Senior IT Infrastructure Engineer

With our groundbreaking satellite 5G constellation, OQ Technology is a global leader in the domain of IoT communication connectivity and associated services. We are a venture capital-backed company with a successful track record of satellite launches and the first company in the world to disrupt the telecommunications industry by merging cellular 5G with satellites.

Our technology has massive implications for the Oil & Gas, Maritime, Industry 4.0, and Transport sectors, particularly in the management and tracking of assets in remote and rural areas and in extending 5G coverage through non-terrestrial networks.

As our wireless technologies continue to evolve and earn multiple awards, with funding for the next phase secured and strong commercial traction demonstrated, we are now looking to onboard a talented Senior IT Infrastructure Engineer to strengthen and manage our IT infrastructure, support the scalability and reliability of our systems, and contribute to the continued growth and success of our organization.

Tasks

Identity & Access Management

• Administer and maintain Microsoft Entra ID (Azure AD), including user/group management, domain controllers, GPOs, and trust relationships.
• Manage AD-integrated services including DNS, DHCP, and directory replication.
• Implement and enforce SSO, MFA, and conditional access policies across the organisation.
• Own privileged access and service account management, ensuring robust access control across all systems and global offices.
• Provide escalated support for authentication, access control, and login issues.

Endpoint & Device Management

• Configure, manage, and monitor Microsoft Intune for MDM and MAM across Windows and macOS devices.
• Ensure seamless device enrolment, applying security policies, compliance profiles, and configuration baselines.
• Manage the full application lifecycle deployment, updates, and retirement across the device fleet.
• Monitor and report on device compliance and security events, implementing remediation measures as required.
• Troubleshoot and resolve escalated issues related to device compliance and endpoint security.

Infrastructure & Cloud

• Manage and support cloud infrastructure on AWS, including EC2, VPCs, security groups, S3, RDS, and IAM.
• Implement automation and infrastructure-as-code practices using AWS tools, PowerShell, Ansible, or Terraform.
• Monitor cloud performance, manage costs, and drive FinOps best practices to optimise spend.
• Install, configure, and maintain Linux-based systems across distributions including Ubuntu, CentOS, and RHEL.
• Manage Linux server administration tasks including firewalls, file systems, performance tuning, and application deployment.
• Administer virtualised environments (VMware, Hyper-V) and drive migration of appropriate workloads to cloud.
• Ensure high availability and disaster recovery through backup solutions and failover processes.

Network & Connectivity

• Manage and maintain office networking infrastructure including switches, access points, VLANs, and cabling across global sites.
• Administer and maintain site-to-site VPN or SD-WAN solutions connecting global offices.
• Manage remote access VPN for distributed and remote staff.
• Monitor network performance, troubleshoot connectivity issues, and ensure reliable, secure connectivity across all locations.
• Plan and deliver network infrastructure for new office locations as the company scales.

IT Security

• Own the company's IT security posture, including patch management cadence, vulnerability scanning, and endpoint protection.
• Manage AWS security tooling including Security Hub, GuardDuty, and CloudTrail.
• Monitor, manage, and report on security events and implement remediation measures to limit exposure.
• Maintain and enforce IT security policies and ensure compliance with relevant standards.
• Act as the primary point of contact for IT security incidents and coordinate response and recovery.

Helpdesk & Service Management

• Own and manage the IT helpdesk function, setting service standards, SLAs, and escalation paths.
• Own and administer the ITSM/ticketing platform, including workflows, reporting, and queue management.
• Monitor support trends and recurring issues, driving continuous improvement across the IT support function.
• Handle escalated technical issues from the helpdesk requiring senior technical intervention.
• Cover helpdesk duties during periods of absence or high demand.

Onboarding & Offboarding

• Design and own the end-to-end IT onboarding process across all global offices, including hardware provisioning, account setup, and software access.
• Coordinate international hardware shipping and ensure a consistent onboarding experience regardless of location.
• Own the offboarding process, ensuring full and timely deprovisioning of accounts, access, and device recovery.
• Maintain IT policies, procedures, and a knowledge base to support the helpdesk and wider organisation.

Asset, Licence & Vendor Management

• Maintain a full and accurate inventory of IT hardware assets across all global offices.
• Manage hardware lifecycle, refresh cycles, and obsolescence planning to stay ahead of capacity and supportability risks.
• Own software licence procurement, tracking, renewals, and compliance, with day-to-day record keeping supported by the helpdesk.
• Manage IT vendor and supplier relationships, contracts, and SLA oversight.
• Identify opportunities to consolidate tooling, reduce costs, and improve value from the IT supply chain.

Requirements

Education

• Bachelor's degree or higher in Computer Science, Information Technology, or a related field.
• Relevant professional certifications are required (see below).

Experience

• Proven experience in a IT infrastructure, systems administration, or IT management role.
• Demonstrated experience managing IT operations across multiple sites or international offices.
• Experience working in a fast-growing or scale-up environment is an advantage.
• Track record of leading IT projects and service delivery end-to-end.

Technical Skills

• Strong expertise in Microsoft Entra ID (Azure AD), Active Directory, GPOs, DNS, and DHCP.
• Hands-on experience with Microsoft Intune for device and application management across Windows and macOS.
• Proficiency with AWS cloud services including EC2, S3, VPC, RDS, and IAM.
• Solid Linux administration skills across Ubuntu, CentOS, and/or RHEL.
• Experience managing network infrastructure including switches, VLANs, VPN, and SD-WAN.
• Familiarity with virtualisation platforms (VMware and/or Hyper-V).
• Experience with automation and infrastructure-as-code tooling such as Terraform, Ansible, or PowerShell.
• Knowledge of IT security best practices, vulnerability management, and incident response.
• Experience with ITSM/ticketing platforms such as Jira Service Management or equivalent.

Certifications

• Microsoft: Microsoft 365 Administrator or equivalent Entra ID / Intune certification.
• AWS: AWS Certified SysOps Administrator or AWS Certified Solutions Architect.
• Linux: RHCE (Red Hat Certified Engineer) or LPIC-2 or equivalent.
• ITIL Foundation or higher for service management.
• Security: CompTIA Security+ or CISSP desirable.

Soft Skills

• Strong organisational and prioritisation skills with the ability to manage multiple workstreams.
• Excellent communication skills able to engage effectively with technical and non-technical stakeholders.
• Self-directed and comfortable working autonomously in a fast-paced environment.
• Collaborative team player with experience mentoring or guiding junior colleagues.

Benefits

• Enjoy a 50% income tax exemption on your salary - an exceptional incentive for top talent relocating to Luxembourg, subject to eligibility conditions.
• Hybrid working environment.
• Opportunity to work on flagship EU space mission projects.
• A dynamic, high-growth environment with career development opportunities.
• Regular company events and team activities.