IT Systems Engineer (Azure, Security, Intune & Networks)

The Role
This is not a "keep the lights on" role.
As our IT Systems Engineer, you'll take ownership of improving and shaping our systems; reducing recurring issues, strengthening security, and enabling the business to operate more effectively.
Working onsite from our Camberwell office 3-4 days per week, you will work closely with the IT Operations Manager and act as a senior escalation point, solving complex issues whilst supporting and mentoring the wider IT team.
Key Responsibilities
Design, implement, and support enterprise infrastructure across Microsoft Azure, Microsoft 365, and integrated SaaS platforms, including Entra ID, Conditional Access, and Microsoft Defender security controls aligned with Microsoft 365 A5 / Defender for Endpoint P2 best practices.
Design and maintain Zero Trust security architectures with phishing-resistant MFA, device compliance, privileged access controls, and endpoint security baselines.
Manage and enhance Microsoft Intune environments, including device enrolment, compliance policies, application deployments, and mobile security controls for iOS and Android.
Design and implement Azure Virtual Desktop environments, including host pools, FSLogix profiles, and performance optimisation.
Plan, deploy, and support enterprise networking solutions, including Cisco Meraki and Ubiquiti switching, wireless, firewall, VPN, and SD-WAN connectivity.
Lead infrastructure and security projects from design through implementation, testing, and operational handover.
Monitor infrastructure performance, security posture, and operational resilience; act as escalation point for complex issues and critical incidents.
Proactively identify risks, vulnerabilities, and improvement opportunities across cloud, endpoint, security, and network platforms.
Develop and maintain technical standards, system documentation, network diagrams, and operational procedures.
Provide technical mentoring to service desk and junior infrastructure team members, and collaborate with business stakeholders and vendors on technology solutions aligned with organisational objectives.
Occasional after-hours work for critical changes (rare)
Desirable Skills & Experience
5+ years' experience in Systems Engineering, Infrastructure Engineering, or similar role.
Strong experience with:
Microsoft Azure
Microsoft 365
Microsoft Entra ID (Azure AD)
Microsoft Intune
Conditional Access
Microsoft Defender Suite
Azure Virtual Desktop (AVD)
Experience implementing and supporting:
Defender for Endpoint P2
Defender for Identity
Defender for Office 365
Microsoft Cloud App Security
Identity Protection
Hands-on experience with:
Cisco Meraki
Ubiquiti UniFi
Firewalls, VPNs, WAN and wireless networking
Experience managing:
iOS and Android enterprise mobility environments
Mobile Device Management (MDM)
Mobile Application Management (MAM)
Strong PowerShell automation and troubleshooting skills.
Experience with security frameworks and Zero Trust principles.
Excellent documentation, communication, and stakeholder engagement skills.
Microsoft Certified: Azure Administrator Associate
Microsoft Certified: Identity and Access Administrator Associate
Microsoft Certified: Endpoint Administrator Associate
Microsoft Certified: Azure Security Engineer Associate
Cisco Meraki Solutions Specialist (CMSS)
CompTIA Security+
CISSP (desirable)
Azure SSO and SaaS integrations
Hardware rollout or migration experience
Cisco Meraki or multi-site environments

Skills
Azure, Android, iOS, Documentation

Employment type
Full-time

Work arrangement
Hybrid