L3 Support Engineer

Babble Cloud

8d • Remote

About The Position

Babble is seeking a passionate and talented L3 Support Engineer to join their dynamic team. This is a senior, hands-on technical role focused on the implementation, configuration, and deployment of complex customer solutions, primarily centered around Microsoft Azure cloud infrastructure. The role extends across Modern Workplace, Cyber Security, Networking, and Backup/DR. As a Level 3 Engineer, you will be responsible for building and deploying solutions on complex, high-risk, and multi-domain projects, setting the technical standard for the team. You will also own the design phase, producing High-Level Designs, Low-Level Designs, and Statements of Work. The Solutions Architect is accountable for the technical quality from design through to deployment and handover, remaining hands-on throughout.

Requirements

• Extensive hands-on experience personally deploying and configuring production Microsoft Azure environments, including networking, identity, compute, Azure Virtual Desktop, migration and BCDR.
• Candidates will be expected to evidence solutions they built themselves, not only solutions they designed or oversaw.
• Proven scripting and automation capability in PowerShell, with working experience of Infrastructure as Code.
• Hands-on deployment experience across Modern Workplace, Cyber Security, Backup/DR and Networking, ideally including the Microsoft, Sophos, Mimecast and Acronis platforms.
• Demonstrable design authorship (High-Level Designs, Low-Level Designs and Statements of Work) and pre-sales technical experience.
• Track record of mentoring and raising the technical capability of a delivery team.

Nice To Haves

• Microsoft Certified: Azure Solutions Architect Expert (AZ-305), or its current Microsoft successor certification.
• Microsoft Certified: Cybersecurity Architect Expert (SC-100), or its current Microsoft successor certification.
• Microsoft 365 Certified: Administrator Expert (MS-102), or its current Microsoft successor certification.
• Sophos Certified Architect for Sophos Firewall and Sophos Central Endpoint/Server (each requires the corresponding Sophos Certified Engineer certification as a prerequisite).
• Acronis Certified Engineer (Cyber Protect).
• Mimecast Certified Product Professional, Advanced level (Email Security, Cloud Gateway).
• PRINCE2 7th Edition Practitioner, or equivalent project management certification (for example PMP or APM PMQ).
• ITIL 4 Foundation (or ITIL Version 5 Foundation) in IT service management.
• CISSP (ISC2), or equivalent senior security certification; CompTIA Security+ (SY0-701) is an acceptable foundational alternative.
• CrowdStrike Falcon certifications such as CrowdStrike Certified Falcon Administrator (CCFA) or Falcon Responder (CCFR), and familiarity with the Falcon Complete managed detection and response service.

Responsibilities

• Lead hands-on implementation on complex, high-risk or multi-domain projects including Azure Virtual Desktop deployments, complex network architectures, multi-tenant security configurations, hybrid identity environments, and large-scale migration programmes.
• Personally build, configure and deploy Microsoft Azure environments, including landing zones aligned to the Cloud Adoption Framework, management group and subscription structures, Azure Policy, RBAC and cost governance.
• Implement Azure networking, including hub-and-spoke topologies, VNet peering, Azure Firewall, NSGs, VPN Gateway, Private Endpoints, Azure DNS and hybrid connectivity to on-premises and branch sites.
• Deploy and configure identity and access solutions, including Microsoft Entra ID, hybrid identity (Entra Connect and Cloud Sync), Conditional Access and Privileged Identity Management.
• Deliver Azure Virtual Desktop and Windows 365 deployments end to end, including host pools, image management, FSLogix profile storage, scaling and security baselines.
• Plan and execute server, workload and data migrations to Azure using Azure Migrate and related tooling, including cutover, rollback planning and post-migration optimisation.
• Implement Azure backup and disaster recovery using Azure Backup and Azure Site Recovery, including recovery testing against agreed RTO and RPO.
• Configure security and monitoring across Azure and Microsoft 365, including Defender for Cloud, Defender XDR, Microsoft Sentinel, Azure Monitor and Log Analytics.
• Automate deployment and configuration using PowerShell, Azure CLI and Infrastructure as Code (Bicep, ARM and/or Terraform), and build reusable deployment templates for the team.
• Deploy and configure the wider Babble portfolio hands-on, including Microsoft 365 and Intune, Sophos Firewall and Sophos Central, Mimecast, and Acronis Cyber Protect.
• Act as the final technical escalation point during delivery, diagnosing and resolving complex configuration, integration and environment issues directly.
• Produce High-Level Designs and Low-Level Designs for customer solutions across Modern Workplace, Cyber Security, Network and Backup/DR domains, defining the technical architecture, configuration specifications, integration requirements, and dependencies that form the basis of all Professional Services delivery.
• Author Statements of Work that clearly define project scope, deliverables, assumptions, exclusions, acceptance criteria, and delivery milestones, ensuring commercial and technical alignment between what has been sold and what will be delivered.
• Provide technical guidance and design assurance throughout the delivery lifecycle, reviewing implementation progress against HLD/LLD specifications, validating configuration decisions made by fellow engineers and advising on deviations from the approved design where necessary.
• Act as a senior technical resource for the wider Professional Services team, providing guidance on design ambiguities, environment conflicts, vendor-specific technical issues, and scope boundary questions to support effective project delivery across all levels.
• Support pre-sales technical activities including customer scoping calls, solution qualification, technical feasibility assessments, and design input for proposals, ensuring opportunities are technically sound and deliverable before commitment to Statement of Work.
• Conduct technical design reviews with customers to validate requirements, confirm design assumptions, identify risks, and secure sign-off on the proposed solution architecture before delivery commences.
• Define and maintain technical standards, deployment checklists, configuration baselines, and design templates used across the Professional Services team, ensuring consistency and quality across all project deliveries.
• Validate UAT results and technical acceptance for projects where the Solutions Architect has produced the design, confirming that the delivered solution meets the specifications defined in the HLD/LLD and Statement of Work.
• Mentor and develop Level 1 and Level 2 engineers through technical guidance, design reviews, knowledge sharing and structured feedback, actively supporting career progression and capability uplift within the Professional Services team.
• Collaborate with the Support Desk, NOC, Product Managers, and Solution Leads to ensure solutions are designed for operational supportability, including monitoring requirements, escalation paths, documentation standards, and ongoing managed service compatibility.
• Identify and communicate project risks, design constraints and technical dependencies to Project Managers, the Solutions Delivery Manager and customers, providing clear recommendations and mitigation options to support informed decision-making.
• Lead post-implementation design reviews on complex projects, evaluating design effectiveness against delivery outcomes, capturing lessons learned and feeding improvements back into design standards and templates.
• Maintain expert-level technical skills and advanced vendor certifications across the Babble solution portfolio, attending vendor technical briefings, evaluating new product capabilities, advising on the evolution of the portfolio and staying current with platform roadmaps, architectural best practices and emerging technologies across Microsoft Azure, Microsoft 365, Mimecast, Sophos, Acronis and networking.

Benefits

• Risk cover; covering Life Cover, Critical Illness Cover, funeral benefits and some Disability benefits
• 22 days holiday Balance PLUS UK Bank Holidays - with increased annual leave based on length of service
• 5% allowance based on basic salary that can be towards Medical Aid.
• UPS provided to assist with load shedding (2-4hrs power for a laptop)
• Babble issued laptop
• Home-Working Policy

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed