IT Infrastructure Engineer

Company Description

ENODA’s world-class team are building the first truly decentralised, intelligent energy system that will reshape how we generate, store, and distribute energy.  

Foundational to our holistic and integrated platform approach, the Enoda PRIME® Exchanger is a first-of-a-kind dynamic power flow hardware designed to maintain “on-target” frequency and voltage, increasing grid efficiency and capacity for distributed energy sources like renewables and EVs.  

Enoda ENSEMBLE™ is our ecosystem co-ordinator of ENODA and third-party assets, able to forecast, aggregate, and bid capacity in real time, functioning as a networked “operating system” for the electrical grid.  

This is more than simply managing electricity flow. It is about creating the foundational system to prepare for a radically more capable, prosperous, and intelligent future. 

Check out our YouTube channel to learn more about us: http://www.youtube.com/@enoda_ltd 

Job Description

We have an opportunity for an experienced IT Infrastructure Engineer to join our business as we continue to scale. 

This is a hands-on role to build, run and improve ENODA’s IT infrastructure, working alongside and reporting to our Senior IT Infrastructure Engineer. Together you will look after the systems that ENODA’s engineers, operations and manufacturing teams rely on every day: Microsoft 365 and Entra ID, Azure, Windows and macOS devices, site networks and firewalls, and backup. Every critical system has a primary owner and a trained second, so that nothing depends on one person, and you will cover for each other during leave. 

You will also help deliver IT infrastructure for new sites, starting with the build-out of our Shawfair Technology Facility, and make sure each site is documented, monitored and secure from day one.

This role suits someone who enjoys practical engineering, leaves systems better documented than they found them, and wants to grow in a small, busy team where their work is visible. 

Position Objectives & Areas of Responsibility:

• Operate and improve ENODA’s Microsoft 365 and Azure estate, including Azure networking (virtual WAN, Azure Firewall and VPN) and backup 

• Manage identity and access in Entra ID: Conditional Access, Privileged Identity Management, and the IT steps of joiner, mover and leaver changes 

• Manage Windows and macOS devices with Intune, Jamf Pro and ManageEngine Endpoint Central, including patching, compliance and certificate deployment 

• Run site networks, firewalls and wireless (UniFi), including the retirement of legacy firewalls and network changes at new sites 

• Help design and deliver IT infrastructure for new sites, starting with the Shawfair Technology Facility, from installation to documented handover, including segmentation of corporate, production and building networks designed with OT security specialists 

• Keep accurate documentation (network diagrams, as-built and configuration records, runbooks and standard builds) so that every critical system has a trained second engineer 

• Make infrastructure changes through ENODA’s change control process, including the firewall rule lifecycle, with clear records and rollback plans 

• Run backups and restore tests, and track certificates, tokens and licences so they are renewed before they expire 

• Make sure infrastructure and network logs reach security monitoring (Microsoft Sentinel), working with the security team 

• Automate routine work with PowerShell and Microsoft Graph to reduce manual effort and error 

• Act as an approver for privileged access within the agreed separation of duties, and cover for the Senior IT Infrastructure Engineer during leave 

• Support incident response, root cause analysis and continuous improvement, including occasional out-of-hours change windows 

Qualifications

• Three or more years of hands-on experience in IT infrastructure engineering.

• Solid experience administering Microsoft 365, Entra ID (including Conditional Access) and expertise on Azure infrastructure. 

• Experience of firewalls, site networking, VPNs and wireless across more than one site. 

• Endpoint management for Windows and macOS with Intune and/or Jamf. 

• PowerShell scripting (Microsoft Graph an advantage) and disciplined change control.

• Good understanding of infrastructure security: least privilege, hardening, logging, patching and experience on NMS.  

• Experience working within ISO 27001, Cyber Essentials or similar frameworks.

• Clear, careful documentation habits.

• Strong troubleshooting across networks, identity and devices.

• Clear communication with engineers, site teams and non-technical colleagues, and comfortable working in a small team.

Advantageous certifications: 

• AZ-104 (Azure Administrator) or AZ-305 

• MD-102 (Endpoint Administrator) 

• CCNA or an equivalent networking certification 

The following would be advantageous: 

• Experience supporting manufacturing, laboratory or Operational Technology (OT) environments, including IT/OT segmentation (ISA-95 / Purdue model, IEC 62443). 

• Experience with UniFi, Fortinet or Azure Firewall.

• Hands-on experience configuring, deploying and supporting SD-WAN and MPLS networks, with a strong understanding of dynamic routing protocols such as BGP. 

• Backup platforms such as Veeam, and certificate services such as SCEPman. 

• Google Cloud Platform administration, and compliance tooling such as Vanta. 

• Experience building IT for a new site or office, or supporting engineering-led or deep-tech organisations.

Additional Information

• Highly competitive salary: £50K - £60K aligned with skills & experience
• Private Medical Insurance
• Enhanced Parental Leave
• Flexible Pension policy tailored to your requirements
• 33 days annual leave + Holiday purchase/sell scheme
• Dental cash-back scheme
• Cycle-to-Work scheme
• Season travel ticket loan
• Enhanced company sick pay & Income Protection
• Life Assurance

Interview process: 

• Introductory video call with Talent Acquisition
• 2nd stage interview with Hiring Panel & Ambassador (Virtual)
• Final stage interview with Hiring Panel (In-Person or Virtual)