking a highly motivated and experienced IT Infrastructure Engineer with a strong focus on Microsoft 365 administration (Intune, Microsoft Defender for Endpoint, Purview), Windows 10/11 systems management, and security hardening using GPO/CIS benchmarks. This role is ideal for an individual with a solid understanding of infrastructure security, project management, and vendor coordination, along with foundational scripting skills in PowerShell or Python. The candidate should also have a basic understanding of network administration, troubleshooting, and maintenance.

KEY RESPONSIBILITIES

1. M365 Administration:

• Manage and maintain Microsoft 365 services, including Intune, Microsoft Defender for Endpoint (MDE), Purview, and Conditional Access Policies.

• Configure and support mobile device management (MDM) and mobile application management (MAM) through Microsoft Intune.

• Implement and maintain information protection and compliance policies via Microsoft Purview.

• Monitor and respond to alerts and reports within the M365 ecosystem.

2. Windows Endpoint & Server Management:

• Manage Windows 10/11 device deployment, imaging, updates, and policies via Intune and Group Policy.

• Apply CIS benchmarks to harden Windows environments and conduct regular compliance reviews.

• Perform regular patch management, vulnerability scanning, remediation, and reporting using tools such as WSUS, Defender for Endpoint, Intune or other industry tools.

3. Infrastructure Security:

• Maintain and enforce Active Directory (AD) policies, including password policies, group management, and access controls.

• Administer Defender for Endpoint for threat detection and response.

• Support identity and access management best practices and participate in internal security audits.

• Support server hardening and remediation of findings from vulnerability scans.

4. Scripting and Automation:

• Write and maintain PowerShell or Python scripts for automating tasks such as account creation, security audits, patching, and reporting.

• Assist in creating and maintaining documentation for automation processes.

5. Project & Vendor Management:

• Lead and participate in infrastructure-related projects, including upgrades, migrations, and deployments.

• Collaborate with vendors for procurement, support, SLAs, and service management.

• Prepare project documentation, timelines, risk assessments, and regular progress updates.

6. Network Support (Basic):

• Assist with network troubleshooting including DNS, DHCP, IP conflicts, and connectivity issues.

• Support basic network maintenance, such as switch configuration checks, cable management, and interface monitoring.

• Coordinate with the networking team on infrastructure changes or issues.

Key Skills & Qualifications:

• Bachelor’s degree in information technology, Computer Science, or a related discipline.

• Minimum 5 years of experience in IT infrastructure roles, with at least 3 years in M365 administration.

• Proficiency in Microsoft Intune, Microsoft Defender for Endpoint, and Purview.

• Good understanding of Group Policy, Active Directory, CIS Benchmarks, and endpoint security best practices.

• Experience in project coordination, working with internal teams and external vendors.

• Basic to intermediate knowledge in PowerShell or Python scripting.

• Familiarity with infrastructure security principles, access controls, patching, vulnerability management, and server hardening.

• Basic understanding of network concepts, IP addressing, subnetting, and LAN/WAN troubleshooting.

• Experience with systems would be advantageous: SD-WAN (Aryaka), Zscaler (ZIA, ZPA) / Meraki (Switch / Firewall/ AP), Fortinet (FW), AD/AAD, Sophos Endpoint, Trellix Endpoint, Symantec Endpoint.

Soft Skills:

• Strong analytical and problem-solving skills

• Excellent communication and documentation abilities

• Ability to work independently and manage multiple priorities

• Familiar with global environments and able to collaborate with stakeholders across different regions.

• Attention to detail and proactive approach to system monitoring and security