Rolepurpose
Serve as the senior technical owner for critical incidents and complex environments. Lead problem managementtoeliminate recurringissues,coordinateescalationswithcustomerITandvendors,andgovern runbooks and standards. Support incident response coordination (non-forensics) and service resilience.
Keyresponsibilities
- Ownmajorincidentsandhigh-impactoutages:leadtechnicaldiagnosis,coordinateresponders,and drive restoration under defined incident workflows.
- Lead problem management:identifyrecurringissues,performdeepRCA,implementpermanentfixes, and publish runbooks/known-error documentation.
- Act as primary escalation bridge between HubbIT,customerITteams,andvendors/brands;manage multi-party troubleshooting effectively.
- Design and govern standards for endpoint,identity,andinfrastructureoperations(documentation governance, baseline configurations, escalation rules).
- Plan and execute complex changes:maintenanceplanning,riskassessment,rollbackplanning,andpost-change validation.
- Support identity and access troubleshooting at advanced level(AzureAD/Microsoft365),including policy-related impacts and integration issues.
- Coordinate security hardening and log review activities;supportincidentresponsecoordination(non-forensics) alongside security providers where applicable.
- Mentor L2 engineers and guide L1 leads onescalationhandling,troubleshootingplaybooks,and prevention practices.
- Provide technical inputs for service reviews:trends,riskareas,capacityconstraints,androadmap recommendations.
Scopecoverage(service-aligned)
- AllLevel2scopecoverage(systems,network,securitytriage,virtualization,backup/restore,cloud support).
- Criticalincidentownershipandincidentworkflowleadership.
- Problemmanagementownershiptoremoverepeatissuesandimprovestability.
- AdvancedMicrosoft365/AzureADadministrationandidentity/accesstroubleshooting.
- Changeplanningandexecutiongovernance:risk,rollback,validation,post-implementationreview.
- Documentation/runbookgovernanceandoperationalstandardssetting.
- Incidentresponsecoordinationsupport(non-forensics)andsecurityvendorcoordination.
Requiredtechnicalskillsets
- Advancedinfrastructure&identity
- StrongWindowsServeranddirectoryservicesunderstanding;AzureADandM365administration depth
- Identity/accesstroubleshootingacrossusers,policies,andintegrations
- Endpointmanagementexecutionexperience(toolingdependent)
- Network&securitycoordination
- Firewall/VPNconceptsandoperationalmanagement(routing,NAT,rulestrategy)
- Securitytriageandhygienegovernance;log-awaretroubleshootingmindset
- Vendorbridgingandmulti-partycoordinationskills
- Operationalleadership
- Majorincidentmanagementandcommunicationsdiscipline
- ProblemmanagementandRCAmethodology;recurringissueelimination
- Changeplanningandgovernance;documentationstandardsandrunbooks
- Automation&efficiency
- ComfortablewithPowerShell(preferred)and/orBash;automationmindsetforrepeatability
Tools&platformsexposure
- Microsoft365AdminCenter,AzureAD/Entraadminportals(aspermitted)
- Securitytoolingdashboards(EDR,SIEM-liteviewswhereapplicable)
- Network/firewallmanagementconsoles;VPNtooling
- Virtualizationandbackupplatforms(customerdependent)
- Documentationtools:runbooks,KB,architectureandchangerecords
- Scripting:PowerShell/Bash;basicCIautomationexposureisaplus
Behavioural&serviceskillsets
- Executive-readycommunication:explainsrisk,impact,anddecisionsclearly.
- Calmleadershipduringincidents;strongcoordinationandprioritizationunderpressure.
- Governancemindset:standards,documentation,andrepeatableoperations.
- Coachingandknowledgetransferacrossteams(L1andL2).
Education&experiencerequirements
- DiplomaorDegreeinInformationTechnology/ComputerScience(orequivalentexperience).
- 5–10yearsininfrastructure/operationswithincidentownershipandcustomer-facingdelivery.
- Experiencesupportingcompliance/uptime-sensitivecustomersandmulti-siteenvironmentsispreferred.
Certifications(preferred/nice-to-have)
- Microsoftrole-basedcertifications(e.g.,MS-102,SC-300)(nice-to-have)
- ITILFoundationorITILManagingProfessionalmodules(nice-to-have)
- Vendorfirewallcertifications(Sophos/Fortinet/PaloAlto-customerdependent)(nice-to-have)
Successmeasures(KPIs)
- Majorincidentrestorationtimeandincidentprocesscompliance
- Reductioninrepeatincidentsthroughpermanentfixesandrunbooks
- Changesuccessrateandriskmanagementoutcomes
- Qualityoftechnicalgovernance:runbookcompleteness,auditreadiness
- CustomerITstakeholdersatisfactionandpartnerfeedback
Workingnotes
The L2 Lead is the technical standard-bearer for service delivery. This role must balance speed with governance,driverepeatabilitythroughdocumentationandautomation,andensuresmoothcoordination across customer IT, partners, and vendors.