GAIN Central IT

Main Responsibilities:To manage and maintain the organisation's hybrid IT infrastructure—encompassing on-premise systems, Microsoft Azure services, and enterprise endpoints—ensuring optimal uptime, performance, security, and availability of critical systems and services. This includes direct responsibility for the administration of servers, endpoint management platforms, network infrastructure, and supporting database/CI tooling as needed.To ensure effective IT service delivery across the enterprise by overseeing core infrastructure components such as networks, perimeter security, storage, communications, endpoints, and third-party platforms. The role supports strategic alignment with IT and business objectives, maintains adherence to SLAs, and fosters strong operational relationships across internal teams and external partners.Infrastructure & Network Management·       Administer and maintain the organisation's hybrid infrastructure, including on-premises Windows Server environments (Active Directory, DNS, DHCP, Group Policy) and Azure-based resources.·       Configure and support VPNs, firewalls, and secure connectivity between on-prem and cloud resources.·       Maintain and optimise network infrastructure, including both wired and wireless networks, ensuring uptime, performance, and security.Endpoint Management:·       Manage and maintain endpoints using Microsoft Intune, ensuring compliance with organisational policies, security baselines, and conditional access requirements.·       Administer and support ManageEngine Endpoint Central for endpoint lifecycle management, including software deployment, patch management, remote troubleshooting, and asset tracking.·       Implement, configure, and manage Microsoft Defender for Endpoint to deliver advanced threat protection, vulnerability management, and incident response capabilities.·       Administer Apple Business Manager (ABM) for provisioning, deployment, and lifecycle management of Apple devices, integrating with Intune and/or Endpoint Central for seamless MDM.·       Develop and enforce endpoint security policies covering device encryption, application control, and access management across Windows, macOS, and mobile devices.·       Monitor endpoint compliance and generate regular reports for audit, security, and operational review.Database / CI Tooling ·       Provide support for Microsoft SQL Server databases (on-prem and Azure) including availability, basic maintenance, and backups.·       Support Jenkins CI servers and pipelines as part of broader infrastructure operations.Security, Compliance and Reporting·       Apply and enforce network, system, and endpoint security best practices.·       Maintain patch management, antivirus, endpoint protection, and vulnerability scanning routines across servers and endpoints.·       Ensure compliance with data protection standards (e.g., GDPR, ISO 27001, Cyber Essentials).·       Prepare detailed reports on system and endpoint performance, incidents, upgrades, and project progress for senior management review.Support & Monitoring·       Provide support for infrastructure, endpoint, and database-related incidents.·       Use tools like Azure Monitor, Site 24/7, ManageEngine Log360, and Microsoft Defender for proactive performance monitoring and security alerting.·       Maintain accurate documentation of infrastructure, endpoint configurations, procedures, and incident responses.Collaboration & Strategy·       Work closely with the IT Operations Manager to align network, endpoint, and system strategies with organisational goals.·       Coordinate with the IT Helpdesk Manager to address escalated technical issues effectively.·       Partner with the Information Security team to implement measures that protect against threats and vulnerabilities.·       Collaborate with the Helpdesk team to ensure seamless integration between user support functions and backend systems.Professional skills/experience:·       Expertise in networking technologies (physical and virtual).·       Expertise in server management (Windows Server), virtualization (VMware/Hyper-V), and cloud platforms (Azure/AWS/GCP/Databricks).·       Strong knowledge of endpoint management platforms (Intune, ManageEngine Endpoint Central, Apple Business Manager) and endpoint protection (Microsoft Defender for Endpoint).·       Good knowledge of information security, cyber security, business continuity, and disaster recovery planning.Personal Qualities·       Strong problem solver and able to make decisions, including tough ones, based on accurate and timely analysis.·       Relationship building – adept at understanding, negotiating and balancing needs and expectations of multiple stakeholders to enable effective relationships.·       Prioritises well, balances conflicting priorities in line with business needs and manages any resulting pressure effectively. ·       Proactive, "can do" attitude and solutions focused in resolving problems and improving service.·       Effective communicator –both written and verbal –and adept at adapting style and approach to the needs of the audience.