- Own and operate self-hosted server infrastructure (Linux/VMs/containers as applicable), including patching, upgrades, access control, and troubleshooting.
- Maintain and improve networking and router/firewall configuration (Wi-Fi, VPN, DNS/DHCP, VLANs), and coordinate with ISPs/vendors when needed.
- Set up and manage monitoring, alerting, and logging for critical infrastructure and services (uptime, storage, certificate expiry, backup status).
- Design and run backup & restore procedures (including regular restore tests) and maintain disaster-recovery runbooks.
- Own IT procurement and hardware lifecycle: define laptop standards, purchase devices/peripherals, prepare devices for new hires, manage inventory, repairs, warranties, and replacements.
- Run onboarding/offboarding processes: accounts, permissions, devices, security baseline, and secure deprovisioning.
- Provision and operate a cloud-based identity and access management (IAM) solution based on Microsoft Entra ID, including centralized user, group, and permission management, as well as integrated endpoint management through Microsoft Intune.
- Manage software licensing and subscriptions (SaaS seats, renewals, cost control), plus domains and certificates as needed.
- Maintain and support internal testing tools and IT tooling (availability, updates, access, documentation), in collaboration with teams using them.
- Provide practical IT support and incident response; drive root-cause fixes and continuous improvement.
- Maintain documentation (network diagrams, asset lists, runbooks, onboarding checklists) and establish lightweight IT processes/ticketing.
|