IT Infrastructure and Cloud Engineer

This role is an on-site IT resource for Xerimis BV, combining hands-on end-user support with ownership of a strategic cloud migration program. The successful candidate will keep day-to-day desktop and account support running smoothly while leading the migration of on-premises virtual servers to Microsoft Azure, deploying and managing Microsoft Intune for endpoint management, and supporting the rollout of data governance controls (retention, classification, sensitivity labels, and DLP). Exposure to computer system validation (CSV) in a GxP-regulated environment is an advantage, as the site operates under regulatory quality requirements., 1. Strategic Projects (Primary Focus)

• Lead the end-to-end migration of on-premises virtual machines/servers to Microsoft Azure, including planning, sequencing, execution, and post-migration validation.
• Assess current on-prem VM infrastructure and design a target Azure architecture (networking, storage, compute sizing, backup/DR, cost management).
• Deploy, configure, and manage Microsoft Intune for device enrollment, configuration profiles, compliance policies, and application deployment.
• Support the design and implementation of data governance controls: data retention policies, data classification schemes, sensitivity labels, and Data Loss Prevention (DLP) rules (e.g., within Microsoft Purview/Microsoft 365).
• Document architecture decisions, migration runbooks, and standard operating procedures for ongoing support.
• Where applicable, support computer system validation (CSV) activities for IT systems in scope of GxP requirements, working with Quality teams on protocols, documentation, and change control.

1. Site Infrastructure & Network Support * Administer and maintain on-site servers, storage, switches, firewalls, and wireless infrastructure. * Monitor system health, performance, and security across server and network infrastructure; respond to and resolve incidents. * Manage backups, patching, and routine maintenance for both on-prem and (post-migration) Azure-hosted systems. * Maintain network security controls, including firewall rule management and basic network troubleshooting (VLANs, routing, DNS/DHCP). * Act as the primary technical point of contact for any IT infrastructure issue on site, escalating to regional/corporate IT or vendors where required.

2. End-User & Day-to-Day IT Support * Provide first-line IT support to all on-site staff: account creation/deactivation, password resets, and access provisioning. * Image, configure, and deploy laptops and desktops for new hires and equipment refreshes. * Triage, log, and resolve helpdesk tickets within agreed service levels; escalate complex issues appropriately. * Support meeting room AV, printers, mobile devices, and other site IT equipment. * Maintain an accurate inventory of IT hardware and software licenses on site.

• Bachelor’s degree in Information Technology, Computer Science, or related field, or equivalent practical experience.
• 3+ years of experience in IT infrastructure/systems administration, including hands-on Azure experience (IaaS migrations, virtual networks, storage, Azure AD/Entra ID).
• Demonstrated experience planning or executing a cloud migration (on-prem to cloud), ideally VM-based workloads to Azure.
• Practical experience administering Microsoft Intune (or comparable MDM/UEM platform) for device and application management.
• Solid working knowledge of core infrastructure: Windows/Linux servers, virtualization (Hyper-V/VMware), switches, firewalls, and general networking principles (TCP/IP, VLANs, DNS, DHCP).
• Experience providing direct end-user support (ticketing systems, account/access administration, hardware deployment).
• Attention to detail.
• Ability to lift 25 lbs.
• English literacy

Certifications (preferred, not required)

• Microsoft Certified: Azure Administrator Associate (AZ-104) or equivalent.
• Microsoft 365 Certified: Endpoint Administrator Associate (MD-102), or Intune-specific certification.
• CompTIA Network+/Security+ or equivalent networking/security certification.

Added Advantage

• Exposure to Computer System Validation (CSV) in a GxP/regulated (e.g., pharmaceutical, biotech, medical device) environment.
• Familiarity with Microsoft Purview (or equivalent) for data classification, sensitivity labels, retention policies, and DLP., * Comfortable balancing reactive day-to-day support with longer-term project work without losing focus on either.
• Strong independent judgment and decision-making; able to work effectively with minimal on-site IT peers.
• Clear communicator able to explain technical issues to non-technical staff and report progress to remote management.
• Methodical and detail-oriented, particularly where regulatory documentation or change control is involved.