INFRASTRUCTURE ENGINEER

As an Infrastructure Engineer, you will take ownership of the day-to-day administration, maintenance, and continuous improvement of our established Microsoft Azure cloud environment and Microsoft Intune endpoint platform. Both environments are mature and operational - this role is about keeping them running at their best, identifying opportunities to strengthen and refine them, and applying your expertise to embed best practices across the organization.

Alongside cloud operations, you will manage a number of legacy on-premise systems that remain in use, with a view to assessing and transitioning these workloads into Azure over time in a structured and low-risk way. This is a role for someone who thrives in a well-established environment, is confident making informed recommendations, and takes genuine pride in operational excellence, documentation, and long-term platform health.

WHAT YOU'LL DO

Azure Cloud Infrastructure

• Administer and maintain our established Microsoft Azure environment - including virtual machines, virtual networks, storage accounts, subscriptions, and resource groups - ensuring stability, performance, and cost efficiency.

• Manage Azure Active Directory (Entra ID) - including user lifecycle management, role-based access control, conditional access policies, and SSO integrations - keeping identity and access controls current and well-governed.

• Monitor and maintain Azure-based services including Azure Monitor, Azure Backup, Azure Site Recovery, and Log Analytics workspaces - proactively addressing alerts and ensuring service health.

• Regularly review the Azure environment against Microsoft best practices and Well-Architected Framework principles, identifying and proposing improvements to security, reliability, and operational efficiency.

• Document the current environment thoroughly and maintain up-to-date architecture records, runbooks, and change logs.

Microsoft Intune - Administration & Optimisation

• Administer and maintain our existing Microsoft Intune environment, ensuring device enrollment, compliance policies, and configuration profiles remain accurate, effective, and up to date.

• Monitor endpoint compliance across Windows and macOS devices - investigating and resolving non-compliant devices and policy gaps in a timely manner.

• Review and fine-tune application deployment pipelines, Autopilot workflows, and conditional access policies - making targeted improvements that reduce friction and strengthen governance.

• Proactively identify opportunities to enhance the Intune configuration, recommending and implementing changes that align with industry best practices and Microsoft guidance.

• Serve as the internal subject matter expert for Intune - advising the wider IT team on endpoint management standards and helping embed consistent practices across the organization.

Networking & Security

• Support and maintain LAN/WAN infrastructure, VPN connectivity, and network segmentation across office and venue locations.

• Monitor infrastructure health, performance, and capacity using appropriate tooling; respond to and resolve alerts proactively.

• Implement and enforce security best practices across all infrastructure layers - including patch management, access control, and vulnerability remediation.

• Participate in infrastructure-related incident response, root cause analysis, and post-incident documentation.

Projects & Collaboration

• Lead and contribute to infrastructure improvement projects, including migrations, upgrades, and new technology rollouts.

• Produce and maintain clear technical documentation - including runbooks, architecture diagrams, and change records.

• Collaborate with IT, Development, and Security teams on cross-functional initiatives, providing infrastructure expertise as needed.

• Evaluate new technologies and make recommendations aligned with business goals and long-term infrastructure strategy., At ATG Entertainment, our commitment to inclusion, diversity, equity, and access (IDEA) is reflected in our IDEA mission statement: A stage for everyone. Our stages are a platform for compelling stories - stories that are for all, by all, and of all. We shine our spotlight on our differences and believe that understanding and celebrating these differences makes us better global citizens. We are committed to strengthening the sense of belonging by ensuring diversity and equity in everything we do. We strive to make our venues beacons of these ideals in our communities. Onstage and off, we hold ourselves accountable for nurturing an inclusive culture, one in which everyone can bring their authentic selves, and everyone feels they belong.

Do you have experience in vCenter?, * 3-5 years of experience in an infrastructure engineering, cloud engineering, or systems administration role.

• Solid hands-on experience administering Microsoft Azure environments - including virtual machines, virtual networks, Entra ID, Azure Monitor, and Azure Backup.

• Proven experience managing and optimizing Microsoft Intune environments - including Autopilot, compliance policies, configuration profiles, and app deployment - with the confidence to identify gaps and recommend improvements.

• Strong working knowledge of Azure Active Directory / Entra ID - including conditional access, RBAC, and SSO integrations.

• Experience assessing legacy on-premise infrastructure and contributing to cloud migration planning and execution.

• Working knowledge of VMware virtualization (vSphere, ESXi, vCenter).

• Solid understanding of networking fundamentals: TCP/IP, DNS, DHCP, VLANs, VPNs, and firewall concepts.

• Experience administering Windows Server environments - including Active Directory, Group Policy, DNS, and DHCP.

• A best-practice mindset - comfortable reviewing existing configurations, identifying improvements, and making a clear case for change.

• Strong analytical and troubleshooting skills across cloud and legacy infrastructure layers.

• Disciplined approach to documentation, change management, and operational hygiene.

• Ability to work independently, prioritize effectively, and communicate recommendations clearly to both technical and non-technical stakeholders.

Nice to Have

• Microsoft certifications such as AZ-104 (Azure Administrator), AZ-305 (Azure Solutions Architect), or MS-102 (Microsoft 365 Administrator).

• Experience with Azure Site Recovery or similar disaster recovery tooling.

• Familiarity with Cisco Meraki for network management across multi-site environments.

• Exposure to infrastructure-as-code or automation using PowerShell, Azure CLI, Bicep, or Terraform.

• Experience working in a multi-site or venue-based organization.

Pulled from the full job description

• Health insurance

• 401(k) matching

• Vision insurance

• Dental insurance

• Paid holidays, * Medical, Dental, and Vision Insurance

• 401(k) Match

• Paid Vacation & Holidays

ATG-Entertainment is a world leader in live entertainment. Our portfolio of venues includes historic theatres, studio theatres, cinemas, conference spaces, and modern live music arenas. ATG-Entertainment own, operate or program 64 of the world's most iconic venues across the UK, the US and Germany, entertaining over 18 million audience members each year.