The ideal candidate will have a strong background in deployment, administration and support for Azure cloud environments and hybrid setups, with specific expertise in Intune, hybrid Active Directory, DevOps, Data Management, and Microsoft 365. This role requires an individual who can manage application provisioning, identity and access management, and provide expert support for M365 and SharePoint.

The successful candidate will work closely with the IT Officer – Infrastructure & Service Desk to develop and operationalize a robust and scalable identity and access management mechanism for both EA and hosted staff. The candidate will support the IT Officer – Infrastructure & Service Desk to streamline rollout of end-point solutions via tools such as Intune. He/she will also be responsible for reporting on device compliance and advising the infrastructure team accordingly. 

With a cloud-first mentality, the ideal candidate is expected to champion Azure and cloud technologies as the platform of choice for new workloads and solutions. On this front, the candidate shall offer support to the application team in application provisioning, instance provisioning, access management via SSO, packaging via Intune, password management, data/database management, backup management, etc. 

In addition to technical expertise, the ideal candidate will be a proactive advocate for modern workplace solutions. This involves driving the adoption of cloud-based tools and technologies that enhance productivity, collaboration, and efficiency across the organization. The candidate will lead initiatives to implement and support modern workplace solutions, such as Microsoft Teams for seamless communication and collaboration, and Microsoft 365 for integrated office applications and services. By promoting and facilitating digital transformation, the candidate will help foster a culture of innovation and adaptability, ensuring that our workforce is equipped with the latest tools to work effectively in both remote and hybrid environments. Together with your Infrastructure & Service Desk counterpart, your role is pivotal in ensuring that our IT infrastructure supports a dynamic and evolving workplace, empowering employees to achieve their best work from anywhere.

Security and compliance are paramount in our IT operations, particularly in the context of systems and Microsoft Azure. The ideal candidate will collaborate closely with the IT Officer – Infrastructure & Service Desk to ensure that security protocols are robustly implemented across all endpoints and cloud environments. This includes deploying and supporting security solutions such as Microsoft Azure Sentinel SIEM Security and Microsoft Defender suite to protect our systems against threats. The candidate will be responsible for conducting regular security audits and assessments, ensuring compliance with organizational policies and standards, and implementing best practices for data protection and privacy. By working together with the infrastructure team, the candidate will help to maintain a secure IT environment, safeguarding our digital assets and ensuring the integrity and confidentiality of our data. This collaboration will ensure that all security measures are properly enforced and that our IT infrastructure remains resilient against evolving cybersecurity threats.

The Engineer will work with the EA IT team, MSF SITS, other MSF sections, relevant working groups/platforms and external vendors to come up with strategies and solutions that will enhance the impact of MSF’s operations.

This position will be hierarchically and functionally accountable to the Coordinator, IT & Facilities Unit

Systems Management - Azure Cloud & Hybrid Environment

• Design and implement Azure infrastructure, including virtual networks, storage accounts, and virtual machines.
• In collaboration with the IT team, implement and co-manage hybrid Active Directory environments, ensuring seamless integration between on-premises and cloud instances.
• Perform regular system updates and patch management to ensure systems are up-to-date and secure.
• Facilitate, monitor, and control remote access to the servers and end points.
• Collaborate with other MSF sections on opportunities for interoperability that will benefit the hosted staff.
• Develop and automate infrastructure tasks using PowerShell or other scripting languages.
• Identify and recommend appropriate technologies tailored to specific digitization initiatives.
• Identify and implement cost optimization opportunities for our cloud workloads.
• Implement automated infrastructure provisioning and management by Leveraging tools like Azure Resource Manager (ARM) templates, Terraform, and Bicep.

DevOps, Data and Application Integration

• Manage source code repositories using Git and Azure Repos. Implement, configure and manage build and release pipelines, ensuring automated testing and deployment processes by leveraging tools like Azure DevOps.
• Implement field data integration and ETL processes using Azure Data Factory and Azure Synapse Analytics.
• Implement futuristic solutions by leveraging Azure AI and Machine Learning services, IoT solutions, and advanced analytics.
• Manage integrations between the AD and third-party applications. Advise on security in this regard.
• Design, develop, test, and deploy cloud-native applications and services.
• Develop APIs and integrate third-party services into cloud solutions.

Identity and Access Management

• In collaboration with the IT team, develop and operationalize a robust and scalable identity and access management mechanism for both EA and hosted staff.
• Manage application provisioning, instance provisioning, and access management via Single Sign-On (SSO).
• Ensure secure identity management practices, including password management and self-service password reset.
• Together with the IT team, develop an identity approach for hosted staff in consultation with other sections.

Intune and Endpoint Management

• Support the rollout of endpoint solutions via tools such as Intune.
• Create and manage compliance and configuration policies in Intune to manage all devices (apps, updates, software, and security).
• Report on device compliance and advise the infrastructure team accordingly.
• Develop a mechanism for managing devices for hosted staff.

Modern Workplace Initiatives

• Champion modern workplace technologies and practices to enhance productivity and collaboration.
• Drive the adoption of cloud-based solutions and tools that support remote and hybrid working environments.
• Implement and support tools such as Microsoft Teams for communication and collaboration.
• Support Microsoft 365 and SharePoint environments, ensuring optimal performance and user adoption.
• Promote and facilitate digital transformation initiatives within the organization.

Security and Compliance

• Deploy and support security solutions such as Microsoft Defender for Cloud, XDR, Azure Sentinel SIEM Security and Purview.
• Implement and manage security protocols to protect cloud and hybrid environments.
• Conduct regular security audits and assessments to ensure compliance with organizational policies and standards.
• Spearhead Microsoft Azure, Modern Workplace, and security & compliance projects.
• In collaboration with the IT team, implement and manage security protocols to safeguard the organization's IT infrastructure.
• Conduct regular security assessments and audits to identify vulnerabilities and recommend improvements.
• Ensure compliance with relevant regulatory requirements and organizational policies.

Backup and Recovery

• Develop and implement backup and disaster recovery plans to ensure data integrity and availability.
• Perform regular backups and test recovery processes to verify the effectiveness of backup systems.
• Manage storage solutions and ensure adequate capacity for data storage and archiving.

Documentation and Reporting

• Maintain accurate documentation of system configurations, procedures, and IT policies.
• Generate regular reports on system performance, security incidents, and other key metrics.
• Develop and maintain IT operational manuals and guides for system administration tasks.

Technical Support - Provide 2/3rd level support.

Team Leadership & Collaboration

• Work closely with cross-functional teams to ensure the successful implementation and support of IT initiatives.
• Relieve the Infrastructure & Service Desk team lead on the following duties.
• • Network administration.
  • Service Desk supervision.
  • Any other critical duties required for business continuity.

Working Conditions:

• This role may require occasional evening or weekend work to perform system maintenance or address urgent issues. Physical demands include the ability to lift and move computer equipment.

Education & Experience

• Bachelor’s degree in computer science, Information Technology, Electrical Engineering, or related discipline.
• 3-5 years’ experience in the deployment and administration of Modern Workplace & Security solutions.
• Proven experience with Intune, hybrid Active Directory, and Microsoft 365 administration.
• Relevant certifications such as Microsoft Certified: Azure Administrator Associate, Modern Desktop Administrator Associate, and Microsoft Endpoint Manager certifications. Azure Solutions Architect Expert or Microsoft Certified: Security, Compliance, and Identity Fundamentals.
• In-depth knowledge of Azure Active Directory, Conditional Access, MDM, Microsoft 365 Services, PowerShell, and Power Automate.
• Experience with endpoint management technologies including Windows Autopilot, Apple Business Manager, and Android Enterprise.
• Basic understanding of networking concepts, protocols, and services, including VPNs, DNS, DHCP, and firewalls.
• Strong analytical skills and the ability to troubleshoot complex technical issues effectively.
• IT infrastructure support experience is desirable.
• Excellent communication and interpersonal skills for effective collaboration with cross-functional teams and stakeholders.
• Strong project management skills to lead initiatives and drive digital transformation efforts.
• Familiarity with industry standards and compliance frameworks.
• A strong customer service orientation to effectively support end-users and ensure a smooth operational flow.
• Proficiency in scripting languages (e.g., PowerShell, Python) for automation tasks beyond basic infrastructure management.
• Proficiency in programming languages such as Python, Java, .NET, or JavaScript.
• Strong understanding of RESTful APIs, web services, and cloud SDKs.
• Familiarity with DevOps tools and practices.

• Technical Competencies
• • Team player, autonomous, you are passionate about technology, and like to address complex technical challenges.
  • Great at organizing, prioritizing and multitasking.
  • You can adapt to recent technologies, eager to learn and a strong troubleshooter.
  • You are flexible to implement changes while reducing the impact on the activity of our users; working occasionally out of office hours is not an issue.
  • You want to keep learning; you are open to sharing your ideas, knowledge, and experience.
• Behavioral/General Competencies
• • Languages: good command of English is required.
  • Knowledge of other international languages (French, Spanish, Arabic…) is an asset
  • Commitment to MSF’s principles
  • Results and quality orientation
  • Service orientation

• A 6 months renewable, full-time employment contract through MSF East Africa Section Office in Nairobi, Kenya.  

• An annual salary of EUR 23,296 at HQ Level 7 based on a full-time appointment.

• Social benefits package; allowances ranging between EUR 188 to 295/month based on individual & administrative status.  

• Other benefits include; 25 days of annual leave, Employer Pension contribution and medical insurance cover (staff and family) based on MSF EA terms/conditions.