IT Engineer III

We are looking for an experienced IT Engineer III to join our IT and Security team. The ideal candidate will be responsible for managing enterprise IT infrastructure, cloud services, endpoint management, identity and access management, security operations, and user support across a global organisation. This role requires strong hands-on expertise in cloud platforms, networking, security best practices, SaaS administration, and automation. The candidate should be capable of independently driving IT initiatives, improving operational efficiency, and ensuring a secure and scalable technology environment.

The candidate will have responsibilities across the following functions:

IT Infrastructure and Operations:

• Manage and maintain corporate IT infrastructure across cloud and SaaS environments.
• Administer endpoint management solutions for macOS, Windows, and mobile devices.
• Monitor system health, availability, and performance across critical business systems.
• Lead troubleshooting and resolution of complex infrastructure issues.
• Develop and maintain operational documentation, SOPs, and runbooks.

Identity and Access Management:

• Manage user lifecycle processes including onboarding, offboarding, and role changes.
• Administer SSO, MFA, and identity providers such as JumpCloud, Google Workspace, Okta, or Azure AD.
• Perform periodic access reviews and entitlement audits.
• Implement least-privilege access controls across enterprise systems.

Cloud and Networking:

• Support and maintain cloud infrastructure in GCP, AWS, or Azure.
• Manage DNS, VPN, Zero Trust access, firewalls, routing, and network security controls.
• Configure and troubleshoot VPCs, subnets, security groups, and cloud networking components.
• Support implementation of secure remote access solutions.

Security and Compliance:

• Assist in implementing and maintaining security controls aligned with ISO 27001 SOC 2 or similar frameworks.
• Perform vulnerability assessments and remediation tracking.
• Support endpoint security, EDR/XDR solutions, and security monitoring activities.
• Participate in incident response investigations and root cause analysis.
• Conduct periodic security reviews of SaaS applications and vendors.

SaaS and Collaboration Platforms:

• Administer platforms such as Google Workspace, Slack, Atlassian Suite, GitHub,
• Zoom, Figma, and other enterprise applications.
• Manage licenses, integrations, and user permissions.
• Optimise SaaS usage and costs through periodic reviews.

Automation and Continuous Improvement:

• Develop scripts and automation workflows using Python, Bash, PowerShell, or similar technologies.
• Automate repetitive operational tasks and reporting.
• Drive continuous improvement initiatives to enhance efficiency and security.

Vendor and Asset Management:

• Coordinate with vendors for procurement, renewals, and technical support.
• Maintain IT asset inventory and lifecycle management processes.
• Support software and hardware procurement activities.

Requirements:

• Bachelor's degree in Computer Science, Information Technology, or related field.
• 5-8 years of experience in IT Infrastructure, Systems Administration, or IT Security.
• Strong experience managing: Google Workspace, JumpCloud / Okta / Azure AD, macOS and Windows endpoints, Cloud platforms (GCP preferred).
• Enterprise networking and VPN technologies.
• Experience with scripting and automation.
• Strong understanding of: TCP/IP networking, DNS, DHCP, VPNs, Endpoint security, IAM and access governance, Security best practices.
• Excellent troubleshooting and communication skills.

Preferred Qualifications:

• Experience with Zero Trust platforms such as NetBird, Tailscale, Zscaler, Cloudflare Zero Trust, or similar.
• Experience supporting distributed global teams.
• Familiarity with security frameworks such as ISO 27001 SOC 2 and CIS Controls.
• Experience with SIEM, EDR, and vulnerability management tools.
• Relevant certifications: Google Cloud Associate Engineer, CompTIA Security+, Microsoft Azure Administrator, Okta Certified Professional, CCNA, ITIL Foundation.