System Engineer

We are looking for an experienced and hands-on System Engineer to join our IT team and take ownership of the organisation's infrastructure, cloud, network, security monitoring, and Microsoft 365 environment. The successful candidate will be responsible for the implementation, administration, monitoring, troubleshooting, security, and continuous improvement of our IT infrastructure. The role covers a broad technology stack including Amazon Web Services (AWS), network infrastructure, servers, Microsoft 365, SIEM/security monitoring, backup, and endpoint/infrastructure services . This is a hands-on engineering role suited to someone who enjoys solving technical problems, improving infrastructure reliability, and working across multiple technology domains. You will work closely with the IT Manager, vendors, internal users, and other stakeholders to ensure a secure, stable, and scalable IT environment. Key Responsibilities 1. Cloud Infrastructure – AWS • Design, deploy, administer, and maintain AWS cloud infrastructure including EC2, VPC, IAM, S3, RDS and other relevant AWS services. • Monitor AWS infrastructure performance, availability, capacity, and costs. • Manage cloud networking including VPCs, subnets, security groups, routing, VPN and connectivity. • Implement and maintain cloud security controls, access policies, logging, and monitoring. • Support cloud migration, infrastructure upgrades, and new cloud-based projects. • Apply infrastructure-as-code and automation practices where appropriate. • Review AWS usage and identify opportunities for cost optimisation, performance improvement, and increased reliability . • Maintain appropriate documentation for cloud architecture, configurations, and operational procedures. 2. Network Infrastructure • Administer and maintain corporate network infrastructure including switches, routers, firewalls, Wi-Fi, VPN and Internet connectivity . • Monitor network performance, availability, capacity, and security. • Troubleshoot network connectivity, routing, DNS, DHCP, VLAN and VPN issues. • Implement and maintain network segmentation and appropriate access controls. • Work with Internet Service Providers, network vendors, and managed service providers when required. • Maintain network diagrams, IP addressing documentation, configuration backups, and technical documentation. • Support network expansion, upgrades, and infrastructure improvement projects. 3. System & Infrastructure Administration • Manage and maintain Windows servers, virtualisation platforms, storage, backup systems and other core infrastructure . • Perform system monitoring, patching, upgrades, maintenance, and capacity planning. • Troubleshoot infrastructure incidents and perform root-cause analysis. • Ensure systems are maintained according to security, availability, and operational requirements. • Manage backup and recovery processes and periodically validate backup integrity and restoration procedures. • Support disaster recovery and business continuity activities. • Maintain accurate system documentation, asset information, configuration records, and operational procedures. 4. SIEM, Security & Monitoring • Administer and monitor the organisation's SIEM/security monitoring platform . • Collect, monitor, and analyse security logs from servers, network devices, cloud services, endpoints, and Microsoft 365. • Investigate security alerts and suspicious activities and coordinate incident response when required. • Develop and maintain appropriate monitoring rules, alerts, dashboards, and reporting. • Assist with vulnerability management, security hardening, patch management, and remediation activities. • Support security investigations and provide technical analysis during security incidents. • Work with internal and external security teams/vendors to improve the organisation's security posture. • Ensure appropriate logging, monitoring, and retention requirements are maintained. 5. Microsoft 365 & Identity Mangement • Administer and support Microsoft 365 services , including Exchange Online, Teams, SharePoint, OneDrive and related services. • Manage Microsoft Entra ID (Azure AD), user accounts, groups, permissions, MFA and access controls. • Support identity and access management, including onboarding, offboarding and access reviews. • Configure and maintain Microsoft 365 security and compliance features where applicable. • Troubleshoot Microsoft 365 service and authentication issues. • Support integration between Microsoft 365, on-premises infrastructure, cloud services, and other business applications. • Assist in implementing security best practices such as MFA, Conditional Access and least-privilege access. Operations, Support & Projects • Provide Level 2/Level 3 technical support for infrastructure-related incidents and complex technical issues. • Monitor infrastructure alerts and proactively resolve issues before they impact business operations. • Participate in an escalation/on-call arrangement where required. • Conduct incident investigation, root-cause analysis, and preventive actions. • Work with IT vendors, contractors, and managed service providers to resolve technical issues. • Participate in infrastructure refresh, migration, implementation, and technology improvement projects. • Evaluate new technologies and make recommendations based on business requirements, security, reliability, and cost. • Maintain technical documentation, standard operating procedures, network diagrams, and knowledge-base articles. • Ensure infrastructure changes follow appropriate change management and IT operational processes . Requirements Education & Experience • Diploma in Information Technology, Computer Science, Computer Engineering, or a related discipline . • 3–7+ years of relevant experience in systems/infrastructure engineering or a similar role. • Hands-on experience administering AWS cloud infrastructure . • Strong experience with ne…