IT Systems Engineer (Azure, Security, Intune & Networks)

About the role

Junior Adventures Group (JAG) is evolving its IT environment to be more scalable, secure and efficient, and is looking for an IT Systems Engineer to take ownership of improving and shaping the systems, reducing recurring issues and strengthening security. The role is not a "keep the lights on" position. Working onsite from the Camberwell office 3-4 days per week, you will work closely with the IT Operations Manager and act as a senior escalation point, solving complex issues while supporting and mentoring the wider IT team.

Key responsibilities

• Design, implement and support enterprise infrastructure across Microsoft Azure, Microsoft 365 and integrated SaaS platforms, including Entra ID, Conditional Access and Microsoft Defender security controls aligned with Microsoft 365 A5 / Defender for Endpoint P2 best practices.
• Design and maintain Zero Trust security architectures with phishing-resistant MFA, device compliance, privileged access controls and endpoint security baselines.
• Manage and enhance Microsoft Intune environments, including device enrolment, compliance policies, application deployments and mobile security controls for iOS and Android.
• Design and implement Azure Virtual Desktop environments, including host pools, FSLogix profiles and performance optimisation.
• Plan, deploy and support enterprise networking solutions, including Cisco Meraki and Ubiquiti switching, wireless, firewall, VPN and SD-WAN connectivity.
• Lead infrastructure and security projects from design through implementation, testing and operational handover.
• Monitor infrastructure performance, security posture and operational resilience, and act as escalation point for complex issues and critical incidents.
• Proactively identify risks, vulnerabilities and improvement opportunities across cloud, endpoint, security and network platforms.
• Develop and maintain technical standards, system documentation, network diagrams and operational procedures.
• Mentor service desk and junior infrastructure team members and collaborate with business stakeholders and vendors on technology solutions.

Required profile

• Desirable: 5+ years' experience in Systems Engineering, Infrastructure Engineering or a similar role.
• Experience implementing and supporting Defender for Endpoint P2, Defender for Identity, Defender for Office 365, Microsoft Cloud App Security and Identity Protection.
• Experience managing iOS and Android enterprise mobility environments, MDM and MAM.
• Experience with security frameworks and Zero Trust principles.
• Excellent documentation, communication and stakeholder engagement skills.

Required skills

• Microsoft Azure, Microsoft 365, Microsoft Entra ID (Azure AD), Microsoft Intune, Conditional Access, Microsoft Defender Suite, Azure Virtual Desktop (AVD)
• Cisco Meraki, Ubiquiti UniFi, firewalls, VPNs, WAN and wireless networking
• Strong PowerShell automation and troubleshooting skills
• Desirable certifications: Azure Administrator Associate, Identity and Access Administrator Associate, Endpoint Administrator Associate, Azure Security Engineer Associate, CMSS, CompTIA Security+, CISSP

What we offer

• Competitive salary in line with market rates
• Free undercover parking
• Salary sacrificing options
• A supportive, collaborative team environment
• Rare occasional after-hours work for critical changes