IT Systems, Network & Infrastructure Engineer/Architect (MSP)

Goodman Tech BPO OPC; Taguig; Hybrid; PHP 1,200,000 - 2,000,000; Full time

Job summary

Goodman Tech BPO OPC in the Philippines is hiring a Level 4 Senior Systems & Network Engineer for a dedicated offshore seat with a North American MSP. The role is client-facing, leads technical conversations, and drives projects from scoping through cutover to completion.

This is a 1-to-1 placement; no travel is required and all work is performed onsite at the Taguig office. You will manage end-to-end infrastructure projects, own escalation-tiers, and coordinate with after-hours engineers.

Qualifications

• 8+ years hands-on infrastructure engineering with senior escalation ownership.
• End-to-end project delivery; describe personal configurations and cutovers.
• Ability to assess design-level decisions and delivery feasibility.

Responsibilities

• Lead technical conversations with the North American client and set expectations.
• Take ownership of projects from scoping through build, migration and cutover.
• Act as senior escalation point for junior and after-hours engineers.
• Coordinate closely with the client's US team; onsite work at Taguig office.

Skills

MSP experience

Senior escalation ownership

Project delivery

English proficiency

Leadership

Tools

Autotask PSA

Kaseya RMM

IT Glue

SaaS security monitoring

Job description

Employment Type: Full-time, Goodman Tech BPO OPC

Work Setup: Fixed night shift covering North American (Mountain Time) business hours, 8:00am–5:00pm client time with a one-hour lunch. Onsite at our BGC Taguig office. Company-provided business-grade laptop; the client deploys their own endpoint agents, SSO and secure access client to it.

Role Summary:
Goodman Tech BPO is hiring a Level 4 Senior Systems & Network Engineer for a dedicated offshore seat with a North American managed services provider. You will take infrastructure projects from scoping through build, migration and cutover, and act as the senior escalation point for the client's junior and after-hours engineers. This is a 1-to-1 dedicated placement, not a shared or pooled team. It is client-facing — you will lead technical conversations, set expectations and see projects through to completion. All physical rack-and-stack work is handled onsite by the client's US team; no travel is required.

Experience:

• 8+ years hands-on infrastructure engineering with clear senior / escalation-tier ownership in an MSP or multi-tenant environment

• Demonstrated end-to-end project delivery. You will be asked in interview to describe exactly what you personally configured, built and cut over — not what your team did

• Capable of looking at a project and understanding what it will take to deliver, including design-level decisions

Microsoft 365, Azure & Identity:

• Tenant-to-tenant Microsoft 365 mail migrations, including staging and final cutover (BitTitan or comparable)

• Google Workspace to Microsoft 365 / Azure migrations

• SharePoint migrations

• On-premises to Azure workload migrations and builds

• Intune — device configuration, compliance, and Conditional Access policy design and implementation

• Hybrid Active Directory and Entra ID — directory sync, identity, MFA

• Two-factor authentication platform migrations (Duo or equivalent)

Servers & Virtualization:

• Windows Server builds, migrations and upgrades

• Hyper-V — virtual server builds and host management

• VMware to Hyper-V migration experience

• Remote Desktop Services

• Exposure to VDI / Azure Virtual Desktop or Citrix is a bonus, not a core requirement

Network & Security:

• FortiGate firewalls to a deep configuration level — new deployments and replacements

• Meraki and SonicWall exposure

• Switching — Aruba, Meraki, Fortinet

• SASE / zero-trust network access platform deployment and administration

• SSO and identity platform administration (JumpCloud or equivalent)

• EDR administration (SentinelOne or equivalent)

• Managed vulnerability scanning platforms

• DNS filtering platforms

• Email security and hygiene platforms (Barracuda, Inky or equivalent)

• Password management and privileged access management (Keeper PAM or equivalent)

• Dark web monitoring and security awareness training platforms

MSP Tooling:

• Autotask PSA — ticketing, time entry, escalation discipline

• Kaseya RMM — day-to-day administration, not just ticket consumption

• IT Glue — rigorous documentation as work is completed

• SaaS security monitoring and SOC alerting platforms

Communication & Working Style:

• Excellent spoken and written English, clear and easy to understand. You will speak directly with the client's customers, lead project updates and set expectations

• Able to take the lead on a project while knowing when to ask for help, take guidance, and elevate appropriately

• Comfortable working as part of a distributed team across chat and video throughout the shift

• Available to support escalations from junior and after-hours engineers

• Meticulous attention to detail. This work sits in the security domain — one wrong firewall rule or Conditional Access setting can cause serious harm to a client

Certifications (advantage):

• Microsoft: AZ-104, AZ-305, MS-102, MD-102

• Cybersecurity certifications

• Fortinet NSE