3rd-line support engineer / workplace engineer

As a 3rd-Line IT Architect & System Administrator, you’ll be the trusted technical expert for our end clients—stepping in when complex challenges go beyond the 1st- and 2nd-line service desks.

But this role is about more than solving today’s problems. You’ll take a proactive approach to designing, standardizing, and automating modern IT environments for around 20 SME clients, each with 20 to 250 workstations, across sectors such as construction, manufacturing, and business services.

Your goal? Build smarter, more reliable IT environments that prevent recurring issues, reduce incident volumes, and make a lasting impact for your clients.

Requirements

Here’s a more polished and consistent version:

Key Responsibilities

• Escalations & Diagnostics: Take ownership of complex third-line incidents across firewalls, AD/DNS, endpoint security, and Microsoft 365, applying structured root-cause analysis rather than trial-and-error troubleshooting.

• Projects & Architecture: Design, plan, and deliver infrastructure and cloud projects, including GPO-to-Intune migrations, cloud-only transitions, server upgrades, and SharePoint implementations.

• Automation & Optimisation: Build PowerShell scripts and improve operational workflows using RMM/PSA platforms, APIs, and AI integrations to reduce manual effort and increase efficiency.

• Lifecycle & Vendor Management: Proactively identify hardware and software lifecycle requirements up to 12 months in advance, while maintaining direct relationships with key vendors such as Fortinet, Microsoft, and HPE.

• Security & Compliance: Translate frameworks and requirements such as NIS2, CyFun, and ISO 27001 into practical technical controls, and communicate recommendations clearly to both technical teams and C-level stakeholders.

Requirements

• Core Technical Expertise: Strong expertise across the Microsoft ecosystem, including Windows Server, modern workplace management, and Microsoft 365, supported by a broad IT infrastructure background and the ability to quickly learn and adopt new technologies.

• Preferred Experience:

• Identity & Cloud: Entra ID, Intune, Hybrid Join, Autopilot, Active Directory, Group Policy, and DNS.

• Networking & Security: FortiGate/FortiClient, VPN/ZTNA, VLANs, UniFi, EDR solutions such as SentinelOne, and MFA platforms such as Duo.

• Virtualisation, Infrastructure & Management: VMware/ESXi, HPE servers, PowerShell, NinjaOne, and HaloPSA.

• Mindset & Communication: A strong sense of ownership with a root-cause-first approach to problem solving. Confident communicating with everyone from engineers to board-level stakeholders, with a disciplined approach to clear and accurate documentation.