Senior System Engineer - windows

Manage Windows Server environments — AD, DNS, DHCP, Group Policy, certificate services

Configure on-premises storage (SAN/NAS/DAS) and connect hosts to storage fabrics

Perform infrastructure upgrades, patching, firmware updates, and hardware refresh

Configure server OS, roles, features, and baseline security hardening

Manage VMware vSphere/ESXi, Microsoft Hyper-V, and/or Nutanix

Build clusters, virtual switches, datastores, and high-availability features

Provision, template, and migrate VMs across hosts/clusters/platforms (incl. P2V/V2V)

Integrate virtualisation platforms with shared storage and backup solutions

Troubleshoot and optimise hypervisor and VM performance

Manage M365 tenants — Exchange Online, SharePoint Online, Teams, OneDrive

Implement identity/access via Entra ID, including hybrid identity (AD Connect/Cloud Sync)

Configure M365 security & compliance (Defender for Office 365, Purview, Conditional Access)

Execute M365 migrations and provide post-migration support

Manage Azure Landing Zones and resources (Bicep, Terraform, ARM, or Portal) per CAF guidance

Maintain Azure networking — VNets, NSGs, Azure Firewall, Private Endpoints

Configure management groups, subscriptions, policies, RBAC, and tagging

Deploy monitoring/alerting via Azure Monitor, Log Analytics, and Microsoft Sentinel

Execute cloud migrations (Azure Migrate, rehosting, re-platforming)

Implement hybrid connectivity (ExpressRoute, Site-to-Site VPN, Azure Arc)

Maintain PowerShell automation/scripting to support repeatable delivery

Build and reuse infrastructure-as-code templates

Produce accurate as-built documentation and knowledge transfer material

Share knowledge and contribute to the technical capability of the team

Mentor junior engineers on build and deployment activities

5+ years' hands-on experience building, deploying, and migrating IT infrastructure across on-premises and cloud environments

Deep expertise in Windows Server (2016/2019/2022) — AD DS, DNS, DHCP, Group Policy, server roles

Demonstrated experience deploying Azure Landing Zones and resources aligned to CAF/WAF

Hands-on Microsoft 365 deployment/migration experience (Exchange Online, Teams, SharePoint, Entra ID)

Experience with hybrid identity (Entra Cloud Sync / Azure AD Connect)

Azure networking, security, and governance experience (NSG, Firewall, Policy, RBAC)

Strong PowerShell scripting/automation skills

Exposure to infrastructure-as-code tooling (Bicep, Terraform, or ARM)

Hands-on experience with a hypervisor platform — VMware vSphere/ESXi, Hyper-V, or Nutanix

Experience with enterprise server hardware (Dell EMC, HPE, Lenovo, Cisco UCS)

Experience with storage hardware/platforms (SAN, NAS, iSCSI/Fibre Channel)

Experience with backup, replication, and disaster recovery technologies

Data centre experience — racking, cabling, hardware commissioning

Tertiary qualification in Computer Science, Information Technology, or a related field

Microsoft Certified: Azure Administrator Associate (AZ-104)

Microsoft Certified: Azure Solutions Architect Expert (AZ-305)

Microsoft 365 Certified: Enterprise Administrator Expert

Microsoft Certified: Identity and Access Administrator Associate (SC-300)

Microsoft Certified: Security Operations Analyst Associate (SC-200)

VMware VCP-DCV or Nutanix Certified Professional (NCP)

Strong technical problem solver with excellent attention to detail

Hands-on engineer who takes pride in high-quality build, deployment, and documentation work

Clear, confident communicator — comfortable with both technical and non-technical stakeholders

Self-starter who manages competing priorities effectively

Strong team player who shares knowledge and mentors others

Acts with integrity and takes ownership of outcomes