About the Role
We are seeking an experienced NOC Services Engineer to take ownership of monitoring, alert management, incident assessment, and continuous improvement across multiple client environments. This role is suited to a strong L2–L3 engineer who can confidently distinguish genuine incidents from false positives, prioritise issues based on business impact, and identify opportunities to automate recurring remediation.
You will play an important role in strengthening an in-house NOC capability by improving monitoring standards, reducing unnecessary alert noise, enhancing operational processes, and increasing the use of safe automation across infrastructure environments.
About the Client
You will be working with an established Australian managed services provider delivering secure, reliable, and cost-effective technology solutions to businesses with complex IT environments. The organisation has built a strong reputation for technical expertise, professional service delivery, and helping clients maintain the availability, integrity, performance, and security of their technology platforms.
Ideal Profile
Experience & Technical Capability
- Minimum 3 years of MSP NOC or infrastructure experience.
- Strong L2–L3 capability with the technical judgement to independently assess infrastructure alerts and incidents.
- Strong understanding of Windows infrastructure and Windows Event Logs, including the ability to distinguish actionable events from informational noise.
- Hands-on Microsoft 365 administration experience across Entra ID, Exchange Online, and Conditional Access.
- Strong Windows Server administration skills covering Active Directory, DNS, DHCP, Group Policy, and Certificate Services.
- Solid networking fundamentals, including TCP/IP, DNS, DHCP, VLANs, site-to-site and client VPNs, and firewall rule interpretation.
- Hands-on virtualisation experience with Hyper-V or VMware.
- Practical experience with monitoring and alerting platforms, threshold management, prioritisation, and escalation.
- Strong PowerShell scripting capability, including writing scripts for administration, troubleshooting, automation, and remediation.
- Familiarity with vulnerability remediation, CVEs, and CVSS.
- Experience with backup operations and restore testing.
- Understanding of patch management, endpoint security, and infrastructure health monitoring.
- Proven ability to manage multiple concurrent alerts and incidents based on severity and business impact.
Essential Tools & Systems
- Kaseya / Datto RMM.
- Microsoft 365 Administration.
- Microsoft Entra ID, Exchange Online, and Conditional Access.
- Windows Server and Active Directory.
- DNS, DHCP, Group Policy, and Certificate Services.
- Windows Event Logs and infrastructure monitoring.
- PowerShell.
- TCP/IP, VLANs, VPNs, and firewall rule bases.
- Hyper-V or VMware.
- RMM and infrastructure monitoring platforms.
- PSA / ticketing systems.
- Patch management.
- Backup operations and restore testing.
- Endpoint security, AV, and EDR monitoring.
- Vulnerability remediation and CVE/CVSS concepts.
- Infrastructure automation and automated remediation.
Preferred / Nice to Have
- Autotask.
- Fortinet / FortiGate.
- Microsoft Defender.
- Veeam Backup & Replication.
- Cisco networking technologies.
- Nutanix.
- Citrix environments.
- Syslog and SIEM platforms.
- Rewst or similar automation/orchestration platforms.
Soft Skills
- Strong written and verbal communication skills.
- Strong analytical judgement and structured problem-solving ability.
- Ability to prioritise effectively in a fast-moving, multi-client environment.
- Proactive approach focused on preventing issues rather than only reacting to them.
- Comfortable working autonomously and taking ownership of outcomes.
- Collaborative mindset with sound judgement around when to escalate or seek guidance.
- Strong attention to detail when assessing alert relevance and severity.
- Improvement-focused mindset with a willingness to challenge inefficient processes and recommend better approaches.
Responsibilities
Core Responsibilities
- Monitor and assess alerts across multiple client systems, infrastructure platforms, and monitoring tools.
- Determine alert severity, business impact, and whether events represent genuine incidents, recurring issues, false positives, or informational noise.
- Prioritise concurrent alerts and ensure critical issues receive appropriate attention.
- Escalate incidents to the appropriate technical resources when deeper investigation or remediation is required.
- Reduce unnecessary alert noise by refining thresholds, monitoring logic, and alerting practices.
- Develop and maintain role-based monitoring across servers, endpoints, network devices, and security systems.
- Use PowerShell and automation to remediate suitable recurring issues and reduce manual intervention.
- Monitor Windows Event Logs, system health, CPU usage, disk utilisation, services, and other infrastructure conditions.
- Proactively monitor endpoint security tooling and ensure required AV/EDR solutions remain appropriately deployed, configured, and current.
- Monitor patch compliance across Windows endpoints and relevant macOS devices.
- Monitor backup activity and identify failed or abnormal jobs requiring investigation or escalation.
- Improve monitoring, logging, and alerting across RMM, PSA, and related infrastructure platforms.
- Collaborate with senior infrastructure resources when investigating complex technical issues.
- Document monitoring improvements, remediation activities, and operational processes.
- Identify opportunities to automate recurring operational tasks.
- Contribute to broader infrastructure and technology initiatives as the NOC capability matures.
Success Measures
- Accurately identify and prioritise genuine alerts while reducing false positives and informational noise.
- Improve the consistency and effectiveness of monitoring across client environments.
- Ensure incidents requiring additional technical intervention are escalated appropriately and promptly.
- Increase the use of safe automation for repeatable remediation activities.
- Maintain effective oversight of patching, endpoint security, backups, and infrastructure health.
- Proactively identify monitoring gaps, recurring issues, and opportunities for continuous improvement.
- Demonstrate increasing ownership of the NOC environment while maintaining strong collaboration with technical stakeholders.
How we take care of our team
💰 Get paid in Australian Dollars
🏥 Medical insurance from day one for you + spouse (or parents if unmarried)
🩺 Generous OPD coverage from doctor visits to all your medical needs
🏡 Home office setup allowance to build your ideal workspace
🌐 Internet allowance to keep you connected
💪 Gym & wellness allowance to stay fit and balanced
🎉 Work hard, play hard – regular team events & engagement activities
🧠 Diji Assist – Mental health & counseling support when you need it
📚 We invest in you – reimbursement for industry certifications
🗣️ Open-door culture – your ideas and feedback always matter
🌍 Flexible work – home or office, wherever you do your best work
🏆 Rewards & recognition that actually recognize you
🥳 Great christmas & financial year-end parties to unwind with your loved ones
