Senior It And Infrastructure Manager

1. IT Infrastructure Management

• Manage and maintain IT infrastructure across Head Office and all branch locations, including desktops, laptops, servers, printers, network devices, and related IT systems.
• Ensure high availability, performance, reliability, and security of IT infrastructure.
• Manage hardware installation, configuration, upgrades, preventive maintenance, and troubleshooting.
• Monitor infrastructure performance and implement preventive measures to minimise downtime.
• Maintain infrastructure documentation, asset inventories, configuration records, and operational reports.

2. Network and Firewall Management

• Manage LAN, WAN, Wi-Fi, VPNs, routers, switches, firewalls, and network connectivity across Head Office and branches.
• Configure and maintain firewall policies, access control rules, VPN connectivity, network segmentation, and traffic filtering.
• Review firewall logs, investigate suspicious network activity, and implement appropriate security measures.
• Coordinate with network service providers and vendors for connectivity issues and infrastructure upgrades.
• Conduct periodic network security reviews and ensure secure connectivity between branch offices and Head Office.

3. Microsoft 365 and Office 365 Administration

• Administer the Microsoft 365 environment, including user accounts, licenses, groups, mailboxes, and access permissions.
• Manage the Microsoft 365 Admin Center, Exchange Online, SharePoint Online, OneDrive, and Microsoft Teams.
• Manage user onboarding, offboarding, account deactivation, license allocation, and access revocation.
• Implement and maintain email security controls, spam and phishing protection, MFA, and access policies.
• Monitor Microsoft 365 service health, investigate user issues, and coordinate with Microsoft support when required.
• Ensure appropriate access controls and compliance settings are maintained across Microsoft 365 services.

4. Endpoint and Device Management Microsoft Intune

• Manage endpoint devices using Microsoft Intune, including corporate laptops, desktops, and supported mobile devices.
• Configure device enrolment, compliance policies, configuration profiles, application deployment, and security baselines.
• Implement and manage device encryption, endpoint protection, patching, and operating system update policies.
• Manage device lifecycle activities, including provisioning, inventory tracking, remote lock, and wipe where authorized.
• Ensure corporate devices comply with organizational security policies before accessing business applications and data.
• Troubleshoot device compliance, application deployment, enrolment, and endpoint management issues.

5. Data Loss Prevention (DLP) and Information Security

• Implement and manage Data Loss Prevention (DLP) policies to prevent unauthorised sharing or leakage of confidential business information.
• Manage Microsoft Purview DLP policies for Exchange Online, SharePoint Online, OneDrive, and other supported workloads.
• Define and enforce policies for sensitive data handling, external sharing, email attachments, and unauthorised data transfers.
• Review DLP alerts, investigate policy violations, and coordinate with relevant stakeholders for remediation.
• Implement security controls covering endpoint protection, antivirus/EDR, MFA, privileged access, and secure data handling.
• Coordinate with internal teams and vendors to investigate security incidents and implement corrective actions.

6. Active Directory and Identity Management

• Manage on-premises Active Directory services across Head Office and branch locations.
• Administer user accounts, security groups, organisational units, Group Policy Objects (GPOs), and computer objects.
• Manage domain joining, authentication, password policies, access permissions, and account lockout issues.
• Maintain Active Directory replication, DNS, DHCP, domain controllers, and related infrastructure wherever applicable.
• Implement least-privilege access, privileged account controls, and periodic access reviews.
• Manage user onboarding and offboarding processes, ensuring timely creation, modification, and disabling of accounts.
• Coordinate and maintain synchronisation between on-premises Active Directory and Microsoft Entra ID, where applicable.

7. CCTV, Camera and Biometric Access Systems

• Manage CCTV cameras, video surveillance systems, NVR/DVR devices, recording storage, and monitoring availability across Head Office and branches.
• Manage biometric attendance systems, access control devices, and associated user enrolment and configuration.
• Coordinate installation, maintenance, troubleshooting, and upgrades of CCTV and biometric systems.
• Ensure appropriate access permissions, recording retention, system availability, and secure handling of surveillance data.
• Coordinate with facility management, HR, and external vendors for attendance system integration and access-related issues.

8. Server, Backup and Disaster Recovery Management

• Manage physical and virtual servers, operating systems, storage, and related infrastructure.
• Monitor server health, capacity, availability, patching, and performance.
• Manage backup solutions, backup schedules, restoration testing, and backup monitoring.
• Develop and maintain disaster recovery procedures and business continuity plans.
• Conduct periodic recovery testing and document recovery procedures to minimise business disruption.

9. IT Asset, Licensing and Vendor Management

• Manage the complete IT asset lifecycle, including procurement coordination, allocation, inventory, maintenance, and retirement.
• Maintain accurate records of hardware, software, warranties, AMC contracts, and vendor agreements.
• Manage Microsoft 365 and other software licenses, ensuring appropriate allocation and compliance.
• Coordinate with vendors and service providers for support, renewals, hardware repairs, and infrastructure upgrades.
• Track vendor performance, service-level commitments, costs, and renewal timelines.
• Identify opportunities for IT cost optimisation without compromising security or service quality.

10. IT Service Delivery and Team Management

• Lead and manage the IT infrastructure and support team across Head Office and branch locations.
• Allocate tasks, monitor performance, and ensure timely resolution of incidents and service requests.
• Establish service delivery KPIs, escalation procedures, and ticket management standards.
• Maintain an effective IT helpdesk and ensure appropriate prioritisation of critical incidents.
• Coordinate with internal departments and management to address business technology requirements.
• Prepare periodic reports on incidents, availability, security issues, assets, costs, and service performance.

11. IT Governance, Audit and Compliance

• Ensure adherence to organisational IT policies, security standards, and applicable compliance requirements.
• Support ISO 27001:2022, ISMS audits, internal IT audits, and external assessments.
• Maintain evidence and documentation for access reviews, asset management, backup testing, security controls, and incident handling.
• Review IT risks and vulnerabilities and coordinate corrective and preventive actions.
• Ensure timely remediation of audit observations and compliance gaps.

Required Technical Skills

• Strong knowledge of enterprise IT infrastructure, hardware, operating systems, and networking.
• Hands-on experience with Microsoft 365 administration and identity management.
• Practical experience with Microsoft Intune, endpoint compliance, device management, and application deployment.
• Knowledge of DLP implementation and Microsoft Purview security controls.
• Strong understanding of Active Directory, Group Policy, DNS, DHCP, and Microsoft Entra ID.
• Experience managing firewalls, VPNs, switches, routers, LAN/WAN, and network security.
• Knowledge of server management, virtualization, backup, disaster recovery, and business continuity.
• Experience managing CCTV, NVR/DVR, biometric attendance, and access control systems.
• Understanding of endpoint protection, patch management, MFA, access governance, and security incident handling.
• Familiarity with IT asset management, software licensing, vendor management, and ITSM/ticketing tools.
• Knowledge of ISO 27001:2022 and ISMS requirements is an advantage.

Preferred Experience and Qualifications

• Bachelor's degree in Information Technology, Computer Science, or a related discipline.
• 812 years of relevant IT infrastructure experience, including team management responsibilities.
• Demonstrated experience managing IT infrastructure across multiple offices or branch locations.
• Relevant certifications in Microsoft 365, Microsoft Intune, networking, firewall technologies, or IT infrastructure management are an advantage.
• Strong communication,leadership, vendor coordination, documentation, and stakeholder management skills.

Key Performance Indicators (KPIs)

• IT infrastructure availability and reduction in unplanned downtime.
• Timely resolution of incidents and service requests against agreed SLAs.
• Endpoint compliance, patching, and device management coverage.
• Effectiveness of DLP, identity management, and access control implementation.
• Successful completion of backup restoration and disaster recovery tests.
• Timely closure of IT audit observations and security findings.
• Accuracy of IT asset inventory and software license compliance.
• Vendor SLA performance and IT cost optimization.

Effective support coverage across Head Office and branch locations