Senior IT Support Engineer

About the job Senior IT Support Engineer

Job InformationJob TitleDepartmentITReports ToIT ManagerLocationAghalee (base location, travel expected)Salary Range£45k to £55k depending on experienceJob PurposeWere seeking a hands-on Senior Networking and Support Engineer to lead complex incident resolution, own core infrastructure, and deliver cloud-first projects across AWS and Microsoft 365. Youll be our escalation point for networking/security, design and operate VPCs and IAM in AWS, implement Microsoft Intune/Entra ID (including SSO) at scale, and harden Windows Server/AD environments. The ideal candidate blends deep troubleshooting with solid project delivery and security-by-design.Duties and ResponsibilitiesDesign, deploy, and operate EC2 workloads (Windows), Auto Scaling Groups, ALB/NLB, AMIs, and Systems Manager for patching and runbooks.Build and Maintain secure VPC architectures (subnetting, routing, NAT/IGW, Security Groups/NACLs, VPC endpoints, hybrid VPN/Direct Connect).Implement IAM roles, policies, instance profiles, and least-privilege RBAC; manage KMS for encryption at rest.Configure CloudWatch/CloudTrail, metrics/alarms, centralised logging, and cost optimisationOperate AWS Backup and snapshot policies; participate in DR planning and testing with defined RTO/RPO.Intune implementation: Windows Autopilot (Pre-provisioned/UGM), device enrolment (Azure AD Join/Hybrid), compliance policies, configuration profiles, baselines, and Endpoint Security (BitLocker, Defender, ASR, Firewall).Manage application lifecycle in Intune: Win32 packaging, LOB and Store apps, app protection policies (MAM), update rings/feature updates, and driver/firmware management.Architect Conditional Access (MFA, risk-based, compliant-device, location/network filters), device compliance posture, and group-based targeting/assignments.Networking and SecurityAdminister routing/switching (VLANs, STP, LACP), IPv4/IPv6, site-to-site/IPSec and SSL VPNs; DNS/DHCP, NTP, and network services resilience.Configure next-gen firewalls, IDS/IPS, web filtering, content security, and remote access; manage SD-WAN where applicable.Implement network segmentation, zero trust principles, and QoSespecially for VoIP and latency-sensitive apps.Manage PKI/certificates: CSR generation, issuance, renewal automation, and certificate lifecycle across servers, load balancers, and apps.Windows Server, Active Directory and RDSSupport data integration and reporting tools to improve visibility across the supply chainEnsure data accuracy and integrity in operational and customer-facing applicationsGovern SharePoint/OneDrive permissions, sharing policies, sensitivity labels, and DLP/retention, support migrations and information architecture.Operate Teams/Teams Phone interop with existing PBX/SBCs where needed.Deploy and support VoIP solutions: SIP trunks, SBCs, dial plans, call routing, E911/999 configuration, QoS tagging and monitoring.Backup, DR and Security OperationsOwn backup strategy (3-2-1/immutability) for onprem, cloud, and Microsoft 365; monitor job success and conduct restoration tests.Coordinate vulnerability management and remediation (OS, apps, cloud); collaborate with SOC/MDR where applicable.Maintain security incident runbooks, access reviews, and change control (CAB) with strong documentation.Service Delivery and SupportAct as L3 escalation for complex incidents/problems; drive root cause analysis and permanent fixes.Create high-quality documentation, runbooks, and userfacing knowledge base articles.Automate routine tasks using PowerShell (and/or Python); contribute to CI/CD/IaC where appropriate.Knowledge, skills and experience required5+ years in enterprise IT with L3 support, networking, and systems administration responsibilities.Proven expertise across: AWS (EC2, VPC, IAM, Load Balancing, Auto Scaling), Windows Server/AD, Intune/Entra ID (including Conditional Access and Autopilot), and enterprise networking/security.Handson experience with VoIP deployments and QoS, and with SharePoint/OneDrive administration.Strong understanding of cyber security best practice (least privilege, patching, hardening, logging/monitoring, incident response).Excellent troubleshooting, documentation, and stakeholder communication skills.Experience in transport, logistics or supply chain systemsFamiliarity with TMS/WMS platforms and fleet management solutionsAWS/Microsoft CertificationsNetworking / Security Certifications (ITIL, CompTIA Security+)Personal AttributesAnalytical mindset with a solutions-focused approachStrong communication and collaboration skillsAbility to manage multiple tasks and deliver to deadlinesProactive, innovative, and adaptable in a changing environmentJoin a company focused on innovation, sustainability and growthExposure to large-scale digital transformation projects in a leading logistics organisationProfessional development and training opportunitiesA competitive salary and company benefits are available for the right candidateNote: This description is intended to be a guide of what duties are most likely to be but should not be taken as a definitive list. Hannon may adapt duties as deemed ..... full job details .....