System Engineer

We are looking for an experienced and hands-on System Engineer to join our IT team and take ownership of the organisation's infrastructure, cloud, network, security monitoring, and Microsoft 365 environment.

The successful candidate will be responsible for the implementation, administration, monitoring, troubleshooting, security, and continuous improvement of our IT infrastructure. The role covers a broad technology stack including Amazon Web Services (AWS), network infrastructure, servers, Microsoft 365, SIEM/security monitoring, backup, and endpoint/infrastructure services.

This is a hands-on engineering role suited to someone who enjoys solving technical problems, improving infrastructure reliability, and working across multiple technology domains. You will work closely with the IT Manager, vendors, internal users, and other stakeholders to ensure a secure, stable, and scalable IT environment.

Key Responsibilities

1. Cloud Infrastructure – AWS

• Design, deploy, administer, and maintain AWS cloud infrastructure including EC2, VPC, IAM, S3, RDS and other relevant AWS services.

• Monitor AWS infrastructure performance, availability, capacity, and costs.

• Manage cloud networking including VPCs, subnets, security groups, routing, VPN and connectivity.

• Implement and maintain cloud security controls, access policies, logging, and monitoring.

• Support cloud migration, infrastructure upgrades, and new cloud-based projects.

• Apply infrastructure-as-code and automation practices where appropriate.

• Review AWS usage and identify opportunities for cost optimisation, performance improvement, and increased reliability.

• Maintain appropriate documentation for cloud architecture, configurations, and operational procedures.

2. Network Infrastructure

• Administer and maintain corporate network infrastructure including switches, routers, firewalls, Wi-Fi, VPN and Internet connectivity.

• Monitor network performance, availability, capacity, and security.

• Troubleshoot network connectivity, routing, DNS, DHCP, VLAN and VPN issues.

• Implement and maintain network segmentation and appropriate access controls.

• Work with Internet Service Providers, network vendors, and managed service providers when required.

• Maintain network diagrams, IP addressing documentation, configuration backups, and technical documentation.

• Support network expansion, upgrades, and infrastructure improvement projects.

3. System & Infrastructure Administration

• Manage and maintain Windows servers, virtualisation platforms, storage, backup systems and other core infrastructure.

• Perform system monitoring, patching, upgrades, maintenance, and capacity planning.

• Troubleshoot infrastructure incidents and perform root-cause analysis.

• Ensure systems are maintained according to security, availability, and operational requirements.

• Manage backup and recovery processes and periodically validate backup integrity and restoration procedures.

• Support disaster recovery and business continuity activities.

• Maintain accurate system documentation, asset information, configuration records, and operational procedures.

4. SIEM, Security & Monitoring

• Administer and monitor the organisation's SIEM/security monitoring platform.

• Collect, monitor, and analyse security logs from servers, network devices, cloud services, endpoints, and Microsoft 365.

• Investigate security alerts and suspicious activities and coordinate incident response when required.

• Develop and maintain appropriate monitoring rules, alerts, dashboards, and reporting.

• Assist with vulnerability management, security hardening, patch management, and remediation activities.

• Support security investigations and provide technical analysis during security incidents.

• Work with internal and external security teams/vendors to improve the organisation's security posture.

• Ensure appropriate logging, monitoring, and retention requirements are maintained.

5. Microsoft 365 & Identity Mangement

• Administer and support Microsoft 365 services, including Exchange Online, Teams, SharePoint, OneDrive and related services.

• Manage Microsoft Entra ID (Azure AD), user accounts, groups, permissions, MFA and access controls.

• Support identity and access management, including onboarding, offboarding and access reviews.

• Configure and maintain Microsoft 365 security and compliance features where applicable.

• Troubleshoot Microsoft 365 service and authentication issues.

• Support integration between Microsoft 365, on-premises infrastructure, cloud services, and other business applications.

• Assist in implementing security best practices such as MFA, Conditional Access and least-privilege access.

Operations, Support & Projects

• Provide Level 2/Level 3 technical support for infrastructure-related incidents and complex technical issues.

• Monitor infrastructure alerts and proactively resolve issues before they impact business operations.

• Participate in an escalation/on-call arrangement where required.

• Conduct incident investigation, root-cause analysis, and preventive actions.

• Work with IT vendors, contractors, and managed service providers to resolve technical issues.

• Participate in infrastructure refresh, migration, implementation, and technology improvement projects.

• Evaluate new technologies and make recommendations based on business requirements, security, reliability, and cost.

• Maintain technical documentation, standard operating procedures, network diagrams, and knowledge-base articles.

• Ensure infrastructure changes follow appropriate change management and IT operational processes.

Requirements

Education & Experience

• Diploma in Information Technology, Computer Science, Computer Engineering, or a related discipline.

• 3–7+ years of relevant experience in systems/infrastructure engineering or a similar role.

• Hands-on experience administering AWS cloud infrastructure.

• Strong experience with network infrastructure, firewalls, VPN, VLAN, routing and troubleshooting.

• Experience with Windows Server administration.

• Practical experience administering Microsoft 365 and Microsoft Entra ID.

• Experience with SIEM, security monitoring, log analysis, or security operations.

• Experience with backup, disaster recovery, monitoring and infrastructure management.

• Strong troubleshooting and problem-solving capabilities.

• Good understanding of IT security principles, network security, identity management, and access control.

• Ability to work independently while also collaborating effectively with internal teams and vendors.

  Technical Skills

  Candidates with experience in the following technologies will be advantageous:

  Cloud

  • AWS EC2, VPC, IAM, S3, RDS

  • AWS CloudWatch, CloudTrail

  • AWS networking and security

  • Infrastructure automation / Infrastructure as Code

  Network

  • TCP/IP, DNS, DHCP

  • VLAN, routing, VPN

  • Firewalls and network security

  • Wireless networking

  • Network monitoring and troubleshooting

  Infrastructure

  • Windows Server

  • Active Directory

  • Virtualisation

  • Backup and recovery

  • Storage and monitoring platforms

  Microsoft 365

  • Microsoft 365 Administration

  • Exchange Online

  • SharePoint / OneDrive

  • Microsoft Teams

  • Microsoft Entra ID

  • MFA / Conditional Access

  Security

  • SIEM platforms

  • Security event and log analysis

  • Vulnerability management

  • Endpoint/security monitoring

  • Incident response

  • Security hardening

  Preferred Certifications

  Relevant certifications are advantageous but not mandatory. Examples include:

  • AWS Certified SysOps Administrator

  • Microsoft Certified: Microsoft 365

  • CCNA / CCNP

  • CompTIA Security+ / Network+

  • ITIL Foundation

  • Relevant cybersecurity or SIEM certifications

  Key Competencies

  We are looking for someone who demonstrates:

  Hands-on & Technical
  Able to troubleshoot and resolve infrastructure issues independently and work across cloud, network, systems, security, and Microsoft 365.

  Problem Solver
  Able to analyse complex technical problems, identify root causes, and implement sustainable solutions rather than temporary fixes.

  Security Mindset
  Understands that security, access control, monitoring, patching, and secure configuration are integral parts of infrastructure engineering.

  Ownership & Accountability
  Takes ownership of infrastructure availability, incidents, projects, and assigned responsibilities from planning through completion.

  Proactive Approach
  Identifies potential risks, performance issues, security gaps, and opportunities for automation or improvement before they become business-impacting problems.

  Communication
  Able to communicate technical issues clearly to both technical and non-technical stakeholders.

  Continuous Learning
  Keeps up to date with developments in cloud, infrastructure, cybersecurity, networking, and Microsoft technologies.

  What You Will Get

  • Opportunity to work across AWS Cloud, Networking, Cybersecurity, Infrastructure and Microsoft 365.

  • Exposure to a broad range of enterprise IT technologies.

  • Opportunity to lead and implement infrastructure improvement projects.

  • A role with significant ownership and technical responsibility.

  • Collaborative working environment with opportunities for professional development.

  Application

  Interested candidates are invited to submit their CV/resume outlining their relevant experience, technical skills, certifications, and major infrastructure projects they have worked on.

  We are particularly interested in candidates who can demonstrate hands-on experience and ownership of real-world AWS, network, infrastructure, SIEM, and Microsoft 365 environments.