Senior Infrastructure Engineer
Cardiff, UK
PMUK's Information Systems department is looking for an experienced and strategic Senior Infrastructure & Microsoft 365 Engineer to take ownership of PMUK's core IT services and enterprise infrastructure. This is a hands on technical leadership role combining deep expertise in Microsoft 365, Azure, security, and infrastructure with responsibility for strategy, governance, and service delivery. The position plays a key role in modernising the workplace, enhancing security posture, and driving automation and data governance across the organisation.
WHAT YOU WILL BE DOING Technical Leadership & Strategy
- Act as the technical lead for infrastructure and Microsoft 365 services.
- Define and deliver the infrastructure and modern workplace strategy.
- Provide mentorship and escalation support to technical teams.
- Ensure systems are secure, resilient, scalable, and future ready.
Microsoft 365 Administration & Governance
- Own and manage the Microsoft 365 tenant (Global Administrator level).
- Administer core services, including:
- Microsoft Entra ID (Azure AD) - identity and access management.
- Microsoft Defender Suite - Endpoint, Identity, Office 365, Cloud Apps.
- Microsoft Purview - data governance, DLP, retention, and eDiscovery.
- Implement and maintain security, compliance, and governance controls.
- Manage Conditional Access, MFA, and privileged access strategies.
Power Platform & Automation
- Lead development and governance of Power Automate workflows and Power Apps solutions.
- Drive adoption of low code automation across the business.
- Implement standards, controls, and scalable automation frameworks.
SharePoint & Modern Workplace
- Lead migration from SharePoint on premise to SharePoint Online.
- Define migration strategies, including content rationalisation and metadata and taxonomy design.
- Promote modern collaboration tools, including Microsoft Teams, OneDrive, and SharePoint Online.
Data Governance & Compliance
- Establish and maintain data governance frameworks.
- Implement metadata tagging and classification and data lifecycle and retention policies.
- Ensure compliance with GDPR/Data Protection requirements.
- Support data audits, DPIAs, and data sharing agreements.
Infrastructure Ownership & Management
- Network Infrastructure: LAN/WAN, switching, firewalls, and connectivity.
- Server & Cloud Platforms: Hybrid environments (on premise and Azure), and virtualisation (Hyper V).
- End User & Device Management: Microsoft Intune/Endpoint Manager, Autopilot and device lifecycle management.
- Telephony & Communications: VoIP and unified communications platforms.
- Physical Security Systems: CCTV and access control systems.
Cyber Security & Architecture
- Design and enhance enterprise security architecture.
- Contribute to Zero Trust strategy and implementation.
- Lead improvements across Microsoft Sentinel, Microsoft Defender ecosystem, and identity and access controls.
- Support security reviews, audits, and risk mitigation.
Support & Operations
- Provide 3rd line support and escalation.
- Oversee system upgrades, patching, and maintenance.
- Maintain clear and accurate technical documentation.
- Ensure successful transition of projects into operational support.
Project Delivery & Service Improvement
- Lead full lifecycle delivery: Discovery Design Build Test Deploy.
- Ensure quality, risk management, and timely delivery.
- Drive standardisation, automation (e.g. PowerShell), and continuous service improvement.
Leadership & Collaboration
- Act as a visible technical leader across IT and the business.
- Mentor and develop team members.
- Work closely with stakeholders to align IT with business needs.
- Promote knowledge sharing and continuous learning.
WHAT WE ARE LOOKING FOR Essential Requirements
- Degree in Computer Science or a related field (or equivalent experience).
- Proven experience in a senior/lead infrastructure or M365 role.
- Strong expertise in Microsoft 365 (including Defender & Purview) and Microsoft Entra ID (Azure AD).
- Hands on experience with Power Platform (Power Apps & Power Automate) and SharePoint migrations (on prem online).
- Strong knowledge of hybrid infrastructure (Azure + on prem), networking and firewalls, virtualisation (Hyper V), and endpoint management (Intune).
- Experience implementing data governance and compliance frameworks.
- Where it may be required for a visa application - Advanced English, e.g. English Level B2 or equivalent.
Desirable Requirements
- PowerShell scripting and automation.
- Experience with Microsoft Intune and Autopilot, Azure Virtual Desktop, and Microsoft Sentinel.
- Knowledge of standards such as ISO 27001 and GDPR/Data Protection frameworks.
- Relevant Microsoft certifications (e.g. MS 102, SC 200, SC 400, PL 900).
Personal Attributes
- Strong leadership and decision making skills.
- Strategic mindset with a hands on approach.
- Excellent communication and stakeholder engagement.
- Highly organised with strong attention to detail.
- Proactive, security first mentality.
- Passion for continuous improvement and emerging technologies.
WHAT WE OFFER YOU Working Hours: 07:45 - 16:30 Monday - Thursday, 07:45 - 13:30 Friday.
- Flexi time system.
- Company pension contributions of up to 10 %.
- Early finish on Friday.
- Free parking on site.
- Annual leave entitlement of 24 days (+ bank holidays), increasing up to 30 (+ bank holidays) with service.
- Death in service benefit of 4 annual salary.
- Enhanced pay for maternity, paternity, bereavement, adoption, surrogacy, and sickness.
- Employee Assistance Programme.
- Long Service Awards.
- On site canteen.
- Exclusive "Staff Sales" site for Panasonic products.
- Training and development opportunities.
- "Refer a Friend" recruitment scheme.
DIVERSITY, EQUITY AND INCLUSION
Panasonic is committed to creating a safe and inclusive workplace, promoting fairness and equality. All qualified applicants receive consideration for employment without regard to race, religion, sex, sexual orientation, gender identity, or disability.