IT Infrastructure Engineer

Salary: $6,000 – $7,500 per month

We are seeking a skilled and driven IT Infrastructure Engineer to join our technology team. In this role, you will be responsible for implementing and operationalizing new projects and strategic initiatives as directed by management. You will operate across a hybrid environment, bridging on-premises infrastructure with cloud-based services, and will play a hands-on role in ensuring systems are secure, scalable, and aligned with business objectives.

KEY RESPONSIBILITIES

· Design, implement, and manage infrastructure projects and initiatives in alignment with management directives and IT roadmaps.

· Administer and maintain hybrid identity environments spanning Windows Active Directory (AD) and Microsoft Entra ID, including user provisioning, group policies, and SSO integrations.

· Manage and optimise Microsoft Azure environments, including virtual machines, networking, storage, and cloud-native services.

· Configure, monitor, and maintain network devices including Fortinet firewalls — handling policy management, VPN configurations, and threat prevention.

· Develop and maintain automation scripts (PowerShell, Python, or Bash) to streamline operations, reduce manual effort, and improve consistency.

· Integrate systems and automate workflows via REST APIs, including interactions with M365 services, Azure, and third-party platforms.

· Support and enforce cybersecurity best practices across the environment — including vulnerability assessments, access controls, patch management, and incident response.

· Manage and administer Microsoft 365 services including Exchange Online, Teams, SharePoint, Intune, and Defender.

· Contribute to ITIL-aligned processes including change management, incident management, problem management, and service requests.

· Produce clear technical documentation, runbooks, and architecture diagrams for implemented solutions.

· Provide Tier 2/3 escalation support and collaborate with cross-functional teams on infrastructure-related matters.

TECHNICAL REQUIREMENTS

Identity & Directory Services

· Hands-on experience with Windows Active Directory — GPO, DNS, DHCP, FSMO roles, trust relationships.

· Practical knowledge of Microsoft Entra ID — Conditional Access, MFA, Privileged Identity Management (PIM), Entra Connect / cloud sync.

Cloud & Azure

· Demonstrable experience managing Azure environments — compute, networking (VNet, NSG, Azure Firewall), storage, and resource governance.

· Familiarity with Azure security tools: Microsoft Defender for Cloud, Sentinel, and Azure Monitor.

· Understanding of Azure Landing Zones, subscription management, and cost optimisation.

Networking & Security

· Practical experience with Fortinet products — FortiGate firewall administration, FortiManager, SSL/IPSec VPN, security policies, and firmware management.

· Strong networking fundamentals: TCP/IP, routing (BGP/OSPF), VLANs, switching, and SD-WAN.

· Understanding of cybersecurity principles — zero trust, least privilege, network segmentation, and vulnerability management.

Scripting & Automation

· Proficient in at least one scripting language: PowerShell (preferred), Python, or Bash — for task automation, reporting, and system administration.

· Experience consuming and integrating REST APIs — building integrations with platforms such as Microsoft Graph API, Azure REST API, or third-party services.

Microsoft 365

· Working knowledge of M365 administration across Exchange Online, Teams, SharePoint, OneDrive, Intune (MDM/MAM), and Microsoft Defender.

· Familiarity with Microsoft 365 compliance tools and data governance features is an advantage.

QUALIFICATIONS & EXPERIENCE

· Diploma or Bachelor's degree in Information Technology, Computer Science, or a related field.

· Minimum 3–5 years of hands-on experience in an IT infrastructure or systems engineering role.

· Experience operating in a hybrid (on-premises + cloud) environment is essential.

· Relevant certifications are highly regarded:

• Microsoft Certified: Azure Administrator Associate (AZ-104)

• Microsoft 365 Certified: Enterprise Administrator Expert or Fundamentals

• Fortinet NSE 4 or above

• ITIL Foundation (v3 or v4)

• CompTIA Security+ or equivalent

COMPETENCIES & ATTRIBUTES

· Strong analytical and problem-solving skills with the ability to troubleshoot complex infrastructure issues.

· E􀆯ective communicator — able to convey technical concepts clearly to both technical and non-technical stakeholders.

· Self-motivated with the ability to manage multiple projects and priorities simultaneously.

· Collaborative team player who is also capable of working independently.

· Detail-oriented with a commitment to documentation and knowledge sharing.