Cloud, Identity and Core Infrastructure Engineering

• Design, implement, operate and troubleshoot Microsoft Azure, Microsoft Entra ID, Active Directory, Windows Server, DNS and hybrid-cloud infrastructure.
• Engineer Azure compute, networking, storage, governance, monitoring, backup and disaster-recovery services.
• Maintain secure, resilient identity, authentication, directory, server and DNS services across cloud and on-premises environments.
• Experience supporting SharePoint Server on-premises, including farm administration, patching, upgrades, service applications, search services, SQL dependencies, authentication, certificates and infrastructure troubleshooting

Advanced Troubleshooting, Incident Management and Root-Cause Analysis

• Own complex production incidents from triage through evidence-based root-cause analysis, remediation and prevention.
• Correlate application, operating-system, identity, DNS, network, firewall, storage, virtualisation and cloud telemetry.
• Lead P1 / Severity 1 technical bridges, vendor escalations and defensible incident reporting

Networking, Virtualisation, Storage and Infrastructure Security 

• Troubleshoot TCP/IP, routing, firewalls, load balancing, VPNs, private connectivity and cross-platform network dependencies.
• Lead Azure security remediation through Microsoft Defender for Cloud, ensuring that identified vulnerabilities, security recommendations and configuration risks are appropriately prioritised and addressed.
• Partner with the external SOC to manage and remediate security exposures, reduce infrastructure risk and improve Tracker’s overall security posture.
• Apply least privilege, hardening, patching, certificate, vulnerability-remediation, audit and change-governance controls

• Participate in and, where appropriate, lead Azure, datacentre, domain, server, hybrid integration, security and disaster-recovery workstreams.
• Produce technical designs, implementation and rollback plans, risk assessments, architecture diagrams and operational documentation.
• Plan and test backup, recovery, high availability, failover and business-continuity capabilities.

• Ideally 7 years in enterprise infrastructure environments.
• Ideally 6 years of advanced Microsoft Windows Server experience.
• Ideally 4 years of substantial hands-on Microsoft Azure experience.
• Extensive Active Directory, Microsoft Entra ID, DNS and enterprise networking experience.
• Experience with highly available, business-critical production systems, hybrid cloud, advanced troubleshooting, P1 incidents, root-cause analysis, and formal change-management and governance processes.
• Expert Microsoft Azure, including compute, networking, governance, storage, resilience, monitoring, security, capacity planning, cost optimisation and automation.
• Expert Microsoft Entra ID, identity and authentication, including hybrid identity, SSO, enterprise applications, app registrations, managed identities, Conditional Access, MFA, PIM and Identity Protection.
• Expert Active Directory, including AD DS, replication, Kerberos, NTLM, LDAP/LDAPS, SPNs, trusts, Group Policy, migrations and cross-domain authentication.
• Experience supporting SharePoint Server on-premises, including farm administration, patching, upgrades, service applications, search services, SQL dependencies, authentication, certificates and infrastructure troubleshooting.
• Expert DNS, Windows Server, TCP/IP and enterprise networking, Azure networking and hybrid-cloud infrastructure.
• Expert infrastructure troubleshooting and root-cause analysis, with advanced / expert PowerShell capability
• Advanced infrastructure security, including least privilege, hardening, segmentation, certificate management, patching, vulnerability remediation, audit evidence and change governance.
• Manage Microsoft Defender for Cloud and drive Azure security remediation activities.
• Work closely with the external SOC to remediate identified security exposures and improve Tracker’s overall security posture.
• Exposure to Active Directory Certificate Services, Microsoft Defender for Cloud and Azure security-remediation tooling.
• Monitoring, incident management, backup, recovery, disaster recovery and business continuity
• Experience with infrastructure automation and infrastructure-as-code tools, including Terraform, Bicep, ARM templates, Azure CLI, Azure Automation and PowerShell.