IT Head of Infrastructure

Infrastructure Lead

We are seeking a highly hands‑on Infrastructure Lead to design, build, and operate the core IT infrastructure for a newly separated and growing environment. This role owns the Microsoft‑based target architecture and the execution plan to transition away from the legacy KGP environment, working in close partnership with Group IT Security (CISO), an external infrastructure consultant, and the KGP IT team.

Own the overall infrastructure strategy and roadmap across cloud, on‑prem, network, storage, backup, and endpoints, aligned with business and security priorities.

Define and maintain infrastructure standards, architectural patterns, and best practices for availability, performance, security, and scalability.

Own and apply the Microsoft Cloud Adoption Framework (CAF), including identity, networking, security, governance, landing zone design, and platform automation.

Apply the Microsoft Well‑Architected Framework across security, reliability, cost optimization, performance efficiency, and operational excellence.

Serve as the primary infrastructure point of contact for IT leadership, security, application teams, and business stakeholders.

Provide technical leadership and informal mentoring to a small team of engineers/administrators and external partners, including design and configuration reviews.

Design & Implementation (Very Hands‑On)

Build and operate Azure IaaS and PaaS services across compute, storage, networking, and platform services.

Define and implement Azure management group and subscription hierarchy, resource group standards, naming/tagging conventions, and Azure Policy baselines.

Implement and operate core identity and directory services including Microsoft Entra ID, hybrid Active Directory, Conditional Access, MFA, PIM, device‑based access controls, and application integrations.

Lead infrastructure components of major initiatives such as environment separation, new site deployments, migrations, and security programs.

Operations & Support

Perform advanced troubleshooting across networks, servers, cloud resources, storage, and backups, owning issues end‑to‑end through resolution and root‑cause analysis.

Operate and maintain infrastructure services, including patching, upgrades, capacity planning, and performance optimization.

Participate in and help define on‑call rotations and incident response processes for critical infrastructure events.

Design and operate backup, disaster recovery, and business continuity capabilities appropriate to the organization’s risk profile.

Implement and operate Microsoft security tooling including Defender for Cloud, Defender for Endpoint, Conditional Access, and PIM.

Ensure infrastructure changes follow defined change management processes and are clearly documented.

Contribute to and enforce infrastructure‑related policies, standards, and operating procedures.

Work closely with application, data, and service desk teams to ensure infrastructure meets service and availability requirements.

Produce high‑quality documentation including architecture diagrams, runbooks, and troubleshooting guides.

Deep, hands‑on experience with Azure (IaaS/PaaS), including Landing Zones, VNets, VPNs, peering, firewalls, NSGs, private endpoints, and monitoring.

Microsoft 365/Modern Workplace experience, including Entra ID, Intune, Exchange Online, Teams, SharePoint, and endpoint security.

Networking fundamentals and advanced troubleshooting (routing, switching, VLANs, VPNs, firewalls, wireless).

Experience in a greenfield environment, merger/separation, or rapid transformation where standards and platforms were built from the ground up.

Contract

Information Technology