Network and Infrastructure Engineer (TIER 3)

About the role

We are looking for a hands-on Network & Infrastructure Engineer (Tier 3) to take ownership of its IT infrastructure as the company transitions from an MSP-managed environment to an internal IT function. The role will cover Azure infrastructure, networking, endpoint security, Microsoft 365, patch management, backup/DR, and infrastructure monitoring. You will also lead technical knowledge transfer from the existing MSP and build the documentation and processes needed to operate the environment independently.

Key responsibilities

• Manage and monitor Azure infrastructure, including VMs, VNets, NSGs, RBAC, Azure Monitor and Azure Backup.
• Manage network infrastructure, including routing, switching, DNS, DHCP, VPNs, firewalls and WAN connectivity.
• Administer Microsoft Intune / Endpoint Manager, including device enrollment, Autopilot, compliance policies, application deployment and BitLocker.
• Manage endpoint security tools such as CrowdStrike, ThreatLocker, Huntress and Microsoft Defender.
• Own patch management and vulnerability remediation across endpoints, servers and Azure VMs.
• Manage backup and disaster recovery, including Azure Backup, restore testing, RTO/RPO and DR documentation.
• Administer Microsoft 365 / Entra ID, including Exchange Online, SharePoint, OneDrive and Conditional Access.
• Use PowerShell for automation, reporting and infrastructure management.
• Maintain network diagrams, technical documentation, runbooks and configuration standards.
• Lead the MSP knowledge transfer and transition, validate administrative access and ensure the environment is ready for internal ownership.

About you

• 6+ years of hands-on network and infrastructure engineering experience.
• Strong Microsoft Azure infrastructure experience.
• Strong networking knowledge: TCP/IP, DNS, DHCP, VPN, routing, switching, firewalls and NSGs.
• Strong Microsoft Intune / Endpoint Manager experience, including Autopilot and Win32 application deployment.
• Hands-on experience with EDR/endpoint security platforms such as CrowdStrike, Defender, SentinelOne or equivalent.
• Strong PowerShell scripting and automation skills.
• Experience with patch management and vulnerability remediation.
• Experience with backup and disaster recovery, such as Azure Backup or Veeam.
• Experience with Microsoft 365, Entra ID and Conditional Access.
• Strong documentation and communication skills.