Lead Server Engineer
The Lead Server Engineer is responsible for the design, implementation, optimisation, and technical leadership of the organisation’s on-premises and cloud server infrastructure. This role provides senior-level expertise across virtualisation, storage, server, security, automation, and disaster recovery, and acts as the highest point of technical escalation for server-related incidents. The Lead Server Engineer also acts as an escalation point for the server infrastructure team and contributes to architectural planning and technology roadmaps.
Our ideal candidate is highly autonomous, very detail orientated, possess strong written and verbal communication skills and has significant experience in supporting medium to large scale, enterprise class Infrastructure and/or Cloud environments while maintaining our relationship with external service providers.
Key Responsibilities
- Server Infrastructure Management
- Oversee infrastructure including support, design, building and maintaining operating systems, application software and system management tools
- Lead infrastructure upgrades, refresh cycles, and capacity planning
- Conduct Risk assessments and assist with the baseline requirements for changes in the infrastructure in line with the agreed change management processes
- Commission and decommission hardware and software and other related infrastructure components in accordance to established safety, quality vendor specific best practices,
- Support, Design and build installation procedures and standards
- Support asset management initiatives through ensuring that the administration, storage, distribution, movement and disposal of hardware and software assets are carried out.
- Contribute to the planning, implementation, building and configuration of IT Infrastructure maintenance and installation work.
- Oversee Active Directory, DNS, DHCP, Group Policy, and identity-related infrastructure.
- Manage storage platforms (SAN/NAS), backup systems, and disaster recovery solutions.
Cloud & Hybrid Infrastructure
- Manage and optimise cloud resources (Azure/AWS), including compute, storage, and networking.
- Implement hybrid identity, domain services, and workload migrations.
- Support automation initiatives.
Security & Compliance
Implement and enforce security standards (CIS, ISO 27001, NIST)
Communicate Security risks and Security Processes to business and IT that is fit for purpose
Log and Track vulnerability assessments and security breaches within the environment and support users and IT users by defining their access rights and privileges
Create test cases and test scripts to test new and existing software and services for vulnerabilities.
Contribute to the Support, Design, Management and execution of the data protection and disaster recovery functionality within the environment.
Maintain patching, vulnerability remediation, and server hardening standards.
Ensure security controls, audits, and compliance frameworks are applied to all server environments.
Enforce least-privilege access, certificate management, and security baselines
Leadership & Collaboration
- Provide technical leadership to server infrastructure engineers.
- Work closely with network, application, and cybersecurity teams to ensure cohesive operations.
- Lead infrastructure projects, migrations, and service-improvement initiatives.
Operations & Support
- Supporting the SLA, RTO and RPO objectives
- Ability to manage, support and monitor systems and infrastructure within scope
- Execute operation procedures including infrastructure configuration, installation, maintenance and backups.
- Communicate and coordinate with 3rd party vendors in relation project and day to day deliverables while acting as an escalation point between the organization and the vendor.
- Act as Tier 3 escalation for complex server and infrastructure incidents.
- Conduct root-cause analysis and implement preventive measures.
- Maintain comprehensive documentation for systems, processes, and standards.
Architecture & Strategy
- Contribute to infrastructure strategy, technology selection, and standards.
- Lead server modernisation projects, including lifecycle upgrades and migrations.
- Optimise performance, resilience, and cost efficiency across server platforms.
- Collaborate closely with network, security, and application teams.
- Key Processes
- Continual Service Improvement and Knowledge Sharing
- Supporting CSI Processes by staying up to date with the latest technological trends
- Provide mentorship and technical leadership to junior and mid-level engineers
- Competency in writing and maintaining custom scripts to increase system efficiency
- Contribute and coordinate towards infrastructure process and service automation
- Service Operation and Security Management
- Excellence in Communication with vendors and other IT Staff
- Coordinate and monitor the performance of applications, foreseeing potential bottlenecks and identifying possible solutions
- Adhere to defined SLA’s, procedures, standards and measures of quality
- Prioritise and diagnose incidents and requests according to agreed procedures.
- Maintain related documentation
- Conduct technical evaluation and suggest proposed physical architectures along with detailed designs
- Support and enforce the IT security Policy initiatives
- Support the asset management process for both hardware and software within scope
- Adhere to Vendor Specific Best Practices
- Infrastructure Systems and Project Management
- Monitor, Evaluate and recommend necessary changes to infrastructure design, systems and processes within scope
- Coordinate and support the project plan’s cost, time, scope and quality deliverables
- Ensure that all project deliverables are captured and updated on the project plan
- Change Management, Risk Assessment and Business Continuity
- Execute infrastructure changes successfully by adhering to change management principles
- Deliver system guidelines for cost, productivity, schedule, and quality
- Perform risk and business impact assessments and ensure that due diligence and research forms part of the change management process
- Enforce the organisations risk, change and business continuity initiatives.
- Stakeholder Management
- Managing timely communications to the end user; ensuring the response SLA is met and the user is kept up to date during the lifecycle of the incident/service request.
- Ensure that 3rd party vendors adhere to the organizations approved processes and procedures
Knowledge, Skills and Attributes:
- Must have 3+ years direct experience supporting M365
- Must have experience supporting Software-as-a-Service applications and on-premise applications
- Must have an understanding of email flow, email security, Active Directory/Azure Active Directory/Active Directory Federation Services (ADFS)
- Must have Scripting skills/PowerShell experience
- Advisory, infrastructure design and delivery of SAP Related hardware and infrastructurerequirements and the ability to support the infrastructure with the aid of external vendors (Suse and AIX)
- Must be proficient in Microsoft Office products, Visio and Projects
- Maintain Operational aspects of the business infrastructure in conjunction of external vendors (Patching, Server Builds etc)
- Azure AD administration experience, including policy and configuration changes.
- Design and implementation of IAAS and PAAS services in Azure
- Advisory, infrastructure design and delivery of managed services on Azure, Azure Cloud Security, Azure Site to Site VPN, Express Route and other related networking designs.
- Excellent communication skills to include internal/external interaction, documentation, presentations and basic project management skills
- Ability to juggle and prioritize multiple tasks within a collaborative team environment with external vendors
Qualifications and Experience:
- Bachelor’s degree in IT, Computer Science, or related field (preferred)
- M365 Certification (required)
- MCSE 2012 Server Infrastructure/MCSE 2008 or related certification (required)
- Azure Certification (required)
- AWS Certification (advantageous)
- Vmware/Proxmox Professional (required)
- Veeam (required)
- Rapid7 (required)
- Sophos (required)
- Datto (required)
- Mimecast (required)
- Knowbe4 (required)
- SQL Server (preferred)
- ITIL (required)
- Project Management (advantageous)