JOB DESCRIPTION SENIOR INFRASTRUCTURE & SYSTEMS ENGINEER (T3--T4) Location: Claremont, Cape Town with travel to Group sites required** Job Type:** Permanent, Full-Time -- in-office** Seniority:** T3--T4 | Senior Technical Specialist Reports to : IT Manager THE OPPORTUNITY K2 Recruit is recruiting on behalf of our client for an experienced Senior Infrastructure & Systems Engineer to provide advanced technical expertise and specialist support across a diverse, multi-site IT environment. This is a senior, hands-on technical role suited to an infrastructure professional who can take ownership of complex escalations, troubleshoot issues at root-cause level, strengthen cybersecurity and implement reliable, secure technology solutions. Working closely with the IT Manager, you will play a key role in maintaining and continuously improving the Group's IT infrastructure, Microsoft 365 environment, networking, virtualisation and security operations across multiple entities and locations. The ideal candidate is technically strong, methodical and comfortable working independently, with the ability to lead technical delivery, implement structured changes and support and mentor regional IT support technicians. PRIME PURPOSE OF THE POSITION To provide senior technical expertise and specialist support across the Group's IT infrastructure, systems, Microsoft 365 environment, networking and cybersecurity. The role is responsible for resolving complex technical issues through root-cause analysis, implementing and maintaining secure and reliable technology solutions, and supporting the IT Manager in ensuring the stability, performance and continuous improvement of the Group's IT environment across all entities. KEY RESPONSIBILITIES 1. Advanced Technical Support & Infrastructure Management Act as the third-line (T3/T4) technical escalation point across all entities, sites and support categories. Investigate complex technical incidents, perform root-cause analysis and implement permanent corrective solutions. Administer and maintain Windows Server, Active Directory, VMware virtualisation, storage and backup/data-protection platforms. Monitor infrastructure performance, availability and reliability, identifying opportunities for improvement. 2. Microsoft 365 & Identity Management Administer the hybrid Microsoft 365 and Exchange Server environment. Manage Entra ID identity services, access controls and identity-related configurations. Maintain email security and authentication technologies, ensuring secure and reliable communications. Manage endpoint deployment, configuration and policy enforcement through Microsoft Intune across Windows, Android Enterprise and iOS devices. 3. Networking & Connectivity Administer and maintain the FortiGate firewall environment and UniFi network estate. Manage site-to-site connectivity across the Group's locations. Troubleshoot complex network, firewall, connectivity and performance issues. Support network security, reliability and consistent infrastructure standards across all sites. 4. Cybersecurity & Risk Management Lead technical security incident response, investigation and remediation. Conduct log analysis, vulnerability remediation and system hardening. Identify and address infrastructure security risks, weaknesses and configuration issues. Apply security best practices across identity, endpoint, network and server environments. 5. Automation & Technical Improvement Develop and maintain PowerShell scripts to automate recurring administrative and infrastructure tasks. Apply a structured, evidence-based approach to scripting and changes, including dry-run validation, testing and appropriate rollback planning. Support integrations with line-of-business systems and related technical platforms. Identify opportunities to improve operational efficiency, system resilience and IT service delivery. 6. Technical Projects & Team Support Lead the technical delivery of infrastructure projects, upgrades, migrations and improvements. Support the IT Manager with technical planning, implementation and continuous improvement initiatives. Provide technical guidance and mentorship to regional support technicians. Maintain accurate technical documentation, change records and supporting evidence. MINIMUM EDUCATION & EXPERIENCE REQUIREMENTS 6--8+ years' experience in infrastructure engineering, systems engineering or a comparable technical environment. Demonstrable senior-level ownership of a complex, multi-site IT infrastructure. Strong hands-on experience with hybrid Exchange and Microsoft 365 environments. Advanced working knowledge of Microsoft Entra ID and Microsoft Intune. Strong experience administering Fortinet firewalls and enterprise networking environments, including UniFi. Hands-on expertise in Windows Server, Active Directory, VMware virtualisation, storage and backup/data-protection solutions. Strong PowerShell scripting and automation capabilities. Experience implementing structured, documented and evidence-based technical changes. Practical cybersecurity experience, including incident response, log analysis, vulnerability remediation and system hardening, is strongly preferred. Valid driver's licence and willingness to travel periodically to Group sites, including packhouses, cold stores and farm environments. ADVANTAGEOUS CERTIFICATIONS Relevant technical certifications will be beneficial, including: Microsoft MS-102 -- Microsoft 365 Administrator Microsoft AZ-104 -- Azure Administrator Microsoft SC-300 -- Identity and Access Administrator Fortinet NSE 4 or equivalent Fortinet certification VMware Certified Professional (VCP) ITIL certification Equivalent practical experience and demonstrable technical capability will also be considered. KEY COMPETENCIES & ATTRIBUTES The successful candidate will demonstrate: Advanced troubleshooting and analytical thinking: Ability to diagnose complex technical issues, identify root causes and implement sustainable solutions. Attention to detail and accuracy: Maintains high standards in configurations, documentation, security and change execution. Structured problem-solving: Applies a disciplined, evidence-based approach to technical investigation, testing and implementation. Cybersecurity awareness: Understands the importance of secure configurations, access management, vulnerability remediation and risk mitigation. Independent working capability: Takes ownership of technical responsibilities and works effectively with minimal supervision. Communication skills: Explains technical issues clearly to technical and non-technical stakeholders. Organisation and prioritisation: Manages competing incidents, projects and deadlines effectively. Professionalism and confidentiality: Handles sensitive business information responsibly and maintains a disciplined work ethic. Pressure management: Remains calm and methodical when resolving critical incidents and meeting operational deadlines. Leadership and collaboration: Supports the IT Manager and contributes to the development and effectiveness of regional support technicians. IDEAL CANDIDATE PROFILE This opportunity will suit a technically accomplished infrastructure or systems engineer who has progressed beyond routine support into advanced troubleshooting, infrastructure ownership and technical leadership. The successful individual will be comfortable working across Microsoft technologies, networking, virtualisation and cybersecurity, with the judgement to distinguish between temporary workarounds and lasting technical solutions. A proactive, security-conscious and methodical approach is essential, together with the ability to manage complex technical responsibilities across a geographically distributed business. WHY CONSIDER THIS OPPORTUNITY? This is an opportunity to take on a senior technical position with meaningful responsibility for infrastructure stability, cybersecurity, technical projects and continuous improvement across a multi-site Group environment. You will work closely with the IT Manager, contribute to key technology decisions and have the opportunity to apply your technical expertise across a broad and varied infrastructure landscape. Interested in taking the next step in your infrastructure career? Please note: This is a T3--T4 senior technical position requiring substantial hands-on infrastructure experience and the ability to take ownership of complex technical environments.