IT Infrastructure and Security Engineer

• Help manage global infrastructure spanning Windows Server 2022, SQL Server, MongoDB, Redis, and Cloudflare across four regions
• Support availability, performance, and scalability of the revenue-critical CloudToolz platform
• Support deployments of CloudToolz releases integrating with Dynamics, iMIS, Salesforce, and native CRM/CMS
• Contribute to the Kubernetes migration, including deployments, scaling, network policies, and RBAC
• Build and maintain a Grafana OSS observability stack with dashboards, alerting, metrics, logs, and traces
• Assist with DNS, CDN, WAF, and DDoS protection through Cloudflare
• Monitor system performance and participate in incident response and recovery
• Maintain documentation, runbooks, and disaster recovery procedures
• Write shell scripts and small infrastructure-related applications, automation tools, monitoring utilities, and internal dashboards
• Support identity and access management, endpoint protection, and vulnerability management
• Help administer Microsoft 365, Bitwarden, Bitdefender GravityZone, and KnowBe4 policies
• Contribute to GDPR/ISO 27001-aligned data protection policies, security awareness training, phishing simulations, and threat monitoring/response
• Support Microsoft 365 administration across Exchange Online, SharePoint, Teams, and Entra ID
• Support Salesforce administration within scope
• Share responsibility for endpoint security and password management configuration
• Provide input on infrastructure scaling, architecture decisions, and the containerisation roadmap
• Support infrastructure-as-code adoption and automate routine operations using PowerShell, shell scripting, and other languages
• Contribute to sprint planning for environment-level requirements
• Participate in on-call rotation and handle out-of-hours escalation responsibilities

• 2+ years of experience in IT infrastructure, cloud operations, systems administration, or DevOps
• Hands-on experience with Windows Server 2022, SQL Server, MongoDB, and Redis in operational contexts
• Practical Cloudflare experience with DNS, WAF, CDN, and security features
• Working proficiency in Microsoft 365 administration, including Entra ID, Exchange Online, and SharePoint
• Hands-on Kubernetes experience with workload deployment, basic cluster operations, ingress, network policies, and RBAC
• Solid understanding of networking fundamentals, including firewalls, VPNs, DNS, and access control
• Working knowledge of GDPR and experience supporting compliance controls
• Ability to write shell scripts and program in at least one modern language, such as Python, Go, C#, or JavaScript/TypeScript
• Willingness to build small infrastructure-related applications and tools
• Strong communication skills and ability to work independently within a distributed, multi-time-zone team
• Preferred: Experience with Grafana OSS, Prometheus, and Loki
• Preferred: Familiarity with Docker, containerd, Helm, and kubectl
• Preferred: Certifications such as MCSA, CompTIA Security+, CKA, or equivalent
• Preferred: Familiarity with ISO 27001 audit/certification processes
• Preferred: PowerShell scripting for automation and reporting
• Preferred: Exposure to Terraform, Pulumi, Ansible, CI/CD, or GitOps
• Preferred: Salesforce administration experience
• Must include a cover letter with the CV

• Performance bonus: Discretionary, based on individual and company performance
• Pension: Employer contribution in line with local requirements
• Flexible working: Remote-first; flexible hours with availability for global coordination
• Full-time, permanent position
• Six-month probation period