Infrastructure & Services Engineer

Rohloff Group; Cape Town; On-site; ZAR 900,000 - 1,300,000; Full time

Benefits offered by this job

Competitive salary

Comprehensive benefits

Flexible work environment

Job summary

Rohloff Group is seeking an Infrastructure & Services Engineer to own and improve hybrid infrastructure across head offices, remote sites, warehouses and retail outlets. You will design, operate and enhance the on-premises and cloud foundations, including Azure, M365, AD, Intune and recovery capabilities, while enforcing security baselines and governance.

You will lead escalation for complex incidents, develop roadmaps, and mentor teams through major deployments and refresh initiatives, ensuring

Qualifications

• Relevant degree or equivalent senior-level industry experience.
• Azure Administrator Associate certification expected; Windows Server Hybrid Administrator certification strongly preferred.
• VMCE or equivalent backup expertise preferred.
• ITIL 4 Foundation beneficial with hands-on engineering capability.
• 8+ years in enterprise infrastructure engineering, with leadership experience.

Responsibilities

• Own the architecture, standards and support of resilient hybrid infrastructure across offices, remote sites, warehouses and retail outlets.
• Design standardised, scalable infrastructure across Windows Server, Azure, M365 and virtualization.
• Lead lifecycle planning: capacity, patching, upgrades, end-of-life risk and standardisation.
• Manage Active Directory, Group Policy, DNS, DHCP, and hybrid identity availability.
• Oversee Intune administration, Autopilot, device enrolment and compliance.
• Develop and maintain infrastructure roadmaps, diagrams and recovery designs.
• Provide technical leadership for new-site deployments and major migrations.
• Automate repeatable infrastructure activities using PowerShell.

Skills

Azure Administrator

Active Directory

PowerShell

Intune

Hybrid cloud

Incident leadership

Education

Relevant degree or equivalent senior-level industry experience

Tools

Veeam Backup & Replication

Cove Data Protection

Job description

The Infrastructure & Services Engineer is the technical owner of the core infrastructure, endpoint-management and recovery capability supporting Rohloff Group and its subsidiaries across head offices, remote sites, warehouses and retail outlets. Reporting to the IT Manager, the role is accountable for designing, operating and continuously improving hybrid infrastructure across on-premises, Microsoft Azure and Microsoft 365 environments, owning platform availability, lifecycle management, backup, restoration and disaster recovery.

What You'll Be Cooking:

Infrastructure Operations

• Own the architecture, technical standards and support of resilient hybrid infrastructure across head offices, remote sites, warehouses, distribution facilities, retail outlets, on-premises environments and Microsoft cloud platforms.
• Design standardised, scalable and supportable infrastructure across Windows Server, Microsoft Azure, Microsoft 365, virtualisation, compute, storage and core platform services.
• Own infrastructure lifecycle planning, including capacity, performance, patching, upgrades, end-of-life risk and platform standardisation.
• Manage Active Directory, Group Policy, domain services, DNS, DHCP, certificate services, Entra Connect or Cloud Sync and hybrid identity platform availability.
• Own Microsoft Intune platform administration and endpoint-management implementation, including Windows Autopilot, device enrolment, mobile-device management, application deployment, configuration profiles, operating-system servicing and device compliance.
• Implement security baselines and controls approved by the Cybersecurity & Network Engineer, report exceptions and preserve implementation evidence.
• Provide final escalation support for complex infrastructure, Intune, Autopilot and endpoint-management incidents.
• Develop and maintain infrastructure roadmaps, solution designs, logical and physical diagrams, dependency maps, service-flow diagrams, recovery designs and as-built documentation.
• Provide technical leadership for new-site implementations, retail-outlet openings, warehouse deployments, relocations, refurbishments, platform migrations and major infrastructure refresh initiatives.
• Automate repeatable infrastructure activities and operational controls using PowerShell or equivalent scripting.

Backup, Recovery & Business Continuity

• Own the Group backup and recovery strategy across workloads, applications, virtual machines, Microsoft 365 and critical data platforms.
• Administer and optimise Veeam Backup & Replication, Cove Data Protection and relevant Azure recovery services, including repositories, retention, immutability and off-site protection.
• Define and maintain workload-specific recovery time objectives (RTOs), recovery point objectives (RPOs), retention schedules and recovery runbooks with business and system owners.
• Validate recoverability through scheduled restore tests, disaster recovery exercises and evidence-based reporting.
• Lead infrastructure restoration, rebuild and recovery during cybersecurity incidents, infrastructure failure, data loss or site disruption.
• Identify recovery gaps, single points of failure and unsupported dependencies, then own remediation through to closure.

Operational Reliability & Major Incidents

• Monitor service health, availability, capacity and performance; identify degradation before it becomes a business outage.
• Lead advanced troubleshooting across compute, storage, identity, operating systems, virtualisation, backup and network dependencies.
• Act as technical incident lead for non-cyber infrastructure failures and service outages. Where compromise is suspected, preserve evidence, avoid destructive changes and transfer cyber-incident leadership to the Cybersecurity & Network Engineer.
• Own problem management for recurring or high-impact incidents, including root-cause analysis, corrective actions and lessons learned.
• Plan and execute maintenance with tested rollback procedures, clear stakeholder communication and minimal business disruption.
• Participate in an agreed after-hours escalation and recovery roster for critical incidents and planned recovery exercises.

Governance, Security & Vendor Control

• Implement and operate infrastructure hardening, privileged-access, patching, logging and configuration controls defined or approved by the Cybersecurity & Network Engineer.
• Provide infrastructure evidence for audits, risk reviews and compliance assessments.
• Maintain accurate asset, configuration, dependency, credential-recovery and support documentation.
• Own deployment of infrastructure patches and mitigating changes in line with vulnerability priorities and target dates set through the security-risk process.
• Lead infrastructure vendors during incidents and projects; validate solution designs against availability, performance, supportability and recovery requirements.
• Manage infrastructure risks, exceptions and remediation plans with clear owners, priorities and due dates.
• Escalate security exceptions and residual cyber risk to the Cybersecurity & Network Engineer and IT Manager for assessment and approval.

Network and Security Boundaries

• Maintain working knowledge of networking and security sufficient to troubleshoot cross-domain faults and support service restoration.
• Do not own firewall policy, SD-WAN, VPN governance, network segmentation, threat monitoring, vulnerability governance or cyber-incident containment.
• Consult the Cybersecurity & Network Engineer on network changes, security-sensitive designs and any infrastructure change that alters security controls.
• Remain accountable for operating-system, server, storage, virtualisation, backup, endpoint-management and platform remediation assigned through the vulnerability-management process.

Vendor & Service Provider Management

• Work closely with outsourced infrastructure and cybersecurity specialists.
• Coordinate infrastructure activities and follow up on technical deliverables.
• Track incidents, risks, actions, and remediation plans to completion.
• Ensure third-party providers meet agreed service levels and recovery standards.
• Act as the internal point of accountability for infrastructure service delivery.

Environment and Platforms

• Microsoft Azure infrastructure, identity integration, storage, networking and monitoring.
• Microsoft 365 administration and service dependencies.
• Windows Server, Active Directory, Group Policy, DNS, DHCP, certificate services and hybrid identity synchronisation.
• Hyper-V and associated compute, storage, clustering and virtual machine technologies.
• Veeam Backup & Replication, Cove Data Protection and Azure-native recovery capabilities.
• SAN, NAS, SMB storage, repositories, replication and capacity management.
• PowerShell automation, infrastructure monitoring, alerting and operational reporting.
• LAN, WAN, VPN and firewall dependencies, working in conjunction with the Cybersecurity & Network Engineer.

What You'll Bring to the Table:

• Relevant degree or equivalent senior-level industry experience.
• Microsoft Certified: Azure Administrator Associate (AZ-104) expected; Windows Server Hybrid Administrator Associate (AZ-800 and AZ-801) strongly preferred.
• Veeam Certified Engineer (VMCE) or equivalent demonstrable expertise strongly preferred.
• ITIL 4 Foundation is beneficial, provided the candidate also demonstrates strong hands-on engineering capability.
• 8+ years of progressive experience in enterprise infrastructure engineering, with at least 3 years operating as a technical lead or final escalation resource.
• Demonstrable experience owning production infrastructure in a multi-site, hybrid cloud environment.
• Proven hands-on experience executing complex restores and disaster recovery drills.
• Proven experience leading major incidents, root-cause investigations and remediation across multiple technical teams or vendors.
• Expert-level Windows Server administration and troubleshooting.
• Strong Active Directory, Group Policy, DNS, DHCP, certificate services and hybrid identity platform capability.
• Strong Azure infrastructure administration covering compute, storage, networking, monitoring, governance and cost awareness.
• Deep backup architecture knowledge, including retention, immutability, encryption, repository design, off-site repositories, recovery validation and ransomware-resilient recovery.
• Strong Hyper-V, storage, replication, performance troubleshooting and capacity planning experience.
• Strong Intune, Autopilot and endpoint-management capability.
• Ability to read logs, correlate symptoms across platforms and isolate root cause under pressure.
• Practical PowerShell scripting and automation experience.
• Working knowledge of enterprise networking and security sufficient to troubleshoot cross-domain infrastructure faults.

Why You'll Love It Here:

• Competitive salary and bonuses.
• Comprehensive benefits.
• Collaborative, inclusive, and flexible work environment.