~13m ago

New

Infrastructure & Services Engineer

South Africa·Somerset Westmid

EngineeringDevops Engineer

0 views0 saves0 applied

Apply Now

Quick Summary

Key Responsibilities

Infrastructure Operations Own the architecture, technical standards and support of resilient hybrid infrastructure across head offices, remote sites, warehouses, distribution facilities,

Technical Tools

EngineeringDevops Engineer

The Infrastructure & Services Engineer is the technical owner of the core infrastructure, endpoint-management and recovery capability supporting Rohloff Group and its subsidiaries across head offices, remote sites, warehouses and retail outlets. Reporting to the IT Manager, the role is accountable for designing, operating and continuously improving hybrid infrastructure across on-premises, Microsoft Azure and Microsoft 365 environments, owning platform availability, lifecycle management, backup, restoration and disaster recovery.

Own the architecture, technical standards and support of resilient hybrid infrastructure across head offices, remote sites, warehouses, distribution facilities, retail outlets, on-premises environments and Microsoft cloud platforms.

Design standardised, scalable and supportable infrastructure across Windows Server, Microsoft Azure, Microsoft 365, virtualisation, compute, storage and core platform services.

Own infrastructure lifecycle planning, including capacity, performance, patching, upgrades, end-of-life risk and platform standardisation.

Manage Active Directory, Group Policy, domain services, DNS, DHCP, certificate services, Entra Connect or Cloud Sync and hybrid identity platform availability.

Own Microsoft Intune platform administration and endpoint-management implementation, including Windows Autopilot, device enrolment, mobile-device management, application deployment, configuration profiles, operating-system servicing and device compliance.

Implement security baselines and controls approved by the Cybersecurity & Network Engineer, report exceptions and preserve implementation evidence.

Provide final escalation support for complex infrastructure, Intune, Autopilot and endpoint-management incidents.

Develop and maintain infrastructure roadmaps, solution designs, logical and physical diagrams, dependency maps, service-flow diagrams, recovery designs and as-built documentation.

Provide technical leadership for new-site implementations, retail-outlet openings, warehouse deployments, relocations, refurbishments, platform migrations and major infrastructure refresh initiatives.

Automate repeatable infrastructure activities and operational controls using PowerShell or equivalent scripting.

Own the Group backup and recovery strategy across workloads, applications, virtual machines, Microsoft 365 and critical data platforms.

Administer and optimise Veeam Backup & Replication, Cove Data Protection and relevant Azure recovery services, including repositories, retention, immutability and off-site protection.

Define and maintain workload-specific recovery time objectives (RTOs), recovery point objectives (RPOs), retention schedules and recovery runbooks with business and system owners.

Validate recoverability through scheduled restore tests, disaster recovery exercises and evidence-based reporting.

Lead infrastructure restoration, rebuild and recovery during cybersecurity incidents, infrastructure failure, data loss or site disruption.

Identify recovery gaps, single points of failure and unsupported dependencies, then own remediation through to closure.

Monitor service health, availability, capacity and performance; identify degradation before it becomes a business outage.

Lead advanced troubleshooting across compute, storage, identity, operating systems, virtualisation, backup and network dependencies.

Act as technical incident lead for non-cyber infrastructure failures and service outages. Where compromise is suspected, preserve evidence, avoid destructive changes and transfer cyber-incident leadership to the Cybersecurity & Network Engineer.

Own problem management for recurring or high-impact incidents, including root-cause analysis, corrective actions and lessons learned.

Plan and execute maintenance with tested rollback procedures, clear stakeholder communication and minimal business disruption.

Participate in an agreed after-hours escalation and recovery roster for critical incidents and planned recovery exercises.

Implement and operate infrastructure hardening, privileged-access, patching, logging and configuration controls defined or approved by the Cybersecurity & Network Engineer.

Provide infrastructure evidence for audits, risk reviews and compliance assessments.

Maintain accurate asset, configuration, dependency, credential-recovery and support documentation.

Own deployment of infrastructure patches and mitigating changes in line with vulnerability priorities and target dates set through the security-risk process.

Lead infrastructure vendors during incidents and projects; validate solution designs against availability, performance, supportability and recovery requirements.

Manage infrastructure risks, exceptions and remediation plans with clear owners, priorities and due dates.

Escalate security exceptions and residual cyber risk to the Cybersecurity & Network Engineer and IT Manager for assessment and approval.

Maintain working knowledge of networking and security sufficient to troubleshoot cross-domain faults and support service restoration.

Do not own firewall policy, SD-WAN, VPN governance, network segmentation, threat monitoring, vulnerability governance or cyber-incident containment.

Consult the Cybersecurity & Network Engineer on network changes, security-sensitive designs and any infrastructure change that alters security controls.

Remain accountable for operating-system, server, storage, virtualisation, backup, endpoint-management and platform remediation assigned through the vulnerability-management process.

Work closely with outsourced infrastructure and cybersecurity specialists.

Coordinate infrastructure activities and follow up on technical deliverables.

Track incidents, risks, actions, and remediation plans to completion.

Ensure third-party providers meet agreed service levels and recovery standards.

Act as the internal point of accountability for infrastructure service delivery.

Microsoft Azure infrastructure, identity integration, storage, networking and monitoring.

Microsoft 365 administration and service dependencies.

Windows Server, Active Directory, Group Policy, DNS, DHCP, certificate services and hybrid identity synchronisation.

Hyper-V and associated compute, storage, clustering and virtual machine technologies.

Veeam Backup & Replication, Cove Data Protection and Azure-native recovery capabilities.

SAN, NAS, SMB storage, repositories, replication and capacity management.

PowerShell automation, infrastructure monitoring, alerting and operational reporting.

LAN, WAN, VPN and firewall dependencies, working in conjunction with the Cybersecurity & Network Engineer.

Relevant degree or equivalent senior-level industry experience.

Microsoft Certified: Azure Administrator Associate (AZ-104) expected; Windows Server Hybrid Administrator Associate (AZ-800 and AZ-801) strongly preferred.

Veeam Certified Engineer (VMCE) or equivalent demonstrable expertise strongly preferred.

ITIL 4 Foundation is beneficial, provided the candidate also demonstrates strong hands-on engineering capability.

8+ years of progressive experience in enterprise infrastructure engineering, with at least 3 years operating as a technical lead or final escalation resource.

Demonstrable experience owning production infrastructure in a multi-site, hybrid cloud environment.

Proven hands-on experience executing complex restores and disaster recovery drills.

Proven experience leading major incidents, root-cause investigations and remediation across multiple technical teams or vendors.

Expert-level Windows Server administration and troubleshooting.

Strong Active Directory, Group Policy, DNS, DHCP, certificate services and hybrid identity platform capability.

Strong Azure infrastructure administration covering compute, storage, networking, monitoring, governance and cost awareness.

Deep backup architecture knowledge, including retention, immutability, encryption, repository design, off-site repositories, recovery validation and ransomware-resilient recovery.