IT Manager Systems & Infrastructure

Job Title

Servers & Virtualization Windows Server estate and VMs (Hyper-V/VMware): provisioning, hardening, patching, monitoring, capacity and decommissioning.

Databases (Microsoft SQL Server) backups, restores and recovery testing, performance tuning, security and permissions, SQL Agent jobs and SSIS packages; server-side support for Sage 100 and PRIMS.

Backup & Disaster Recovery documented 3-2-1 strategy with an immutable/offline copy, defined RPO/RTO, quarterly restore tests and an annual DR exercise.

Identity, Endpoints & Productivity Active Directory and Entra ID hybrid identity, Microsoft 365, Intune for PCs, phones and tablets, Conditional Access and MFA.

Network, Plant Floor & Facilities switches, firewalls, Fortinet ecosystem, VPN, Wi-Fi and cabling; VoIP, cameras and access control; label printers, scanners, scales and terminals.

Security & Compliance manage/own security program aligned to CIS Controls; MFA, EDR, patch and vulnerability management, incident response; IT evidence for SQF and customer audits.

Monitoring, Performance & Capacity own the monitoring platform, tune alerts, establish baselines, measure the impact of changes, and maintain a 1218 month capacity forecast.

Automation & Engineering Practice automate repeatable work in PowerShell, keep scripts and configuration in Git, and treat infrastructure as code where practical.

Planning, Projects & Leadership own vendor relationships and renewals, plan and deliver infrastructure projects end to end, maintain documentation and SOPs, and coach junior or contract staff.

What We're Looking For

Required

• 3+ years in systems administration, including 1+ years with full responsibility for SQL Server and server infrastructure, and 3+ years leading projects, vendors or people (or equivalent demonstrated responsibility).
• Experience in a small IT team where you owned problems end to end.
• Windows Server & virtualization: Active Directory, Group Policy, DNS/DHCP, Hyper-V or VMware.
• SQL Server: backup/restore including point-in-time, recovery models, security, T-SQL, SQL Agent, SSIS, and performance fundamentals.
• Backup & disaster recovery: you've designed a strategy with an offline/immutable copy and performed a real restore under pressure not just scheduled the job.
• Identity & Microsoft 365: Entra ID hybrid identity, Exchange Online, Intune for Windows/Android/iOS, Conditional Access and MFA.
• Networking: TCP/IP, DNS, DHCP, VLANs, firewalls, VPN and Wi-Fi design (preferred Fortinet/Fortigate, Client ecosystem).
• Web hosting: IIS, DNS and TLS certificate administration.
• Experience supporting vendor-built business applications in production, including the business process behind them.
• Automation: PowerShell scripting with proper error handling and logging; Git for scripts and configuration.
• Security: MFA, EDR, patch and vulnerability management, incident response; familiarity with CIS Controls or a comparable framework, own the program of penetration protection/detection within the company infrastructure, be the part of the team to conduct yearly penetration stress test, document findings and recommendation implantation
• Strong prioritization, follow-through, and clear written documentation.

Preferred / Nice to Have

• Sage 100 or a comparable ERP; PRIMS or another production/inventory (MES) system.
• Manufacturing, food production or distribution environment; exposure to SQF or similar audits.
• SQL Server high availability (Availability Groups, log shipping); Azure fundamentals.
• VoIP, camera and access-control systems; cPanel/Linux hosting basics.
• Certifications such as AZ-800/801, AZ-104, MS-102, Security+, CCNA, or ITIL 4 Foundation.
• Bash/PowerShell, AI automation,.Net