Lead System Engineer

Job highlights

• You will be working on your own for most of your shift,with an on-call US engineer available for escalations,so we need someone comfortable making a call and documenting it rather than waiting for direction
• Experience working from a clean room or secure delivery setup
• Required skills

About the role

Our infrastructure runs on Azure and Microsoft Fabric, with an on-premises footprint and a Windows and Mac fleet managed through Intune. The support team sits in the US Mountain time zone, so anything raised overnight waits in the queue until the next morning.

We are adding an offshore engineer to cover that window. You will take first touch on tickets and alerts, resolve what you can, and hand the rest over cleanly at the start of the US Day. You will be working on your own for most of your shift, with an on-call US engineer available for escalations, so we need someone comfortable making a call and documenting it rather than waiting for direction.

What you will be doing

• Work Fabric tickets covering workspace access and permissions, connection and refresh failures, gateway problems, and capacity overage or throttling

• Handle Azure requests and failures across Key Vault, Blob storage, and outbound networking such as NSG rules, Azure firewall allow lists and private endpoint or DNS issues

• Process GitHub access and personal access token requests, checking scopes and expiry against policy before routing for approval

• Create and manage users and groups in Active Directory and Entra ID, action security group requests, and check directory sync for errors

• Reset passwords, unlock accounts, and resolve Duo enrollment, MFA and license problems

• Troubleshoot VMs in Azure and on premises, including no RDP or SSH access, boot and disk problems, and restarts where the runbook allows it

• Use vCenter day to day for VM lookups, alarms and events, host and datastore health, and power operations

• Support Windows and Mac devices through Intune, including enrollment, policy assignment, sync problems and software installation

• Take off hours calls from US based staff, mostly Wi-Fi, VPN and remote access

• Acknowledge and triage infrastructure and on premises alerts, and page the on-call US engineer when the runbook says to

• Do first triage on security alerts and escalate immediately. Security incidents are not investigated or closed at this level

• Run onboarding checklists for new hires, stage access requests for approval, and give new users a service desk walkthrough

• Keep tickets updated as you work, write a handoff note at the end of every shift, and document anything that comes in twice

Required skills

• 3 to 6 years in infrastructure support, NOC or enterprise service desk work, with at least two of those years at 2nd line

• Azure administration covering RBAC, VMs, storage accounts, Key Vault, NSGs and reading logs in Azure Monitor without being walked through it

• Microsoft Fabric or Power BI Service administration covering workspace roles and permissions, gateways and connections, refresh failures and capacity basics

• Active Directory and Microsoft Entra ID user and group administration, including hybrid identity and sync

• vSphere and vCenter at operator level. You will not be designing or patching a cluster, but you do need to log in, find a VM, read an alarm and know what your role lets you action

• Intune support across both Windows and Mac

• Duo, or a comparable MFA platform

• A ticketing system such as ServiceNow, Jira Service Management or Freshservice, and the discipline to keep records straight under SLA

• Good notes, clear communication, curiosity about why something broke, and the judgement to escalate a P1

Other skills

• On premises monitoring and alerting tools, plus backup and job failure triage

• GitHub administration and a working understanding of CI/CD

• PowerShell or Azure CLI for diagnostics and for running approved scripts

• Opening and managing Microsoft support cases

• Writing runbooks and knowledge base articles

Nice to have

• Experience supporting a US financial services, mortgage or banking environment

• Previous work in a follow the sun model with a US onshore team

• Experience working from a clean room or secure delivery setup

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.