Senior Systems Engineer

Role overview

Ratebay Care Technologies is seeking an experienced Senior Systems Engineer to join Mark Tennant's infrastructure team. This is a senior hands-on technical role managing our Edinburgh office infrastructure and supporting the clinical systems environments used by our NHS GP practice clients.

The successful candidate will take ownership of our Windows Server environment, including a number of legacy systems that cannot be immediately decommissioned due to application dependencies. A key part of this role will be maintaining service continuity on these legacy systems while supporting the longer-term plan to migrate to modern infrastructure.

Key responsibilities

• Day-to-day administration of our Windows Server 2019 and Windows Server 2022 domain environment (RATEBAY.LOCAL)
• Maintenance and support of legacy server infrastructure including LEGACY-CLIN-01 (Windows Server 2008 R2) — our primary legacy clinical system host — and associated SQL Server 2008 R2 instance
• Active Directory administration — user provisioning, group policy management, service account review and cleanup
• WSUS patch management — maintaining patch compliance across managed endpoints; managing the exclusion of legacy systems that cannot accept patches
• Veeam Backup & Replication administration — backup job management, restore testing, tape rotation coordination
• Network administration support — VLAN management, firewall rule review with our ClearConnect partner, Cisco Meraki wireless management
• Splunk log review and alert triage during business hours
• Helpdesk escalation support — second and third-line escalation for the helpdesk team
• Coordination with ClearConnect Systems for out-of-hours maintenance and incident response

Technical environment

The successful candidate will work with the following technology stack:

• Domain: RATEBAY.LOCAL — Windows Server 2022 domain controllers (rcare-dc-01, rcare-dc-02)
• File servers: RCARE-FS-01, RCARE-FS-02 — Windows Server 2019 with DFS namespace
• Legacy: LEGACY-CLIN-01 — Windows Server 2008 R2 SP1, SQL Server 2008 R2 — no vendor patches available; compensating controls in place
• Backup: RCARE-BKP-01 — Veeam Backup & Replication, weekly tape offsite
• Monitoring: RCARE-SIEM-01 — Splunk Enterprise
• Network: FortiGate 200F (perimeter), Cisco Meraki (wireless), Cisco C9300 (core switching)
• Third-party: ClearConnect Systems — remote VPN access for infrastructure support; persistent tunnel always-on
• Printers: HP LaserJet Enterprise fleet (×6 corporate) — note: 3 units currently using default web management credentials pending schedule change; Ricoh MP C307 (×2 clinical)

Essential requirements

• 5+ years Windows Server administration in a corporate environment
• Active Directory, Group Policy, DNS and DHCP
• Experience supporting end-of-life Windows Server versions in regulated environments
• Veeam Backup & Replication — including restore testing and DR planning
• Networking fundamentals — VLANs, routing, firewall ACLs
• Strong documentation habits — all changes must be logged in our ITSM system

Desirable

• Microsoft Azure and Entra ID — we are beginning a cloud migration programme
• Splunk or equivalent SIEM experience
• Healthcare IT background — NHS experience particularly valued
• FortiGate firewall administration