System Engineer (ICT Security)
Summary
Maintains and secures on-prem servers, storage, virtualization, and backups for an enterprise ICT environment, focusing on Windows/Linux administration, VMware/Hyper-V, SAN/NAS, and security hardening.
Key Responsibilities
Server Configuration & Administration
• Install, configure, and maintain physical and virtual servers (rack/blade, standalone, and clustered environments).
• Perform OS installation, patching, and lifecycle management for Windows Server and Linux distributions.
• Configure and manage Active Directory, DNS, DHCP, Group Policy, and file/print services.
• Administer Linux servers (RHEL/CentOS/Ubuntu) including user management, services, and shell-level troubleshooting.
RAID & Storage Configuration
• Configure RAID levels (0, 1, 5, 6, 10) via hardware and software RAID controllers based on redundancy/performance requirements.
• Monitor disk health, rebuild arrays, and manage storage provisioning on enterprise storage systems (SAN/NAS — e.g. Dell EMC, NetApp, HPE, Hitachi).
• Manage LUN allocation, zoning, and multipathing for SAN-connected hosts.
Virtualization / Hypervisor
• Deploy and manage VMware vSphere/ESXi and Microsoft Hyper-V environments.
• Perform VM provisioning, resource allocation, snapshots, migration (vMotion), and cluster/HA configuration.
Backup & Recovery
• Design and manage backup jobs and retention policies using enterprise backup solutions (e.g. Veeam, Commvault, Veritas NetBackup).
• Perform regular restore testing and maintain disaster recovery documentation and procedures.
Security & Hardening
• Apply OS and application hardening standards (e.g. CIS Benchmarks) across Windows and Linux servers.
• Manage patch compliance, endpoint protection/EDR, and vulnerability remediation.
• Maintain access controls, privileged account management, and audit logging.
System Tools & Monitoring
• Administer IT management tools such as ManageEngine ADSSP/ADManager Plus (self-service password reset, AD delegation), monitoring platforms, and ticketing systems.
• Set up alerting and capacity/performance monitoring for servers, storage, and hypervisor hosts.
Documentation & Support
• Maintain accurate infrastructure documentation, configuration records, and SOPs.
• Provide 2nd/3rd-level support, incident resolution, and participate in change management processes.
2. Skillset Requirements
Approximately 80% of the skillset below should be held on entry; the remaining ~20% (marked as trainable) can be developed on the job.
Core Skillset
• Operating Systems: Windows Server (2016/2019/2022) administration; Linux administration (RHEL/CentOS/Ubuntu).
• Active Directory, DNS, DHCP, Group Policy management.
• Hypervisor platforms: VMware vSphere/ESXi and Microsoft Hyper-V.
• RAID configuration and enterprise storage (SAN/NAS)administration.
• Enterprise backup and recovery solutions (e.g. Veeam, Commvault).
• Server hardening practices and patch management(Windows & Linux).
• ManageEngine suite (ADSSP/ADManager Plus) or equivalent AD self-service/management tools.
• Basic networking concepts: TCP/IP, VLAN, firewall rules, load balancing fundamentals.
• Incident, problem, and change management (ITIL-aligned working knowledge).
Trainable Skillset
• Cloud platform exposure (Azure/AWS) for hybrid infrastructure.
• Scripting/automation (PowerShell, Bash, Ansible) for task automation.
• Vendor-specific certifications (VMware VCP, Microsoft, storage vendor certifications).
• Advanced storage technologies (hyperconverged infrastructure, storage replication).
• Security tooling beyond baseline (SIEM integration, advanced EDR configuration).