L3 Engineer - Sandton

About the position

The Opportunity: Subject Matter Expert (L3)

We are seeking a highly specialized and disciplined Level 3 (L3) Enterprise Infrastructure Engineer to serve as a Subject Matter Expert and the final point of technical escalation. This role is foundational to our service delivery strategy, requiring deep technical mastery to maintain, deploy, and troubleshoot mission-critical cloud, server, and network infrastructure.

You will be responsible for leading complex technical projects, driving automation, and ensuring the highest level of stability for environments where system downtime carries catastrophic risk. This position demands a proactive approach, strong ownership, and meticulous documentation discipline.

Location: Johannesburg, South Africa (on-site with required travel to client sites; participation in a standby rotation for critical after-hours incidents and changes).

Reports to: Service Delivery Manager

Key Responsibilities

As a top-tier engineer, your focus will be on complex problem resolution, strategic implementation, and technical leadership:

Cloud & Modern Workplace Architecture

• Design, deploy, and administer advanced Microsoft 365 and Azure environments, specializing in Entra ID (Azure AD), security configurations, and Conditional Access Policies.
• Manage complex configurations for the full M365 stack, including Exchange Online, SharePoint, and Intune/Microsoft Endpoint Manager, ensuring consistent device and user policy application.
• Develop and implement solutions that utilize Microsoft platforms to enable effective, secure, and collaborative digital workflows across entire client organizations.

Core Infrastructure & Virtualization

• Serve as the primary escalation point for critical issues related to virtualized environments (Hyper-V and/or VMware), Windows Server architecture, and complex Active Directory configurations.
• Manage and optimize core on-premise infrastructure, ensuring stability and performance across server, storage, and identity services.
• Perform structured Root Cause Analysis (RCA) on major incidents to address systemic failures and prevent recurrence.

Enterprise Networking & Edge Security

• Provide expert configuration, management, and troubleshooting for complex L2/L3 networking, routing, switching, and secure WAN/VPN solutions.
• Administer and maintain enterprise-grade firewalls and wireless environments (e.g., Fortinet, Meraki), diagnosing sophisticated connectivity and edge security issues.

Security & Data Resilience

• Manage and test sophisticated backup and Disaster Recovery (DR) solutions (e.g., Veeam or Cove), ensuring verifiable data integrity and recovery readiness.
• Administer Endpoint Detection and Response (EDR), Email Security, and other advanced security platforms, ensuring continuous threat remediation and maintenance of a minimized attack surface.
• Collaborate with our dedicated security division on vulnerability management and continuous threat exposure management (CTEM) strategies.

Leadership & Service Discipline

• Lead the technical execution of complex client projects (migrations, deployments, upgrades) from planning through to delivery.
• Mentor L1 and L2 engineers, fostering a culture of technical excellence and structured troubleshooting.
• Maintain meticulous technical documentation, architectural diagrams, and Standard Operating Procedures (SOPs), adhering to formal change control processes for all production changes.
• Drive continuous service improvement by seeking opportunities to automate repetitive tasks using scripting and RMM tooling.

Minimum Requirements

We require an established professional with deep experience in the Managed Services space:

• Experience: Minimum of 5+ years operating at a dedicated L3 level within a Managed Service Provider (MSP) or a highly complex, multi-site enterprise environment.
• Certifications: Mandatory possession of CompTIA Network+ and ITIL Foundation certifications. Highly valued professional certifications include the Microsoft Certified: Enterprise Administrator Expert track, Azure Administrator, or similar high-level vendor qualifications (Fortinet, VMware, etc.).

Technical Expertise: Proven, expert-level administration of:

• Windows Server, Active Directory, and Group Policy management.
• Hyper-V and/or VMware virtualization platforms.
• The full Microsoft 365 suite, including Exchange Online, Intune, and Entra ID (Azure AD).
• Enterprise-grade firewalls (e.g., Fortinet) and complex routing/switching (L3 troubleshooting, VPNs).
• Modern backup and security platforms (EDR, Email Security).
• Logistics: Valid driver's licence and reliable transport is required for occasional client travel.

Personal Attributes

The ideal candidate is a structured problem-solver with a profound sense of ownership, who thrives in a fast-paced environment and possesses:

• Exceptional professional communication skills, especially when communicating complex technical issues to clients and executives.
• The ability to remain calm and methodical when handling high-pressure, major incidents.
• A structured approach to troubleshooting, strong follow-through, and a commitment to the principle that "done means documented."

Desired Skills:

• Engineering
• Systems engineering

Desired Work Experience:

• 5 to 10 years

Desired Qualification Level:

• Certificate

About The Employer:

About the Managed Service Provider

We are a leading South African Managed Service Provider (MSP) specializing in securing and optimizing complex digital environments. Our mission is to integrate resilient technology solutions that enable seamless operational efficiency for our demanding client base. We partner exclusively with medium-to-large corporate clients across high-compliance, high-stakes industries, including the Financial, Mining, and Chemical sectors. Our service model combines robust, 24/7 managed IT services with specialized cyber security expertise, ensuring our clients achieve both continuous operation and absolute digital resilience.