Hiring for Senior System Engineer

Perform all responsibilities of Systems Support Engineers and Systems Administration support for the following:

1. Directory Services Management

. Administer Microsoft Active Directory, Azure AD, Azure AD B2C, AWS AD, Huawei AD

. Create/update/deploy GPOs

. Promote/demote Domain Controllers

. Conduct AD health monitoring

2. Cloud Administration

. AWS: EC2, S3, Lambda, CloudWatch, IAM, Workspaces, SNS, Certificate Manager, FSx, Storage Gateway

. Azure: Azure AD / B2C, Azure VMs

. Huawei Cloud: ECS, ELB, OSS

3. Microsoft 365 Administration

. Exchange Online, Teams, OneDrive, Intune, license assignments

4. Backup Systems Management

. Server, database, Exchange Online, SharePoint Online backups

. Extend backups to on-prem storage

. Reporting, troubleshooting, and remediation

5. SCCM and Intune Administration

. Create/schedule patch deployments and application packages

. Perform maintenance and fault remediation

6. Systems Monitoring

. Manage monitored items including metrics and alert thresholds based on requirements

7. Logging & Security Systems

. Ensure logs are collected and reviewed (i.e. Splunk, etc.)

. Identify and remediate anomalies

8. Storage & Endpoint Security

. Manage SAN/Cloud storage

. Maintain endpoint protection platforms (i.e. Sophos, Trend Micro)

9. Privileged Access Management

. Configure and maintain PAM system

10. Infrastructure Operations

. Participate in projects and provide recommendations

. Conduct regular account and access reviews

. Ensure compliance with internal policies, guidelines and procedures

11. Documentation & SOPs

. Maintain updated documentation, runbooks, inventories

12. Troubleshooting & Escalation

. Perform end-to-end technical troubleshooting

. Escalate to vendors (Microsoft, AWS, Huawei, etc.) or to SIT when required

13. Disaster Recovery

. Participate in DR exercise activities

A. Infrastructure Systems to be Supported

The following systems are currently maintained at SIT. SIT reserves the right to replace or introduce new systems during the contract period.

a) Server OS

. Approx. 350 servers (estimated 5% annual growth)

. Windows Server 2016 and above

. Linux (Ubuntu, CentOS, Rocky Linux, RHEL)

b) Authentication Services

. Microsoft AD DS

. Entra ID

. AWS AD

. ADFS

. Azure MFA

c) Patch & Software Management

. Microsoft SCCM, WSUS, Intune

. Linux patch management

d) Monitoring Systems

. WhatsUp Gold

. AWS CloudWatch

. Azure Health Monitoring

. Huawei Cloud Eye

e) Logging Systems

. Splunk

. Kiwi Log Server

. AWS CloudTrail

f) Storage Systems

. AWS EBS, S3

. Azure Storage

. Huawei EVS

. Dell & Huawei SAN

. Barracuda SAN Switches

g) Backup Systems

. Commvault, Veeam

. N2WS Cloud Protection Manager

. Azure Backup Manager

. Huawei Cloud Migration Services

h) Privileged Access Management

. BeyondTrust

i) Endpoint Security

. Sophos, Trend Micro

j) File Sharing

. OneDrive for Business

. AWS FSx

k) Password Management

. ManageEngine Self-Service Portal

l) Certificate Management

. AWS Certificate Manager

. Microsoft CA

. Commercial SSL certificates

m) Server Virtualization Platforms

. VMWare vSphere

. AWS EC2 / Lambda

. Azure VM

. Huawei ECS

n) Messaging Systems

. Symantec Email Cloud Security

. Exchange Online

. SendQuick SMS Gateway

. AWS SNS

o) Microsoft 365

. Exchange Online, OneDrive, Teams, Intune

p) Cloud Service Providers

. AWS, Azure, Huawei Cloud, Microsoft 365

q) Cloud Workspaces

. AWS Workspaces

. Azure Virtual Desktop