Job Description:

My well established Client is urgently looking for an experienced, hands-on Senior Infrastructure Engineer to take ownership of a diverse hybrid Microsoft infrastructure across a multi-country business.

Working within a small, agile team, you will combine project delivery with day-to-day operational responsibility across Azure, Microsoft 365, identity, endpoint management, servers and enterprise networking.

You will lead technical work from initial requirements and design through to implementation and handover, working independently while ensuring solutions are secure, resilient, well documented and fit for purpose. You will also provide technical direction to third-party suppliers and challenge proposals where the design or expected outcome is unclear.

• Design, build and manage Azure infrastructure, including networking, compute, storage, backup, disaster recovery and monitoring.
• Administer Microsoft Entra ID, including SSO, Conditional Access, application integrations, identity governance and access controls.
• Manage Microsoft 365 services, including Exchange Online, Teams, SharePoint and Power Platform governance.
• Own endpoint management through Intune and Autopilot, including Windows 11 deployment, application packaging and patch management.
• Deliver and support office and WAN networking, including Cisco Meraki, SD-WAN/SASE, firewalls, wireless and new office infrastructure fit-outs.
• Maintain Windows Server, Active Directory, Group Policy, PKI, DNS and DHCP services.
• Drive security improvements, vulnerability remediation, infrastructure hardening and audit compliance.
• Plan and execute backup, restore and disaster recovery testing.
• Support Azure DevOps, Git repositories, permissions and deployment pipelines.
• Develop PowerShell automation to improve operational efficiency, reporting and service delivery.
• Maintain accurate technical documentation, configuration records and operational runbooks.

• Significant hands-on experience managing enterprise hybrid Microsoft infrastructure.
• Strong Azure expertise, including networking, ExpressRoute, Virtual WAN, backup, Site Recovery and security.
• Excellent Microsoft Entra ID knowledge, particularly SSO, SCIM, Conditional Access and identity security.
• Experience administering Microsoft 365, Intune, Autopilot and Windows 11.
• Strong enterprise networking experience across switching, wireless, firewalls, VPN and SD-WAN; Cisco Meraki experience is desirable.
• Solid Windows Server, Active Directory, Group Policy and PKI knowledge.
• Proficient in PowerShell scripting and automation.
• A strong security mindset, with experience in vulnerability management, hardening and audit requirements.
• Familiarity with Agile delivery, Azure DevOps, Git and CI/CD pipelines.
• Excellent communication and problem-solving skills, with the confidence to work independently and manage multiple priorities.

• Infrastructure as Code using Terraform, Bicep or ARM.
• Microsoft certifications such as AZ-104, AZ-700, SC-300 or MD-102.
• Experience with Azure Virtual Desktop, Copilot Studio, AI governance or SIEM/MDR integrations.
• ITIL 4 Foundation.

You will be a technically strong, delivery-focused engineer who enjoys getting hands-on across a broad technology estate. You will take ownership, use sound technical judgement, proactively identify improvements and be comfortable working in a small team where initiative, accountability and the ability to deliver are essential.

This is based on site 3 days a week and inside IR35, please ONLY send an up to date CV if you are happy to proceed on this basis. You will receive an immediate response and more information on a fantastic opportunity with a great Client.