Infrastructure Engineer

S-RM

S-RM is recruiting a Senior DevOps Engineer to play a key role in the development and maintenance of products for our Corporate Intelligence team.    WHO ARE WE  S-RM is a global intelligence and cyber security consultancy. Since 2005, we’ve helped companies, governments and private individuals solve some of their most complex challenges.  We’ve been able to do this because of our outstanding people. We’re committed to developing bright, curious, enthusiastic people who want to think critically, solve complex problems, and achieve success.  But we also know that work isn’t everything. It’s about the lives and careers it helps us build. We’re immensely proud of this culture and we invest in our people’s wellbeing, learning, and ideas every day.   We’re excited you’re thinking about joining us.    THE ROLE  This role will be working as part of a larger software team supporting our Corporate Intelligence team in the development of complex intelligence software products.   We expect that the following will be component of the key responsibilities for this position:  * Design, build, and maintain scalable, secure, and highly available cloud infrastructure on AWS, supporting multiple product teams with differing needs.  * Own infrastructure as code using Terraform, ensuring environments are reproducible, version‑controlled, and well‑documented.  * Architect, implement, and maintain robust CI/CD pipelines to support build, test, and deployment workflows.  * Collaborate closely with development teams to improve deployment reliability, speed, and automation.  * Own observability and monitoring practices, ensuring meaningful metrics, dashboards, logs, and alerts are in place.  * Embed security best practices into infrastructure, CI/CD pipelines, and runtime environments.  * Keep up to date with DevOps, cloud, and AWS best practices, tooling, and emerging technologies.  * Take ownership of complex problems end‑to‑end, from design through to production support.    WHAT WE’RE LOOKING FOR  We think candidates with the following skills and experience are likely to succeed as a Senior DevOps Engineer at S-RM.    That said, if you don’t think you meet all of the criteria below but are still interested in the job, please apply. Nobody checks every box—we’re looking for candidates that are particularly strong in a few areas, and have some interest and capabilities in others.  We’re looking for someone that is able to adapt to change and work comfortably in a fast-paced environment, this person will have some or all of these skills:   * Degree level education in a computer science, maths or related numerate subject, OR equivalent practical experience.  * Proven experience as a Senior DevOps Engineer or similar role, supporting multiple product or engineering teams.  * Strong hands‑on experience with AWS (e.g. EC2, ECS/EKS, RDS, IAM, VPC, S3, OpenSearch, CloudWatch) in production environments.  * Extensive experience using Terraform to manage infrastructure as code, including module design and environment separation.  * Solid experience building and maintaining CI/CD pipelines.  * Strong observability and monitoring experience, including metrics, logs, alerts, and dashboards.  * Good understanding of Linux/Unix systems, networking fundamentals, and cloud security best practices.  * Experience with containerisation and orchestration (e.g. Docker, ECS, Kubernetes).      Any of the following personal skills would be very beneficial in this position:    * Strong problem-solving skills and the ability to work independently in a small, agile team.  * Well‑organised with strong attention to detail, particularly in automation and infrastructure changes.  * Delivery‑focused, balancing speed with reliability and long‑term maintainability.  * A proven ability to work from idea to a working feature.  * Able to evaluate new technologies pragmatically rather than adopting trends for their own sake.  * Strong communication skills, with ability to communicate with business stakeholders to understand the problems and contribute to technical discussions.    The successful candidate must have permission to work in South Africa by the start of their employment.    BENEFITS    We offer thoughtful, balanced rewards and support to help our people do their best work and live their lives outside it, this includes but is not exhaustive of:  * 23 days holiday per year in addition to bank holidays (+1 day for every day of service up to a maximum of 28 days);  * Matching pension contribution up to 7% (up to a maximum of 14% combined), and financial education;  * Hybrid working and flexible working hours  Parental Support:  * Fertility treatment leave – 5 days of leave per cycle of treatment per year;  * Maternity leave – 26 weeks of full pay followed by 13 weeks of half pay;  * Paternity leave – 6 weeks of full pay.  Various Health and Medical Benefits including:   * Medical Aid and Gap Cover Policy (taxable benefit) for you and your family;  * Free access to the world-famous mindfulness app Headspace;  * EAP programme for you and your immediate family.    THE APPLICATION PROCESS  To apply for this role, please send an up-to-date CV to Job Application for DevOps Engineer at S-RM The application process will include:  1. A preliminary call, which will be a chance for you to find out more about S-RM and the role.  1. First Interview - this will be run remotely and will likely be more technical in focus  1. Second interview - this will be run remotely and will likely be more focussed on the role in more detail and your ability to collaborate with our varied team    We nurture a culture of equality, diversity and inclusion and we are dedicated to developing a workforce that displays a variety of talents, experiences and perspectives.

Sonata One

Sonata One is a rapidly scaling, regulated fund services and technology (fintech) business.  We're The Private Funds Clearinghouse, connecting more than 53,000 investors with 6,500 funds and 180 fund managers around the globe. Our vision is to change the paradigm of private markets investing through harmonising the end-to-end investment process within one platform. Investors benefit from a seamless, one & done experience across the fund lifecycle (from fund selection and subscription through to settlement and reporting) underpinned by a globally compliant KYC passport and 24/5 support. Fund managers can raise capital faster at a lower cost from a wider pool of pre-approved investors.  Founded in 2015, Sonata One has a presence in eight locations worldwide including the US, UK and Luxembourg, Guernsey, South Africa and Mauritius.     Role Overview:  Sonata One is seeking an experienced Cloud & Microsoft 365 Engineer to own the design, implementation, and ongoing operation of our Microsoft cloud estate. You will act as a senior technical owner across identity, endpoint management, collaboration, data governance, security operations, and automation—ensuring our M365 environment is secure, compliant, scalable, and aligned with business outcomes.  This is a hands-on engineering role with significant architectural influence: you will translate security and governance requirements (including SOC 2, ISO 27001, and NIST-aligned controls) into practical configurations, automation, and operational processes. You will partner with business stakeholders, IT operations, and external vendors to deliver reliable services, lead complex initiatives, and drive continuous improvement across the Microsoft stack.    Key Responsibilities:    IT service Management, project delivery & end user support  * Operate within ITIL-aligned practices: incidents, changes, problems, and service requests with clear SLAs and communication.  * Plan and lead M365 projects using structured project management (scope, timeline, risk, stakeholder management).  * Coordinate cross-functional delivery (security, infrastructure, applications, vendors) to meet business deadlines and quality standards.  * Act is primary escalation contact for 2nd & 3rd level end user support issues.  Microsoft Intune & mobile device management (MDM/MAM)  * Lead the design, implementation, and lifecycle management of Microsoft Intune for enterprise mobile device and application management.  * Configure and manage mobile application deployment, updates, and retirement within Microsoft 365.  * Implement Conditional Access, security baselines, compliance policies, and data protection controls for mobile devices and managed applications.  * Oversee MDM and MAM across supported mobile platforms (e.g. iOS, Android, Windows).  * Automate enrolment, compliance remediation, and operational workflows; drive measurable efficiency and reliability improvements.  * Ensure all devices accessing Sonata One resources meet defined security and governance standards.  Microsoft Entra ID (Azure AD) & identity platform  * Architect and implement identity and access management (IAM) solutions using Microsoft Entra ID.  * Design and deploy secure authentication including MFA, SSO, and modern auth patterns for cloud and integrated applications.  * Integrate third-party SaaS and line-of-business applications while maintaining least-privilege and strong security posture.  * Provide expert guidance on identity governance, privileged access, and Entra best practices.  * Automate identity-related operations (group management, licensing workflows, lifecycle tasks) where appropriate.  * Support SOC 2 control activities through documented processes and regular user access reviews.  Identity lifecycle management (ILM)  * Own the identity lifecycle: joiner/mover/leaver, role-based access control (RBAC), and federation where applicable.  * Design, configure, and automate identity governance workflows to meet internal policy and regulatory expectations.  * Implement self-service identity and password management capabilities aligned with security policy.  * Drive adoption and maturation of the Microsoft Identity Governance capabilities (e.g. access reviews, entitlement management, lifecycle workflows).  * Conduct periodic access certifications with business owners in line with SOC 2 and Sonata One access control policies.  Microsoft Purview & data lifecycle management  * Lead administration and support of Microsoft Purview for classification, labeling, data governance, and compliance reporting.  * Implement and automate retention, deletion, and archival policies across M365 workloads.  * Design data protection strategies aligned with GDPR, POPIA, and organisational data handling requirements.  * Ensure effective protection through retention labels, DLP, encryption, and integration with backup/archival strategy where required.  * Partner with legal, risk, and business teams on data handling, eDiscovery, and audit readiness.  Microsoft Sentinel (SIEM)  * Implement and operate Microsoft Sentinel for centralised logging, detection, and security analytics.  * Configure analytics rules, workbooks, automation rules/playbooks, and integrations for threat detection and incident response.  * Tune detections to reduce false positives; improve mean time to detect/respond through automation and operational discipline.  * Support security operations with reporting, KPIs, and continuous optimisation of use cases.  Microsoft Defender suite (Endpoint, Office 365, Identity & vulnerability management)  * Lead configuration and operation of Defender for Endpoint, Defender for Office 365, and Defender for Identity (and related XDR capabilities as adopted).  * Architect vulnerability and exposure management: baselines, patching posture, configuration hardening, and endpoint protection standards.  * Integrate Defender signals with Sentinel and broader security tooling for cohesive detection and response.  * Proactively manage security incidents and alerts; drive improvements to reduce risk and operational friction.  * Monitor endpoint and workload health to maintain current patch/vulnerability posture across the estate.  SharePoint administration, design & Power Platform  * Design, implement, and administer SharePoint Online (sites, hubs, permissions, information architecture) for performance, security, and usability.  * Lead development of Power Apps and Power Automate solutions that automate business processes and integrate with M365 and line-of-business systems.  * Establish and enforce SharePoint and Power Platform governance (DLP, environment strategy, solution lifecycle, ALM where applicable).  * Support document management, collaboration patterns, and migration/onboarding activities as required.  Power BI  * Architect and deliver Power BI solutions (datasets, reports, dashboards) that support data-driven decision-making.  * Integrate data from multiple sources; implement refresh, gateway, and workspace patterns that scale securely.  * Enforce Power BI governance: workspace access, sensitivity labels, row-level security, and compliance with data policies.  Microsoft Teams  * Design and manage Teams environments, policies, and templates for effective collaboration.  * Optimise Teams integration with SharePoint, OneDrive, Planner, and Power Platform.  * Implement Teams governance and compliance (meeting policies, guest access, retention, eDiscovery alignment).  Cybersecurity frameworks & compliance  * Apply knowledge of SOC 2, ISO 27001, and NIST (and related control frameworks) to M365 design and operations.  * Implement and evidence security controls, risk treatments, and audit-ready documentation.  * Ensure incident management, data protection, and access management requirements are met across M365 services.  * Facilitate regular access reviews with business partners per Sonata One Access Control and Data Management policies.  Automation, scripting & infrastructure as code  * Develop automation using PowerShell, Microsoft Graph, Bicep/ARM, and other IaC or API-driven tooling as appropriate.  * Build repeatable deployment pipelines and configuration patterns to reduce manual effort and configuration drift.  * Deliver low-code/no-code automation on Power Platform where it improves time-to-value for the business.  Qualifications & Experience:  Required:  * 5+ years in IT with 3+ years focused on Microsoft 365 / Azure identity and security (mid-level); 7+ years with substantial ownership of M365 architecture and operations (senior level).  * Demonstrable hands-on experience with Entra ID, Intune, Defender, Purview, SharePoint Online, Teams, and Power Platform (Power Apps / Power Automate).  * Practical experience implementing Conditional Access, MFA/SSO, compliance policies, and MDM/MAM.  * Experience with SIEM/SOC workflows; Microsoft Sentinel strongly preferred.  * Strong PowerShell skills and familiarity with Graph API, automation, and IaC concepts (Bicep/Terraform a plus).  * Understanding of SOC 2, ISO 27001, or NIST control implementation in cloud/SaaS environments.  * Experience supporting access reviews, audit evidence, and identity governance processes.  * Relevant Microsoft certifications (e.g. SC-200, SC-300, MS-102, AZ-104, MS-700) or equivalent demonstrated expertise.  * Matric plus tertiary qualification in IT, computer science, or related field (or equivalent experience).  * Eligibility to work in South Africa; valid driver’s licence if on-site travel is required.  Preferred:  * Experience with Microsoft Identity Governance (Entitlement Management, Access Reviews, Lifecycle Workflows).  * Power BI development and enterprise governance (Premium/Fabric awareness).  * POPIA and GDPR data protection programme delivery in Microsoft 365.  * ITIL Foundation or practical ITSM tool experience (ServiceNow, Halo, etc.).  * Project management certification (PMI, PRINCE2) or proven delivery of multi-workstream programmes.  * Experience in professional services, financial services, or regulated industries.    Certifications:  * Microsoft Certified: Azure Solutions Architect Expert.  * Microsoft Certified: Security, Compliance, and Identity Fundamentals.  * Microsoft Certified: Microsoft 365 Certified: Enterprise Administrator Expert (or equivalent).  * ITIL Certification (latest version).  * Certified Information Systems Security Professional (CISSP) or equivalent is a plus.

boxxe

For us, tech has never been about just hardware or software. It’s about people. It’s our meaningful relationships, deep expertise and practical know-how in technology that drive what we do. We put our customers, our partners and the environment at the heart of everything we do and our people are the difference that make the difference. At boxxe, we understand, we collaborate, we simplify, we care and we deliver; together we are making tech human. YOUR MISSION 💪 The IT Infrastructure Engineer is responsible for the deployment, configuration and ongoing support of enterprise infrastructure across both virtual and physical environments. The role focuses on Windows Server deployments, clustering technologies, storage integration (MPIO), identity and access solutions (PingFederate, UserLock MFA), and application onboarding within a secure, highly available environment. WHAT YOU’LL BE DOING 🎯 * Deploy and configure Windows Server environments across VMware vCenter (virtual builds) and physical servers * Perform system provisioning including OS installation, patching and baseline security hardening * Manage virtual machine lifecycle (provisioning, resizing, decommissioning) * Monitor and optimise resource utilisation across clusters * Document onboarding processes and standards * Maintain technical documentation including SOPs and runbooks * Administer and maintain VMware vSphere / vCenter environments * Manage virtual machine lifecycle (provisioning, resizing, decommissioning) * Monitor and optimise resource utilisation across clusters * Design and implement Windows Failover Clustering solutions * Configure and support Multipath I/O (MPIO) for SAN storage * Ensure resilience and high availability of critical systems * Lead/support application onboarding including authentication integration and infrastructure provisioning * Collaborate with application owners to meet security and connectivity requirements * Document onboarding processes and standards * Provide support for infrastructure incidents and requests * Troubleshoot complex issues across Windows, VMware and identity platforms * Participate in on-call support where required * Ensure systems meet organisational security and compliance standards * Support patching cycles and vulnerability remediation * Work with cyber and compliance teams as required * Maintain technical documentation including SOPs and runbooks * Contribute to continuous service improvement initiatives WHAT EXPERIENCE WE THINK YOU’LL NEED 🚀 * Strong experience with Windows Server (2016/2019/2022) * Experience with VMware vSphere / vCenter * Knowledge of Windows Failover Clustering and MPIO * Configure and support PingFederate for SSO and application federation * Manage UserLock MFA including policy configuration and access control * Support secure authentication integration across enterprise platforms * Understanding of Active Directory, DNS, DHCP, and networking fundamentals * Experience with F5 load balancers, Citrix, and Linux (RHEL/OEL) * Knowledge of ITIL processes and PowerShell scripting * Strong problem-solving skills and ability to work under pressure * Clear communication with stakeholders * Proactive approach to documentation * Secure and reliable infrastructure deployments * High availability of critical systems * Successful application onboarding * Timely incident resolution and audit-ready documentation * Scheduled On-call and Out of Hours OS Patching participation (renumerated) * Ability to obtain/holder of BPSS & SC Clearance       >  As an equal opportunity employer, we are committed to building a team that represents a variety of backgrounds, perspectives, > and skills. boxxe does not discriminate based on race, religion, colour, national origin, sexual orientation, gender identity, > age, marital status, veteran status, or disability status. All our employment is based on qualification, excellence, and > business need.