Senior Corporate IT Engineer

About the role

DCONSTRUCT Robotics is seeking a Senior Corporate IT Engineer to design, build and scale the IT infrastructure that supports rapid growth. You will own identity and endpoint services, collaborate on network design, and drive the processes needed for a mature, secure corporate environment.

Key responsibilities

• Administer Microsoft 365 suite (Exchange Online, SharePoint, Teams, OneDrive) including licensing, security policies and compliance settings.
• Manage Entra ID (Azure AD) – conditional access, SSO/SAML integrations, identity governance and hybrid sync with on‑prem AD.
• Maintain on‑prem Active Directory, domain controllers, GPOs and the joiner‑mover‑leaver lifecycle, automating onboarding and off‑boarding.
• Oversee Windows, macOS and Linux endpoint fleets – imaging, patching, lifecycle management and MDM (Intune, Jamf or similar).
• Collaborate on LAN/WAN, VLAN, firewall, switch, VPN and Wi‑Fi design, implementation and troubleshooting.
• Implement endpoint security tools (EDR/AV, disk encryption, DLP) and centralised logging/monitoring using an open‑source stack such as Wazuh.
• Define backup strategy, disaster‑recovery planning and conduct regular DR testing.
• Support compliance initiatives (SOC 2, ISO 27001) by preparing documentation, evidence and remediation tracking.

Required profile

• Proven experience managing corporate identity, endpoint and network infrastructure in a fast‑growing technology company.
• Strong understanding of change management, documentation and disaster‑recovery processes.
• Ability to act as senior technical escalation point and partner closely with security, engineering and other technical teams.

Required skills

• Microsoft 365 (Exchange Online, SharePoint, Teams, OneDrive)
• Entra ID / Azure AD, SSO, SAML, conditional access
• On‑prem Active Directory, GPO, Entra Connect
• Windows, macOS, Linux endpoint management, imaging and patching
• MDM solutions – Intune, Jamf or equivalent
• Network fundamentals – LAN/WAN, VLANs, firewalls, switches, VPN, Wi‑Fi
• Endpoint security – EDR/AV, disk encryption, DLP
• Logging and monitoring – Wazuh or similar open‑source stack
• Backup and disaster‑recovery planning
• Compliance frameworks – SOC 2, ISO 27001