IT Manager Systems & Infrastructure

• Servers & virtualization Windows Server estate and VMs (Hyper-V/VMware): provisioning, hardening, patching, monitoring, capacity and decommissioning.
• Databases (Microsoft SQL Server) backups, restores and recovery testing, performance tuning, security and permissions, SQL Agent jobs and SSIS packages; server-side support for Sage 100 and PRIMS.
• Backup & disaster recovery documented 3-2-1 strategy with an immutable/offline copy, defined RPO/RTO, quarterly restore tests and an annual DR exercise.
• Identity, endpoints & productivity Active Directory and Entra ID hybrid identity, Microsoft 365, Intune for PCs, phones and tablets, Conditional Access and MFA.
• Network, plant floor & facilities switches, firewalls, Fortinet ecosystem, VPN, Wi-Fi and cabling; VoIP, cameras and access control; label printers, scanners, scales and terminals.
• Security & compliance manage /own security program aligned to CIS Controls; MFA, EDR, patch and vulnerability management, incident response; IT evidence for SQF and customer audits.
• Monitoring, performance & capacity own the monitoring platform, tune alerts, establish baselines, measure the impact of changes, and maintain a 12 18 month capacity forecast.
• Automation & engineering practice automate repeatable work in PowerShell, keep scripts and configuration in Git, and treat infrastructure as code where practical.
• Planning, projects & leadership own vendor relationships and renewals, plan and deliver infrastructure projects end to end, maintain documentation and SOPs, and coach junior or contract staff.

• 3 years in systems administration, including 1 years with full responsibility for SQL Server and server infrastructure, and 3 years leading projects, vendors or people (or equivalent demonstrated responsibility).
• Experience in a small IT team where you owned problems end to end.
• Windows Server & virtualization: Active Directory, Group Policy, DNS/DHCP, Hyper-V or VMware.
• SQL Server: backup/restore including point-in-time, recovery models, security, T-SQL, SQL Agent, SSIS, and performance fundamentals.
• Backup & disaster recovery: you’ve designed a strategy with an offline/immutable copy and performed a real restore under pressure not just scheduled the job.
• Identity & Microsoft 365: Entra ID hybrid identity, Exchange Online, Intune for Windows/Android/iOS, Conditional Access and MFA.
• Networking: TCP/IP, DNS, DHCP, VLANs, firewalls, VPN and Wi-Fi design (prefered Frtinet/Fortigate, Client ecosystem).
• Web hosting: IIS, DNS and TLS certificate administration.
• Experience supporting vendor-built business applications in production, including the business process behind them.
• Automation: PowerShell scripting with proper error handling and logging; Git for scripts and configuration.
• Security: MFA, EDR, patch and vulnerability management, incident response; familiarity with CIS Controls or a comparable framework, own the programm of penetration protection/detection within the company infrastructure, be the part of the team to conduct yearly penetration stress test , document findings and recommendation implantation
• Strong prioritization, follow-through, and clear written documentation.

Preferred / Nice to Have

• Sage 100 or a comparable ERP; PRIMS or another production/inventory (MES) system.
• Manufacturing, food production or distribution environment; exposure to SQF or similar audits.
• SQL Server high availability (Availability Groups, log shipping); Azure fundamentals.
• VoIP, camera and access-control systems; cPanel/Linux hosting basics.
• Certifications such as AZ-800/801, AZ-104, MS-102, Security , CCNA, or ITIL 4 Foundation.
• Bash/PowerShell, AI automation, .Net