IT Systems Engineer | Infrastructure Engineer

• Manage and optimise our Microsoft ecosystem, including Windows Server, Active Directory, and Microsoft 365
• Administer and enhance Microsoft Entra ID in a hybrid environment, including Conditional Access, SSO integrations, and identity security controls
• Lead our cybersecurity uplift, driving vulnerability remediation, system hardening, Essential Eight maturity, and Microsoft Defender improvements
• Contribute to the implementation and operationalisation of Microsoft Sentinel, including onboarding data sources and alert tuning
• Architect, manage, and scale our Azure environment (IaaS/PaaS) to support a rapidly growing national team
• Act as the final Level 3 escalation point for complex server, identity, networking, and endpoint issues
• Oversee network integrity and security, including firewall management, site‑to‑site VPNs, remote access VPNs, and uplift of network segmentation
• Drive infrastructure automation and consistency by developing and maintaining advanced PowerShell scripts and automations
• Support and enhance our SOE, server build patterns, platform standards, and operational processes
• Maintain and monitor our mixed environment, including SUSE Linux servers used for internal projects
• Manage and improve monitoring, backup processes, and core operational reliability
• Deliver technical upgrades end‑to‑end, including planning, implementation, testing, documentation, stakeholder communication, and handover
• Create and maintain clear technical documentation, procedures, build standards, and architecture/network diagrams
• Work closely with internal stakeholders and external vendors to plan and deliver changes
• Coach and uplift team members through knowledge sharing, pairing, and practical guidance
• Support our journey toward ISO 27001 and SOC 2 compliance through rigorous documentation, secure configurations, and operational discipline

• 4+ years of experience in systems engineering / systems administration or infrastructure engineering
• Deep expertise in the Microsoft ecosystem, including Windows Server 2022, Entra ID (hybrid), Azure, and Microsoft 365
• Proven ability to automate processes using PowerShell (advanced scripting) and/or Power Automate
• Strong background in cybersecurity uplift: patching, hardening, vulnerability remediation, and identity/endpoint security
• Hands‑on experience with ASD Essential Eight, with exposure to ISO 27001 or SOC 2 considered highly advantageous
• Experience in firewall administration (e.g., Sophos), routing/switching fundamentals, and secure remote access design
• Experience supporting or administering Linux (SUSE preferred) within a predominantly Windows environment
• Demonstrated ability to deliver technical upgrades end‑to‑end with high‑quality documentation and handover
• Experience producing clear technical diagrams and architectural documentation
• Strong communication, collaboration, and coaching skills, with the ability to guide junior team members

Exposure to ISO 27001 or SOC 2

• A flexible and supportive work environment
• Competitive remuneration and benefits including novated lease, birthday leave, salary packaging, wellbeing programme, additional purchased leave, and company-provided laptop
• Comprehensive SAP training and certifications