Network and Infrastructure Engineer (TIER 3)

About the role We are looking for a hands-on Network & Infrastructure Engineer (Tier 3) to take ownership of its IT infrastructure as the company transitions from an MSP-managed environment to an internal IT function. The role will cover Azure infrastructure, networking, endpoint security, Microsoft 365, patch management, backup/DR, and infrastructure monitoring. You will also lead technical knowledge transfer from the existing MSP and build the documentation and processes needed to operate the environment independently. Key responsibilities Manage and monitor Azure infrastructure, including VMs, VNets, NSGs, RBAC, Azure Monitor and Azure Backup. Manage network infrastructure, including routing, switching, DNS, DHCP, VPNs, firewalls and WAN connectivity. Administer Microsoft Intune / Endpoint Manager, including device enrollment, Autopilot, compliance policies, application deployment and BitLocker. Manage endpoint security tools such as CrowdStrike, ThreatLocker, Huntress and Microsoft Defender. Own patch management and vulnerability remediation across endpoints, servers and Azure VMs. Manage backup and disaster recovery, including Azure Backup, restore testing, RTO/RPO and DR documentation. Administer Microsoft 365 / Entra ID, including Exchange Online, SharePoint, OneDrive and Conditional Access. Use PowerShell for automation, reporting and infrastructure management. Maintain network diagrams, technical documentation, runbooks and configuration standards. Lead the MSP knowledge transfer and transition, validate administrative access and ensure the environment is ready for internal ownership. About you 6+ years of hands-on network and infrastructure engineering experience. Strong Microsoft Azure infrastructure experience. Strong networking knowledge: TCP/IP, DNS, DHCP, VPN, routing, switching, firewalls and NSGs. Strong Microsoft Intune / Endpoint Manager experience, including Autopilot and Win32 application deployment. Hands-on experience with EDR/endpoint security platforms such as CrowdStrike, Defender, SentinelOne or equivalent. Strong PowerShell scripting and automation skills. Experience with patch management and vulnerability remediation. Experience with backup and disaster recovery, such as Azure Backup or Veeam. Experience with Microsoft 365, Entra ID and Conditional Access. Strong documentation and communication skills.