Senior System Administrator

• Manage enterprise IT infrastructure, including Windows Server 2012, 2016, 2019, and 2022 environments.
• Administer Active Directory, Forest and Domain Management, DNS, DHCP, DFS, Group Policy, WSUS, PKI, IAS/NPS, and File and Print Services.
• Perform server administration, operating system management, patching, migrations, cloning, capacity planning, health checks, and lifecycle management.
• Manage VMware vSphere and Microsoft Hyper-V environments, including VM provisioning, migration, cloning, snapshots, HA clusters, and resource optimisation.

• Administer Microsoft 365 services, including Exchange Online, Intune, Entra ID, Defender, Purview, Teams, SharePoint Online, OneDrive, and Windows Autopilot.
• Manage user administration, access controls, licensing, Role-Based Access Control (RBAC), Multi-Factor Authentication (MFA), Conditional Access, Single Sign-On (SSO), and identity governance.
• Manage Windows, macOS, Android, and iOS devices using Microsoft Intune, JAMF Pro, Apple Business Manager, and Mobile Device Management/Application Management (MDM/MAM).

• Manage endpoint security, device compliance, device and application control, BitLocker encryption, EDR, XDR, antivirus, threat protection, and security baselines.
• Implement and maintain security solutions such as Microsoft Defender for Endpoint, Sophos Endpoint Security, McAfee ePO, email security gateways, and Data Loss Prevention (DLP).
• Perform vulnerability management, endpoint hardening, attack surface reduction, security assessments, and VAPT remediation.
• Manage Sophos firewalls, security policies, SSL VPN, IPSec VPN, Site-to-Site VPN, intrusion prevention and detection systems, NAT rules, application control, and web filtering.

• Design, implement, and support enterprise LAN, WAN, WLAN, MPLS, and SD-WAN infrastructure.
• Manage routing, switching, TCP/IP, VLANs, NAT, wireless networks, and network segmentation.
• Configure and maintain Layer 2 and Layer 3 networking, including STP, RSTP, VTP, EtherChannel, Inter-VLAN Routing, and routing protocols.
• Manage routers, switches, access points, firewalls, and network security appliances.
• Ensure network availability, high availability, redundancy, and secure connectivity.

• Manage Azure, AWS, and GCP environments, including compute, networking, storage, identity, governance, and cloud security.
• Administer NAS, SAN, RAID, storage replication, cloud storage, and capacity planning.
• Manage full, incremental, differential, image-level, VM-level, and cloud backups.
• Implement and maintain Disaster Recovery (DR) and Business Continuity Planning (BCP) processes.
• Ensure infrastructure redundancy, failover mechanisms, high availability, and operational resilience.

• Monitor infrastructure using PRTG, ManageEngine OpManager, Action1, Altris Patch Management, McAfee ePO, Azure Monitor, and security monitoring platforms.
• Perform preventive maintenance, root cause analysis, patch compliance checks, firmware upgrades, and security updates.
• Configure and support FTP, SFTP, FTPS, SSL certificates, SPF, DKIM, and DMARC.
• Support internal and external audits, security assessments, risk assessments, audit documentation, SOPs, and remediation plans.
• Manage vendors, OEMs, ISPs, software licensing, renewals, procurement coordination, budget planning, cost optimisation, and SLA governance.

Infrastructure and Systems: Windows Server, Wintel, Active Directory, Forest and Domain Management, DNS, DHCP, DFS, WSUS, PKI, IAS/NPS, File and Print Services.

Microsoft Technologies: Microsoft 365, Exchange Online, Intune, Entra ID, Microsoft Defender Suite, Purview, SharePoint Online, Teams, OneDrive, Windows Autopilot, PowerShell.

Endpoint Security: Microsoft Defender for Endpoint, EDR, XDR, Endpoint Compliance, Device Control, ASR Rules, BitLocker, Endpoint Hardening, Application Control, Vulnerability Management, Sophos Endpoint Security, McAfee ePO.

Networking: TCP/IP, Routing and Switching, VLANs, VTP, STP, RSTP, EtherChannel, MPLS, SD-WAN, NAT, Wireless Networks, Routing Protocols.

Firewall and VPN: Sophos Firewall, SSL VPN, IPSec VPN, Site-to-Site VPN, IPS, IDS, Web Filtering, Application Control.

Cloud Platforms: Microsoft Azure, AWS, GCP.

Storage and Backup: NAS, SAN, RAID, Backup and Recovery, Disaster Recovery, Business Continuity Planning.

Virtualisation: VMware vSphere, Microsoft Hyper-V.

Monitoring and Patch Management: PRTG, ManageEngine OpManager, Action1, Altris, McAfee ePO, Azure Monitor.

Security and Compliance: DLP, Email Security Gateways, VAPT, Security Hardening, Vulnerability Assessment, Risk Management, Audit Support.

• Windows Server
• Active Directory
• Microsoft 365

• Cloud Platforms
• Apple Device Management
• Advanced Networking