IT Infrastructure Engineer

Role/Vacancy

IT Infrastructure Engineer

Location

Cape Town (Head Office)

Employment type

Full-Time

Work Policy

Hybrid

Who is GENFIN?

GENFIN is a proudly South African business that enables and supports businesses with flexible funding solutions, allowing them to unlock growth for sustainable success. We understand the needs of businesses and that access to affordable finance is critical for the growth, sustainability, and operation of any business.

We are backed by the GENFIN Holdings Group, an investment company specializing in SME and consumer lending in South Africa and the United Kingdom. Other strategic funding partners include RMBSanlam InvestmentsAshburton Investments and STANLIB.
Click here to read more about us

Position Overview

To ensure the stable, secure and efficient operation of a Microsoft-centric IT environment that supports business continuity, regulatory confidence and reliable day-to-day operations. The role is responsible for maintaining, supporting and improving core infrastructure services across Microsoft 365, email, telephony, Sophos firewall, VPN, Wi-Fi, Cloudflare, endpoints, servers and vendor-managed platforms.

To ensure hands-on, disciplined troubleshooting, secure configuration management, clear technical documentation and proactive supplier coordination that deliver dependable infrastructure services and practical operational improvements.

The role supports the progression of an experienced IT Support Technician into broader infrastructure ownership and operational responsibility.

Infrastructure Operations & Endpoints

  • Maintain Windows Server, Windows 11 endpoints, Active Directory / Entra ID, DNS, certificates, endpoint builds and core infrastructure services.
  • Perform routine checks for availability, patching, backups, storage, security tools, monitoring alerts and service health.
  • Troubleshoot incidents from diagnosis to resolution or escalation, with clear updates and accurate support records.

 

Network, Sophos Firewall, VPN & Wi-Fi

  • Support LAN/WAN, Wi-Fi, VPN, Sophos firewall rules, NAT, IPsec/remote access connectivity, routing, DHCP and TCP/IP troubleshooting.
  • Monitor and investigate office, cloud, internet, supplier and user connectivity issues, including secure remote access failures.
  • Maintain network diagrams, firewall/VPN/Wi-Fi change notes, access records and connectivity runbooks.

 

Microsoft 365, Identity & Email Infrastructure

  • Administer Microsoft 365 users, groups, licensing coordination, MFA, shared mailboxes, distribution lists and access requests.
  • Support Exchange/email delivery, email-security controls, phishing/spoofing/spam investigations and vendor escalations.
  • Maintain secure onboarding/offboarding, permission changes and identity-related documentation.

 

Telephony, Cloudflare & Security Services

  • Support telephony users, call routing, handsets/softphones, provider tickets and telephony availability checks.
  • Support Cloudflare DNS, proxy, SSL/TLS, WAF/security rules, domain records and approved configuration changes.
  • Assist with suspicious-activity investigation, audit evidence, cyber-insurance requests and POPIA-aligned information-security controls.

 

Governance, Vendors & Continuous Improvement

  • Document infrastructure designs, SOPs, runbooks, incidents, changes, risks, supplier details and escalation paths.
  • Coordinate external providers for Microsoft, email, firewall, network, telephony, Cloudflare, cloud hosting, endpoint and backup services.
  • Recommend practical improvements that improve stability, security, monitoring, recoverability and user experience without over-engineering.

Technical/Business Competence

  • Microsoft 365, Exchange/email, Windows Server, Windows 11, Active Directory/Entra ID, endpoint administration and access-control fundamentals.
  • Sophos firewall, VPN, Wi-Fi, DNS, DHCP, TCP/IP, routing and practical network troubleshooting capability.
  • Telephony support, Cloudflare DNS/security administration, monitoring, backup checks, endpoint security and incident-management discipline.
  • Clear documentation, supplier coordination, SLA follow-up, user communication, change-control awareness and secure handling of business information.
  • Advantageous: PowerShell, SQL Server/Power BI infrastructure awareness, Zabbix or similar monitoring, POPIA/control evidence experience.

 

Behavioural Competence

  • Applying Expertise and Technology – applies technical knowledge practically and learns unfamiliar services quickly.
  • Analysing – investigates incidents logically across users, endpoints, network, identity, email and suppliers.
  • Delivering Results and Meeting Expectations – follows through on incidents, maintenance and improvement tasks.
  • Planning and Organising – documents clearly, prioritises well and follows change/approval processes.
  • Working with People – communicates professionally with users, managers, vendors and technical colleagues.

Minimum Formal Qualifications and Training

  • NFQ Level: 5
  • Relevant certificate, diploma, degree or equivalent practical experience in Information Technology, Network Engineering, Systems Administration or a related discipline.
  • Microsoft, CompTIA, networking, Sophos, security, Cloudflare or ITIL certifications/studies are advantageous.

 

Minimum Work Experience

  • 2 to 4 years practical experience in IT support, desktop support, network support, systems support or a similar technical role.
  • Experience supporting Microsoft-based environments, including Windows endpoints, Windows Server, Active Directory/Entra ID, Microsoft 365, email, basic networking and vendor-managed services.
  • Readiness to progress into infrastructure administration with broader ownership, stronger documentation and disciplined escalation.

Interested in this position? Submit your details and resume

"*" indicates required fields

If someone referred you to this vacancy, please leave their name.
Accepted file types: pdf, doc, docx, Max. file size: 50 MB.
Accepted file types: pdf, doc, docx, Max. file size: 50 MB.