Senior Information Technology Engineer in London

As a Senior IT System Engineer - Infrastructure Specialist, you will be responsible for designing, implementing and maintaining our Microsoft on-premises and Azure infrastructure environments. You will ensure the security, availability, and efficiency of corporate backbone infrastructure including Hyper-V/Azure Local, Active Directory, PKI, DNS, DHCP and file servers, as well as our fleet of Windows Servers through modern and automated tooling such as Azure Arc and Puppet. This role demands an expert proficient in managing enterprise-scale hybrid infrastructure and capable of providing strategic technical guidance. You will ensure the security, availability, and efficiency of corporate systems, while driving innovation and mentoring junior engineers. A strong grasp of Zero Trust Security principles and modern infrastructure best practices is essential.

Responsibilities:

• Own a domain as the subject matter expert, staying up to date on new trends and capabilities within the supporting tools and incorporating relevant changes into our Corporate IT roadmap.
• Collaborate with other Corporate IT senior engineers, solution architects, domain experts and Helpdesk staff to test, deploy, communicate and support end user impacting changes into our Corporate IT.
• Coordinate medium to large scale corporate IT projects, defining business requirements, designing technical solutions and coordinating a squad of system engineers for its implementation, testing, global deployment and maintenance.
• Work in autonomy to translate business requirements into technical solutions, leveraging our existing ecosystem and licenses everywhere possible.
• Automate tasks or empower end users with self-service capabilities, in respect of our security policies, to reduce maintenance and support overhead across the team.
• Oversee the definition and maintenance of our documentation corpus, both technical and end-user oriented, to facilitate maintenance and troubleshooting tasks.
• Designing, implementing and maintaining Corporate IT services in the following areas:

• Windows Server Administration: Deploy and maintain on-premises and azure-based Windows Server infrastructure running on Hyper-V/Azure Local or OpenStack. Proficiency in managing Linux based servers, such as CentOS, is a plus.
• Cloud Services: Operate and manage Azure-based infrastructure, including Azure Arc for hybrid management.
• Corporate Services: Maintain key infrastructure services such as AD, DNS, DHCP, Radius, and File Servers.
• Security Hardening Policies: Define, deploy, and maintain security hardening policies for Windows and Linux servers, following industry's best practices.
• PKI Management: Operate and enhance the company's Public Key Infrastructure (PKI), supporting use cases like certificate-based authentication and secure network access.
• Secure Admin Workflows: Implement and maintain secure administrative access using Privileged Access Workstations (PAWs), secure protocols (SSH, RDP), and Privileged Access Management (PAM) tools.
• Active Directory: Maintain and support Active Directory, including integration with Microsoft Entra ID.
• Automation & Configuration Management: Use Puppet and scripting tools (PowerShell, Python, Bash) to automate and maintain system configurations.

Ensure that you adhere to the Governance, Risk & Compliance (GRC) obligations for your role. Identify and raise any non-compliance incidents promptly to your line manager. Challenge processes, policies and projects that will negatively impact compliance within the Group. Complete all mandatory compliance training assigned to you. Reach out to the Compliance Teams if unsure of any of your compliance obligations or the requirements are unclear.

Qualifications:

• Educational Background: Master's degree in computer science, Information Technology, or a related field.
• Experience: Extensive experience in Hyper-V server management and Hyper-V infrastructure support. Azure Local (Azure Stack HCI) experience is a plus. Extensive experience in managing Microsoft infrastructure, with expertise in Windows Server and the Microsoft Entra and Azure ecosystems. Experience in migrating legacy on-premises ecosystem to cloud/hybrid is a plus (Cloud identities, Azure ARC, Azure Local ...). Experience in deploying or managing privileged access management solutions such as Secure Remote Access (SRA) is a plus.
• Certification: Relevant Microsoft certifications such as AZ-800, AZ-801, SC-100, AZ-140, AZ-104, AZ-900, MS-102 are highly regarded. Additional certifications in security and cloud architecture are a plus.

Required Skills:

• Proficiency in scripting languages like Python, Bash, or PowerShell.
• Proficiency with KQL and working with Microsoft Graph API is a plus.
• Advanced experience in deploying and maintaining the following services: Hyper-V, NDES, NPS, PKI, Radius, File servers, Active Directory.
• Proficiency in Windows server management including provisioning, vulnerability management and incident management.

Preferred Skills:

• Project Management and Leadership: Demonstrated ability to lead significant changes across thousands of employees and servers.
• Good communication and interpersonal skills, capable of engaging with stakeholders at all levels and coordinate large initiatives or projects within their area of expertise.