Senior IT Administrator
Posted Updated
Description
Senior System Administrator
Job Title: Senior System Administrator
Seniority Level: Senior
Years of Relevant Experience: 7+ years
Department: IT & Infrastructure Security
Reporting Organization: Client Company
Employment Type: Full-time
Location: Kochi
Job Summary
The Senior System Administrator & IT Lead will be the technical and strategic anchor for Admaren’s IT infrastructure. This role is responsible for ensuring the high availability, security, and performance of maritime engineering platforms (SECURELOAD/COEMs) while leading a technical team to maintain a "Security-First" culture aligned with ISO 27001 standards.
Key Responsibilities:
(A) Team Leadership & Management
- Team Mentorship: Lead, mentor, and grow a team of IT Support Technicians and Junior Admins. Conduct performance reviews and identify skill gaps.
- Strategic Planning: Translate business goals into technical roadmaps. Manage the IT budget and hardware procurement cycles.
- Vendor Management: Manage relationships with ISPs, hardware vendors, and cloud service providers to ensure optimal service and pricing.
- Policy Stewardship: Act as the technical champion for ISO 27001 compliance, ensuring the team follows all ISMS protocols.
(B) Identity, Cloud & Data Security
- Identity (Entra ID): Manage Microsoft Entra ID (Azure AD), implementing Conditional Access, PIM, and MFA to secure maritime engineering data.
- Data Governance (MS Purview): Implement and manage Microsoft Purview for data discovery, classification, and lifecycle management. Define and enforce sensitivity labels across the organization.
- DLP Strategy: Design and maintain Data Loss Prevention (DLP) policies across Endpoint, Exchange, SharePoint, and Teams to prevent unauthorized exfiltration of maritime intellectual property.
- MDM (Intune): Oversee Microsoft Intune for automated device enrollment (Autopilot), security baselines, and remote wipe capabilities.
- Collaboration (SharePoint): Design secure SharePoint structures with sensitivity labels to prevent unauthorized exfiltration of proprietary 3D/naval data.
(C) Infrastructure, Network & Connectivity
- Firewall & Edge: Expert administration of FortiGate and Sophos firewalls, including SD-WAN and secure VPN tunnels for remote staff.
- Secure Wi-Fi: Maintain a high-performance 802.1X/RADIUS authenticated wireless network optimized for heavy 3D modeling and engineering traffic.
- Virtualization: Manage and optimize hybrid clusters on VMware Pro and Proxmox VE.
- Cloud (AWS & Cloudflare): Manage AWS resources (EC2/S3) and Cloudflare WAF/CDN for global application delivery.
(D) IT Operations & Monitoring (ITSM)
- ITSM (ManageEngine): Act as the lead administrator for ManageEngine ServiceDesk Plus. Standardize the "Joiner-Mover-Leaver" (JML) workflows and CMDB accuracy.
- Log Management: Establish centralized logging to ensure all security events are audited for ISO 27001 Annex A.12.
- Capacity Planning: Perform predictive analysis on hardware and cloud usage to ensure scalability before bottlenecks occur.
Qualifications & Experience
- Experience: 7+ years in IT/Infrastructure, with 1+ years in a leadership or senior capacity.
- Education: B.Tech/B.E in Computer Science, Information Technology, or a related field.
- ISO 27001 Knowledge: Deep understanding of ISMS controls, specifically regarding onboarding, exit procedures, and asset management.
- Certifications: * Fortinet NSE 4/5 or Sophos Certified Engineer.
- Microsoft 365 Certified: Endpoint Administrator Associate.
- Microsoft Certified: Information Protection and Compliance Administrator Associate (SC-400).
- AWS Certified SysOps Administrator.
Performance Indicators (KPIs)
- Compliance: 100% accuracy in the Asset Register and Onboarding/Exit logs for ISO audits.
- Data Security: Zero unauthorized data leaks from Purview-protected repositories.
- Uptime: 99.9% availability of core engineering servers and cloud platforms.
- Security: Zero unauthorized access incidents via Entra ID/VPN.
- Team Efficiency: Maintaining MTTR (Mean Time to Resolve) within ServiceDesk Plus SLAs.