Infrastructure Engineer

At Mace, our purpose is to redefine the boundaries of ambition. We believe in creating places that are responsible, bringing transformative impact to our people, communities, and societies across the globe. To learn more about our purpose, culture, and priorities, visit our strategy site.

Within our consult business we harness our unique combination of leading-edge practical expertise and project delivery consultancy to unlock the potential in every project.

The Project:

We are seeking an experienced I.T. Manager, Infrastructure Engineer to help maintain, secure, and improve the technology our employees rely on every day. This position combines hands-on systems administration, advanced technical support, security operations, and project work across Microsoft 365, endpoint management, networking, and cloud infrastructure.

The successful candidate will take ownership of complex issues, strengthen operational processes, and identify opportunities to improve reliability, security, and the employee experience. They will be resourceful and analytical, combining independent research, practical experience, and sound judgment to resolve unfamiliar problems.

This role requires someone who enjoys both building technology and helping people use it effectively. Clear communication, thorough documentation, and a service-oriented approach are essential.

You’ll Be Responsible For:

• Administer and maintain computer systems, cloud services, file services, and supporting infrastructure.
• Provide Tier 2 and Tier 3 support for complex hardware, software, identity, connectivity, and application issues.
• Investigate recurring incidents, identify root causes, and implement lasting improvements.
• Support employee onboarding, role changes, and offboarding through timely device provisioning and access management.
• Coordinate with employees, IT colleagues, and vendors to resolve issues and deliver technology projects.
• Manage Windows 11 endpoints, including deployment, configuration, and provisioning through Microsoft Intune and Windows Autopilot.
• Maintain Dell hardware and other supported devices throughout their lifecycle, including inventory, replacement planning, and secure retirement.
• Administer Microsoft Entra ID, security groups, role-based access, multifactor authentication, and Conditional Access.
• Develop and maintain device compliance policies, configuration profiles, update rings, and application deployments.
• Maintain Group Policy baselines and support the planned transition to modern device management where appropriate.
• Support Apple device enrollment and management through Apple Business Manager and device management platforms.
• Maintain identity and provisioning integrations with HR systems, such as ADP Workforce Now or Workday, as applicable.
• Administer Exchange Online, Teams, SharePoint Online, OneDrive, and related Microsoft 365 services.
• Manage service configuration, licensing, permissions, and operational health.
• Partner with business stakeholders to improve collaboration, information access, and effective use of Microsoft 365.
• Support the evaluation and governed adoption of Microsoft Copilot, Power Apps, Fabric, and Microsoft Foundry in partnership with relevant business and technical owners.
• Apply least-privilege access and established security baselines across systems and endpoints.
• Help employees recognize phishing attempts, suspicious requests, and other common security threats.
• Use NinjaOne to monitor endpoints, manage patches, deploy software, and provide remote support.
• Coordinate vendor support, service commitments, renewals, and statements of work for assigned platforms.
• Support Global Relay administration and related retention or archiving requirements in coordination with designated business and compliance owners.
• Recommend improvements to system reliability, user experience, and IT efficiency.
• Communicate technical risks, options, and recommendations clearly to IT leadership and business stakeholders.

You’ll need to have:

• At least 10 years of progressively responsible experience in systems administration, IT infrastructure, or a related hands-on technical role.
• Strong experience administering Microsoft 365, including Entra ID, Intune, Exchange Online, Teams, and SharePoint Online.
• Hands-on experience with Windows 11, Windows Autopilot, Dell hardware, endpoint configuration, and device lifecycle management.
• Experience managing Cisco Meraki networking and security infrastructure.
• Strong understanding of identity and access management, Conditional Access, multifactor authentication, security groups, and Group Policy.
• Experience using NinjaOne or a comparable remote monitoring and management platform.
• Experience with endpoint security, security monitoring, patch management, and incident investigation.
• Demonstrated ability to provide Tier 2 and Tier 3 support and troubleshoot complex issues across endpoints, networks, and cloud services.
• Ability to develop and maintain PowerShell scripts or comparable automation.
• Strong documentation, organization, and prioritization skills.
• Ability to explain technical concepts to employees with varying levels of technical knowledge.
• Demonstrated ownership, sound judgment, attention to detail, and effectiveness during service disruptions.
• Experience with Apple Business Manager, Global Relay, and HR-driven identity or provisioning integrations.
• Experience with Microsoft Sentinel, Microsoft Defender, Cisco Umbrella, or comparable security platforms.
• Experience supporting Microsoft Copilot, Power Apps, Fabric, or Microsoft Foundry.
• Experience implementing or supporting VDI or Azure Virtual Desktop.
• Familiarity with ITIL practices, NIST frameworks, CIS Microsoft 365 Benchmarks, and CISA SCuBA guidance.
• Relevant Microsoft, Cisco, CompTIA, security, or IT service management certifications.
• Bachelor’s degree in Information Technology, Computer Science, or a related field, or equivalent practical experience.
• Employees receive responsive support and clear communication.
• Systems and endpoints remain secure, reliable, and consistently maintained.
• Access and device provisioning are accurate and timely throughout the employee lifecycle.
• Recurring incidents and manual tasks decrease through root-cause resolution and automation.
• Documentation and recovery procedures remain current and usable.
• Technology projects deliver measurable improvements for the client.

Note: The estimated starting salary for this position is $160k. Starting salary may vary based on permissible, non-discriminatory factors such as experience, skills and qualifications.

Our values

Safety first - Going home safe and well: We champion a safe, diverse and inclusive working environment, understanding the importance of wellbeing in every team.

Client focus - Deliver on our promise: We own the quality of deliverables, strategic outcomes and build long term relationships with our clients.

Integrity - Always do the right thing: We influence positive outcomes within our industry, while always aligning with our compliance obligations.

Create opportunity - For our people to excel: We champion a continuous improvement culture throughout all activities, inspiring our people and teams to develop.

Mace is an inclusive employer and welcomes interest from a diverse range of candidates. Even if you feel you do not fulfil all of the criteria, please apply as you may still be the best candidate for this role or another role within our organization.

We are also open to discussing part time, flexible, and hybrid working options if suitable with-in the role.

#LI-LL1 #LI-Hybrid