IT Infrastructure Engineer

Overview
Job Title: IT Infrastructure Engineer
Job Summary: We are seeking a highly motivated and experienced IT Infrastructure Engineer with a strong focus on Microsoft 365 administration (Intune, Microsoft Defender for Endpoint, Purview), Windows 10/11 systems management, and security hardening using GPO/CIS benchmarks.

This role is ideal for an individual with a solid understanding of infrastructure security, project management, and vendor coordination, along with foundational scripting skills in PowerShell or Python.

The candidate should also have a basic understanding of network administration, troubleshooting, and maintenance.


Responsibilities
1.

M365 Administration:
Manage and maintain Microsoft 365 services, including Intune, Microsoft Defender for Endpoint (MDE), Purview, and Conditional Access Policies.

Configure and support mobile device management (MDM) and mobile application management (MAM) through Microsoft Intune.

Implement and maintain information protection and compliance policies via Microsoft Purview.

Monitor and respond to alerts and reports within the M365 ecosystem.

• Windows Endpoint & Server Management:
  Manage Windows 10/11 device deployment, imaging, updates, and policies via Intune and Group Policy.
  
  Apply CIS benchmarks to harden Windows environments and conduct regular compliance reviews.
  
  Perform regular patch management, vulnerability scanning, remediation, and reporting using tools such as WSUS, Defender for Endpoint, Intune or other industry tools.
  
  
• Infrastructure Security:
  Maintain and enforce Active Directory (AD) policies, including password policies, group management, and access controls.
  
  Administer Defender for Endpoint for threat detection and response.
  
  Support identity and access management best practices and participate in internal security audits.
  
  Support server hardening and remediation of findings from vulnerability scans.
  
  
• Scripting and Automation:
  Write and maintain PowerShell or Python scripts for automating tasks such as account creation, security audits, patching, and reporting.
  
  Assist in creating and maintaining documentation for automation processes.
  
  
• Project & Vendor Management:
  Lead and participate in infrastructure-related projects, including upgrades, migrations, and deployments.
  
  Collaborate with vendors for procurement, support, SLAs, and service management.
  
  Prepare project documentation, timelines, risk assessments, and regular progress updates.
  
  
• Network Support (Basic):
  Assist with network troubleshooting including DNS, DHCP, IP conflicts, and connectivity issues.
  
  Support basic network maintenance, such as switch configuration checks, cable management, and interface monitoring.
  
  Coordinate with the networking team on infrastructure changes or issues.
  
  

Key Skills & Qualifications
Bachelor’s degree in information technology, Computer Science, or a related discipline.


Minimum 5 years of experience in IT infrastructure roles, with at least 3 years in M365 administration.


Proficiency in Microsoft Intune, Microsoft Defender for Endpoint, and Purview.


Good understanding of Group Policy, Active Directory, CIS Benchmarks, and endpoint security best practices.


Experience in project coordination, working with internal teams and external vendors.


Basic to intermediate knowledge in PowerShell or Python scripting.


Familiarity with infrastructure security principles, access controls, patching, vulnerability management, and server hardening.


Basic understanding of network concepts, IP addressing, subnetting, and LAN/WAN troubleshooting.


Experience with systems would be advantageous: SD-WAN (Aryaka), Zscaler (ZIA, ZPA) / Meraki (Switch / Firewall/ AP), Fortinet (FW), AD/AAD, Sophos Endpoint, Trellix Endpoint, Symantec Endpoint.


Soft Skills
Strong analytical and problem-solving skills
Excellent communication and documentation abilities
Ability to work independently and manage multiple priorities
Familiar with global environments and able to collaborate with stakeholders across different regions.


Attention to detail and proactive approach to system monitoring and security
#J-18808-Ljbffr