Senior IT Engineer - Systems & Cloud

Sr. IT Engineer - Systems & Cloud is responsible for the operation, administration, and continual improvement of the Group's Microsoft Azure environment, Windows and Linux systems, Azure Virtual Desktop, and Windows endpoint management platform.
The role ensures cloud infrastructure, systems, and managed endpoints remain secure, reliable, resilient, scalable, patched, compliant, and cost-effective through effective monitoring, automation, lifecycle management, and operational best practices.
The role operates within approved Group IT Operations standards and priorities, escalating significant risks, architecture changes, investments, and cross-functional decisions to the Sr. IT Manager - Operations & Service Management.
1. Systems & Cloud Operations
• Administer and support Microsoft Azure infrastructure and related cloud services, including compute, storage, backup, monitoring, and related resources, coordinating with the Network team for Azure networking and connectivity.
• Administer and support Azure Virtual Desktop, including host pools, session hosts, application groups, FSLogix profiles, scaling, monitoring, user access, and troubleshooting.
• Administer Windows Server and Linux systems, including provisioning, configuration, monitoring, maintenance, troubleshooting, and service restoration.
• Manage OS patching and security updates for Windows and Linux servers, including deployment, monitoring, remediation, and compliance reporting.
• Maintain and periodically validate backup, recovery, and disaster recovery capabilities for critical systems and Azure workloads.
• Monitor and optimize system performance, capacity, resource utilization, and Azure costs using Azure Monitor, Log Analytics, Cost Management, alerts, and related tools.
• Manage Azure operational governance within approved standards, including RBAC, Azure Policy, resource organization, tagging, and least-privilege access within the assigned infrastructure scope.
• Develop and maintain automation and Infrastructure as Code (IaC) using Bicep, Terraform, or equivalent tools to improve consistency, reliability, scalability, and operational efficiency.
2. Endpoint Platform Management
• Administer Microsoft Intune and Windows Autopilot for corporate Windows device provisioning, enrollment, configuration, compliance, Windows Update management, reset, retirement, and troubleshooting.
• Manage endpoint configuration and technical security controls, including security baselines, BitLocker, device compliance, and local administrator controls.
• Monitor endpoint health, patching, configuration, and compliance status, and remediate recurring issues or configuration drift.
• Maintain endpoint policies, deployment profiles, and configuration standards to support consistent and scalable device management.
• Coordinate with M365, Service Desk, Onsite IT, and Information Security for application deployment, identity and access controls, endpoint security requirements, and user support.
3. Service Operations & Continual Improvement
• Manage infrastructure and endpoint incidents, service requests, problems, and changes in accordance with ITSM, SLA, security, and change management procedures.
• Troubleshoot complex cloud, server, AVD, and endpoint platform issues, perform root cause analysis, and coordinate with Microsoft, managed service providers, vendors, and internal IT teams for service restoration.
• Maintain system inventories, technical documentation, SOPs, operational procedures, and knowledge articles.
• Review technical implementation plans and provide guidance to IT teams for complex systems, cloud, and endpoint platform activities.
• Identify and implement opportunities to improve reliability, resilience, automation, capacity, patching, security, cost efficiency, and operational quality.
• Provide capacity, lifecycle, cost, risk, and technical recommendations to the Sr. IT Manager - Operations & Service Management to support prioritization, budgeting, investment, and technology decisions