Systems Engineer – End‑User Support & Cybersecurity

About the role

We are looking for a Systems Engineer who will provide end‑user support, manage servers and cloud services, and strengthen our cybersecurity posture. The role combines hands‑on technical work with proactive monitoring and continuous improvement of our IT infrastructure.

Key responsibilities

• Provide Level 1 and Level 2 support for laptops, endpoint protection, BitLocker encryption, VPN configuration, and Microsoft 365 issues.
• Deploy and configure Windows Server virtual machines on VMware and manage Active Directory, Exchange Online, and SharePoint Online.
• Administer Synology NAS storage, backup, disaster recovery, and data restoration.
• Configure, maintain and troubleshoot Sophos Firewall, VPN, UniFi wireless networks and Aruba/HP switches.
• Perform firmware, software and security updates for servers, network devices and endpoint devices.
• Generate cybersecurity reports, analyse firewall logs, monitor network performance and investigate security alerts.
• Conduct system hardening, vulnerability assessments and remediation across servers, endpoints and cloud services.
• Maintain IT infrastructure documentation, network diagrams and asset inventory.
• Participate in IT projects, infrastructure upgrades and continuous‑improvement initiatives.

Required profile

• Remains calm and thinks clearly under pressure.
• Works well both independently and as part of a team.
• Takes ownership of issues and sees them through to resolution.
• Anticipates risks and opportunities before they become problems.
• Naturally curious and enjoys solving root‑cause problems.
• Communicates technical concepts in simple, practical terms.

Required skills

• Windows Server (including virtual machines on VMware).
• Microsoft 365 administration (Active Directory, Exchange Online, SharePoint Online).
• Endpoint protection, BitLocker encryption, VPN configuration.
• Synology NAS storage and backup solutions.
• Sophos Firewall, UniFi wireless, Aruba/HP switches.
• System hardening and vulnerability assessment tools.
• Traffic analysis using firewall logs and network monitoring tools.
• SSL certificate management.
• Documentation of IT infrastructure and asset inventory.