IT Systems, Network & Infrastructure Engineer/Architect (MSP)

Employment Type: Full-time, Goodman Tech BPO OPC

Work Setup: Fixed night shift covering North American (Mountain Time) business hours, 8:00am–5:00pm client time with a one-hour lunch. Onsite at our BGC Taguig office. Company-provided business-grade laptop; the client deploys their own endpoint agents, SSO and secure access client to it.

Role Summary:
Goodman Tech BPO is hiring a Level 4 Senior Systems & Network Engineer for a dedicated offshore seat with a North American managed services provider. You will take infrastructure projects from scoping through build, migration and cutover, and act as the senior escalation point for the client's junior and after-hours engineers. This is a 1-to-1 dedicated placement, not a shared or pooled team. It is client-facing — you will lead technical conversations, set expectations and see projects through to completion. All physical rack-and-stack work is handled onsite by the client's US team; no travel is required.

Experience:

• 8+ years hands-on infrastructure engineering with clear senior / escalation-tier ownership in an MSP or multi-tenant environment
• Demonstrated end-to-end project delivery. You will be asked in interview to describe exactly what you personally configured, built and cut over — not what your team did
• Capable of looking at a project and understanding what it will take to deliver, including design-level decisions

Microsoft 365, Azure & Identity:

• Tenant-to-tenant Microsoft 365 mail migrations, including staging and final cutover (BitTitan or comparable)
• Google Workspace to Microsoft 365 / Azure migrations
• SharePoint migrations
• On-premises to Azure workload migrations and builds
• Intune — device configuration, compliance, and Conditional Access policy design and implementation
• Hybrid Active Directory and Entra ID — directory sync, identity, MFA
• Two-factor authentication platform migrations (Duo or equivalent)

Servers & Virtualization:

• Windows Server builds, migrations and upgrades
• Hyper-V — virtual server builds and host management
• VMware to Hyper-V migration experience
• Remote Desktop Services
• Exposure to VDI / Azure Virtual Desktop or Citrix is a bonus, not a core requirement

Network & Security:

• FortiGate firewalls to a deep configuration level — new deployments and replacements
• Meraki and SonicWall exposure
• Switching — Aruba, Meraki, Fortinet
• SASE / zero-trust network access platform deployment and administration
• SSO and identity platform administration (JumpCloud or equivalent)
• EDR administration (SentinelOne or equivalent)
• Managed vulnerability scanning platforms
• DNS filtering platforms
• Email security and hygiene platforms (Barracuda, Inky or equivalent)
• Password management and privileged access management (Keeper PAM or equivalent)
• Dark web monitoring and security awareness training platforms

MSP Tooling:

• Autotask PSA — ticketing, time entry, escalation discipline
• Kaseya RMM — day-to-day administration, not just ticket consumption
• IT Glue — rigorous documentation as work is completed
• SaaS security monitoring and SOC alerting platforms

Communication & Working Style:

• Excellent spoken and written English, clear and easy to understand. You will speak directly with the client's customers, lead project updates and set expectations
• Able to take the lead on a project while knowing when to ask for help, take guidance, and escalate appropriately
• Comfortable working as part of a distributed team across chat and video throughout the shift
• Available to support escalations from junior and after-hours engineers
• Meticulous attention to detail. This work sits in the security domain — one wrong firewall rule or Conditional Access setting can cause serious harm to a client

Certifications (advantage):

• Microsoft: AZ-104, AZ-305, MS-102, MD-102
• Cybersecurity certifications
• Fortinet NSE