Network and Infrastructure Engineer (TIER 3)

Salary: ₱90,000 – ₱110,000 per month

About the role

We are looking for a hands-on Network & Infrastructure Engineer (Tier 3) to take ownership of its IT infrastructure as the company transitions from an MSP-managed environment to an internal IT function. The role will cover Azure infrastructure, networking, endpoint security, Microsoft 365, patch management, backup/DR, and infrastructure monitoring. You will also lead technical knowledge transfer from the existing MSP and build the documentation and processes needed to operate the environment independently.

Key responsibilities

• Manage and monitor Azure infrastructure, including VMs, VNets, NSGs, RBAC, Azure Monitor and Azure Backup.

• Manage network infrastructure, including routing, switching, DNS, DHCP, VPNs, firewalls and WAN connectivity.

• Administer Microsoft Intune / Endpoint Manager, including device enrollment, Autopilot, compliance policies, application deployment and BitLocker.

• Manage endpoint security tools such as CrowdStrike, ThreatLocker, Huntress and Microsoft Defender.

• Own patch management and vulnerability remediation across endpoints, servers and Azure VMs.

• Manage backup and disaster recovery, including Azure Backup, restore testing, RTO/RPO and DR documentation.

• Administer Microsoft 365 / Entra ID, including Exchange Online, SharePoint, OneDrive and Conditional Access.

• Use PowerShell for automation, reporting and infrastructure management.

• Maintain network diagrams, technical documentation, runbooks and configuration standards.

• Lead the MSP knowledge transfer and transition, validate administrative access and ensure the environment is ready for internal ownership.

About you

• 6+ years of hands-on network and infrastructure engineering experience.

• Strong Microsoft Azure infrastructure experience.

• Strong networking knowledge: TCP/IP, DNS, DHCP, VPN, routing, switching, firewalls and NSGs.

• Strong Microsoft Intune / Endpoint Manager experience, including Autopilot and Win32 application deployment.

• Hands-on experience with EDR/endpoint security platforms such as CrowdStrike, Defender, SentinelOne or equivalent.

• Strong PowerShell scripting and automation skills.

• Experience with patch management and vulnerability remediation.

• Experience with backup and disaster recovery, such as Azure Backup or Veeam.

• Experience with Microsoft 365, Entra ID and Conditional Access.

• Strong documentation and communication skills.