IT Manager Systems & Infrastructure

Job Title Servers & Virtualization — Windows Server estate and VMs (Hyper-V/VMware): provisioning, hardening, patching, monitoring, capacity and decommissioning. Databases (Microsoft SQL Server) — backups, restores and recovery testing, performance tuning, security and permissions, SQL Agent jobs and SSIS packages; server-side support for Sage 100 and PRIMS. Backup & Disaster Recovery — documented 3-2-1 strategy with an immutable/offline copy, defined RPO/RTO, quarterly restore tests and an annual DR exercise. Identity, Endpoints & Productivity — Active Directory and Entra ID hybrid identity, Microsoft 365, Intune for PCs, phones and tablets, Conditional Access and MFA. Network, Plant Floor & Facilities — switches, firewalls, Fortinet ecosystem, VPN, Wi-Fi and cabling; VoIP, cameras and access control; label printers, scanners, scales and terminals. Security & Compliance — manage/own security program aligned to CIS Controls; MFA, EDR, patch and vulnerability management, incident response; IT evidence for SQF and customer audits. Monitoring, Performance & Capacity — own the monitoring platform, tune alerts, establish baselines, measure the impact of changes, and maintain a 12–18 month capacity forecast. Automation & Engineering Practice — automate repeatable work in PowerShell, keep scripts and configuration in Git, and treat infrastructure as code where practical. Planning, Projects & Leadership — own vendor relationships and renewals, plan and deliver infrastructure projects end to end, maintain documentation and SOPs, and coach junior or contract staff. What We're Looking For Required 3+ years in systems administration, including 1+ years with full responsibility for SQL Server and server infrastructure, and 3+ years leading projects, vendors or people (or equivalent demonstrated responsibility). Experience in a small IT team where you owned problems end to end. Windows Server & virtualization: Active Directory, Group Policy, DNS/DHCP, Hyper-V or VMware. SQL Server: backup/restore including point-in-time, recovery models, security, T-SQL, SQL Agent, SSIS, and performance fundamentals. Backup & disaster recovery: you've designed a strategy with an offline/immutable copy and performed a real restore under pressure — not just scheduled the job. Identity & Microsoft 365: Entra ID hybrid identity, Exchange Online, Intune for Windows/Android/iOS, Conditional Access and MFA. Networking: TCP/IP, DNS, DHCP, VLANs, firewalls, VPN and Wi-Fi design (preferred Fortinet/Fortigate, Client ecosystem). Web hosting: IIS, DNS and TLS certificate administration. Experience supporting vendor-built business applications in production, including the business process behind them. Automation: PowerShell scripting with proper error handling and logging; Git for scripts and configuration. Security: MFA, EDR, patch and vulnerability management, incident response; familiarity with CIS Controls or a comparable framework, own the program of penetration protection/detection within the company infrastructure, be the part of the team to conduct yearly penetration stress test, document findings and recommendation implantation Strong prioritization, follow-through, and clear written documentation. Preferred / Nice to Have Sage 100 or a comparable ERP; PRIMS or another production/inventory (MES) system. Manufacturing, food production or distribution environment; exposure to SQF or similar audits. SQL Server high availability (Availability Groups, log shipping); Azure fundamentals. VoIP, camera and access-control systems; cPanel/Linux hosting basics. Certifications such as AZ-800/801, AZ-104, MS-102, Security+, CCNA, or ITIL 4 Foundation. Bash/PowerShell, AI automation,.Net Suncap Technology