3rd-line support engineer / workplace engineer

Next-Link; Deventer; On-site; EUR 65,000 - 90,000; Full time

Job summary

Next-Link in Deventer, Netherlands seeks a 3rd-Line IT Architect & System Administrator to be the trusted technical expert for SME clients. You’ll step in when 1st- and 2nd-line support reach limits, designing, standardizing, and automating modern IT environments across 20 client sites.

You’ll own complex incidents, drive infrastructure projects, implement automated workflows with PowerShell, and manage vendor relationships with Fortinet, Microsoft, and HPE.

Qualifications

• Experience in third-line IT support and complex incidents.
• Experience with designing and implementing infrastructure and cloud projects.
• Knowledge of cybersecurity and compliance frameworks such as NIS2, CyFun and ISO 27001.

Responsibilities

• Escalations & Diagnostics: Take ownership of complex third-line incidents across firewalls, AD/DNS, endpoint security, and Microsoft 365, applying structured root-cause analysis rather than trial-and-error troubleshooting.
• Projects & Architecture: Design, plan, and deliver infrastructure and cloud projects, including GPO-to-Intune migrations, cloud-only transitions, server upgrades, and SharePoint implementations.
• Automation & Optimisation: Build PowerShell scripts and improve operational workflows using RMM/PSA platforms, APIs, and AI integrations to reduce manual effort and increase efficiency.
• Lifecycle & Vendor Management: Proactively identify hardware and software lifecycle requirements up to 12 months in advance, while maintaining direct relationships with key vendors such as Fortinet, Microsoft, and HPE.
• Security & Compliance: Translate frameworks and requirements such as NIS2, CyFun, and ISO 27001 into practical technical controls, and communicate recommendations clearly to both technical teams and C-level stakeholders.

Skills

Root-cause analysis

Ownership

Clear communication

Problem solving

Tools

Fortinet

Microsoft 365

HPE

Intune

PowerShell

NinjaOne

HaloPSA

VMware ESXi

Job description

Deventer, Netherlands

What is the mission about?

Netherlands

Job Description

As a 3rd-Line IT Architect & System Administrator, you’ll be the trusted technical expert for our end clients—stepping in when complex challenges go beyond the 1st- and 2nd-line service desks.

But this role is about more than solving today’s problems. You’ll take a proactive approach to designing, standardizing, and automating modern IT environments for around 20 SME clients, each with 20 to 250 workstations, across sectors such as construction, manufacturing, and business services.

Your goal? Build smarter, more reliable IT environments that prevent recurring issues, reduce incident volumes, and make a lasting impact for your clients.

Requirements

Here’s a more polished and consistent version:

Key Responsibilities

• Escalations & Diagnostics: Take ownership of complex third-line incidents across firewalls, AD/DNS, endpoint security, and Microsoft 365, applying structured root-cause analysis rather than trial-and-error troubleshooting.
• Projects & Architecture: Design, plan, and deliver infrastructure and cloud projects, including GPO-to-Intune migrations, cloud-only transitions, server upgrades, and SharePoint implementations.
• Automation & Optimisation: Build PowerShell scripts and improve operational workflows using RMM/PSA platforms, APIs, and AI integrations to reduce manual effort and increase efficiency.
• Lifecycle & Vendor Management: Proactively identify hardware and software lifecycle requirements up to 12 months in advance, while maintaining direct relationships with key vendors such as Fortinet, Microsoft, and HPE.
• Security & Compliance: Translate frameworks and requirements such as NIS2, CyFun, and ISO 27001 into practical technical controls, and communicate recommendations clearly to both technical teams and C-level stakeholders.

Requirements

• Core Technical Expertise: Strong expertise across the Microsoft ecosystem, including Windows Server, modern workplace management, and Microsoft 365, supported by a broad IT infrastructure background and the ability to quickly learn and adopt new technologies.

Preferred Experience

• Identity & Cloud: Entra ID, Intune, Hybrid Join, Autopilot, Active Directory, Group Policy, and DNS.
• Networking & Security: FortiGate/FortiClient, VPN/ZTNA, VLANs, UniFi, EDR solutions such as SentinelOne, and MFA platforms such as Duo.
• Virtualisation, Infrastructure & Management: VMware/ESXi, HPE servers, PowerShell, NinjaOne, and HaloPSA.

Mindset & Communication

A strong sense of ownership with a root-cause-first approach to problem solving. Confident communicating with everyone from engineers to board-level stakeholders, with a disciplined approach to clear and accurate documentation.