Servers & virtualization Windows Server estate and VMs (Hyper-V/VMware): provisioning, hardening, patching, monitoring, capacity and decommissioning.
Databases (Microsoft SQL Server) backups, restores and recovery testing, performance tuning, security and permissions, SQL Agent jobs and SSIS packages; server-side support for Sage 100 and PRIMS.
Backup & disaster recovery documented 3-2-1 strategy with an immutable/offline copy, defined RPO/RTO, quarterly restore tests and an annual DR exercise.
Identity, endpoints & productivity Active Directory and Entra ID hybrid identity, Microsoft 365, Intune for PCs, phones and tablets, Conditional Access and MFA.
Network, plant floor & facilities switches, firewalls, Fortinet ecosystem, VPN, Wi-Fi and cabling; VoIP, cameras and access control; label printers, scanners, scales and terminals.
Security & compliance manage /own security program aligned to CIS Controls; MFA, EDR, patch and vulnerability management, incident response; IT evidence for SQF and customer audits.
Monitoring, performance & capacity own the monitoring platform, tune alerts, establish baselines, measure the impact of changes, and maintain a 12 18 month capacity forecast.
Automation & engineering practice automate repeatable work in PowerShell, keep scripts and configuration in Git, and treat infrastructure as code where practical.
Planning, projects & leadership own vendor relationships and renewals, plan and deliver infrastructure projects end to end, maintain documentation and SOPs, and coach junior or contract staff.
What We're Looking For
Required
3 years in systems administration, including 1 years with full responsibility for SQL Server and server infrastructure, and 3 years leading projects, vendors or people (or equivalent demonstrated responsibility).
Experience in a small IT team where you owned problems end to end.
Windows Server & virtualization: Active Directory, Group Policy, DNS/DHCP, Hyper-V or VMware.
SQL Server: backup/restore including point-in-time, recovery models, security, T-SQL, SQL Agent, SSIS, and performance fundamentals.
Backup & disaster recovery: you've designed a strategy with an offline/immutable copy and performed a real restore under pressure not just scheduled the job.
Identity & Microsoft 365: Entra ID hybrid identity, Exchange Online, Intune for Windows/Android/iOS, Conditional Access and MFA.
Web hosting: IIS, DNS and TLS certificate administration.
Experience supporting vendor-built business applications in production, including the business process behind them.
Automation: PowerShell scripting with proper error handling and logging; Git for scripts and configuration.
Security: MFA, EDR, patch and vulnerability management, incident response; familiarity with CIS Controls or a comparable framework, own the programm of penetration protection/detection within the company infrastructure, be the part of the team to conduct yearly penetration stress test , document findings and recommendation implantation
Strong prioritization, follow-through, and clear written documentation.
Preferred / Nice to Have
Sage 100 or a comparable ERP; PRIMS or another production/inventory (MES) system.
Manufacturing, food production or distribution environment; exposure to SQF or similar audits.
SQL Server high availability (Availability Groups, log shipping); Azure fundamentals.
VoIP, camera and access-control systems; cPanel/Linux hosting basics.
Certifications such as AZ-800/801, AZ-104, MS-102, Security , CCNA, or ITIL 4 Foundation.
