Senior Network & Infrastructure Engineer

Responsibilities

• Oversee FortiGate firewall configurations, VPN connectivity, internet access policies, and security rule sets.
  
• Liaise with Internet Service Providers, telecommunications firms, and external network vendors to ensure seamless connectivity.
  
• Administer the full AWS landscape, including EC2 instances, S3 storage, VPC networking, RDS/Aurora databases, and IAM Identity Center governance.
  
• Implement robust monitoring strategies for infrastructure health, automated backups, patch management, capacity planning, and disaster recovery protocols.
  
• Manage the Microsoft 365 suite, covering Exchange Online, Entra ID, Intune, Teams, and SharePoint, while overseeing user lifecycle management, license allocation, and access controls.
  
• Enforce endpoint security standards using Microsoft Defender and Trellix EDR/XDR, ensuring device compliance, Group Policy adherence, and Windows hardening.
  
• Handle the complete IT asset lifecycle, from onboarding and offboarding procedures to equipment management.
  
• Coordinate IT incident response, change management, service requests, and the maintenance of technical documentation.
  
• Manage vendor relationships, including contract negotiations, renewals, licensing, and support coordination.
  

• Configure and maintain Cloudflare services, including DNS management, CDN optimization, SSL/TLS certificates, and Web Application Firewall (WAF) rules.
  
• Administer domain registration, DNS records, and SSL certificates across Cloudflare, AWS Route 53, and HostGator.
  
• Manage HostGator/cPanel hosting environments, including websites, email systems, FTP/SFTP access, and backup procedures.
  
• Configure Single Sign-On (SSO), OAuth flows, application registrations, and enterprise app integrations within Entra ID.
  
• Collaborate with development teams to support Teams integrations, adaptive cards, and approval workflows.
  

• Maintain email security protocols, anti-phishing measures, Data Loss Prevention (DLP) strategies, and vulnerability remediation efforts.
  
• Assist in security assessments, system hardening, and adherence to regulatory compliance standards.
  
• Collaborate with Finance and Procurement departments to process purchase orders, invoices, vendor payments, and license renewals.
  
• Drive process improvement and automation initiatives using PowerShell, AWS Lambda, and basic Python scripting.
  
• Ensure accurate record-keeping for IT assets, network diagrams, and operational documentation.
  

• Network & Security: Proficiency with FortiGate firewalls, VPNs, Cloudflare (DNS, CDN, WAF, SSL), DNS routing, and proxy configurations.
  
• Cloud Computing: Deep experience with AWS services including EC2, S3, VPC, RDS/Aurora, IAM, Route 53, Lambda, EventBridge, and SSM.
  
• Microsoft 365: Strong administration skills for Exchange Online, Entra ID (SSO/OAuth), Intune, Teams, SharePoint, and CSP licensing models.
  
• Endpoint Security: Expertise in Microsoft Defender, Trellix EDR/XDR, Group Policy, Windows hardening, and DLP implementation.
  
• Server & Hosting: Competence in managing Windows Server, Active Directory, IIS, SQL Server, MySQL, and HostGator/cPanel environments.
  
• Automation: Advanced PowerShell scripting capabilities, familiarity with AWS Lambda/EventBridge, and basic Python programming skills.
  
• Applications & Integration: Knowledge of REST APIs, SSO/OAuth protocols, Teams application development, and web application infrastructure.
  
• IT Operations: Experience in asset management, licensing administration, vendor management, and incident/change management frameworks.
  

• Demonstrated history of managing a full-spectrum IT environment in a live corporate setting, rather than isolated components.
  
• Exceptional troubleshooting abilities spanning network, DNS, SSL, cloud, and application layers.
  
• A security-first mindset with the ability to implement least-privilege principles and compliance controls effectively.
  
• Self-motivated professional capable of planning, documenting, and executing complex changes independently.
  
• Strong communication skills for interacting with vendors, finance teams, and non-technical stakeholders.
  
• Relevant certifications such as AWS Solutions Architect, AWS SysOps, Fortinet NSE, Microsoft MS-102, or AZ-104 are highly desirable.
  

Key Performance Objectives

• Ensure maximum uptime and high availability for network, cloud, hosting, and Microsoft 365 services.
  
• Maintain secure and compliant endpoints, servers, identities, and public-facing applications.
  
• Reduce the frequency of recurring incidents through proactive monitoring, automation, and thorough root-cause analysis.
  
• Optimize infrastructure and licensing expenditures through strategic cost management and timely renewals.