System Engineer (ICT Security)

Key Responsibilities

Server Configuration & Administration

• Install, configure, and maintain physical and virtual servers (rack/blade, standalone, and clustered environments).

• Perform OS installation, patching, and lifecycle management for Windows Server and Linux distributions.

• Configure and manage Active Directory, DNS, DHCP, Group Policy, and file/print services.

• Administer Linux servers (RHEL/CentOS/Ubuntu) including user management, services, and shell-level troubleshooting.

RAID & Storage Configuration

• Configure RAID levels (0, 1, 5, 6, 10) via hardware and software RAID controllers based on redundancy/performance requirements.

• Monitor disk health, rebuild arrays, and manage storage provisioning on enterprise storage systems (SAN/NAS — e.g. Dell EMC, NetApp, HPE, Hitachi).

• Manage LUN allocation, zoning, and multipathing for SAN-connected hosts.

Virtualization / Hypervisor

• Deploy and manage VMware vSphere/ESXi and Microsoft Hyper-V environments.

• Perform VM provisioning, resource allocation, snapshots, migration (vMotion), and cluster/HA configuration.

Backup & Recovery

• Design and manage backup jobs and retention policies using enterprise backup solutions (e.g. Veeam, Commvault, Veritas NetBackup).

• Perform regular restore testing and maintain disaster recovery documentation and procedures.

Security & Hardening

• Apply OS and application hardening standards (e.g. CIS Benchmarks) across Windows and Linux servers.

• Manage patch compliance, endpoint protection/EDR, and vulnerability remediation.

• Maintain access controls, privileged account management, and audit logging.

System Tools & Monitoring

• Administer IT management tools such as ManageEngine ADSSP/ADManager Plus (self-service password reset, AD delegation), monitoring platforms, and ticketing systems.

• Set up alerting and capacity/performance monitoring for servers, storage, and hypervisor hosts.

Documentation & Support

• Maintain accurate infrastructure documentation, configuration records, and SOPs.

• Provide 2nd/3rd-level support, incident resolution, and participate in change management processes.

Approximately 80% of the skillset below should be held on entry; the remaining ~20% (marked as trainable) can be developed on the job.

Core Skillset

• Operating Systems: Windows Server (2016/2019/2022) administration; Linux administration (RHEL/CentOS/Ubuntu).

• Active Directory, DNS, DHCP, Group Policy management.

• Hypervisor platforms: VMware vSphere/ESXi and Microsoft Hyper-V.

• RAID configuration and enterprise storage (SAN/NAS)administration.

• Enterprise backup and recovery solutions (e.g. Veeam, Commvault).

• Server hardening practices and patch management(Windows & Linux).

• ManageEngine suite (ADSSP/ADManager Plus) or equivalent AD self-service/management tools.

• Basic networking concepts: TCP/IP, VLAN, firewall rules, load balancing fundamentals.

• Incident, problem, and change management (ITIL-aligned working knowledge).

Trainable Skillset

• Cloud platform exposure (Azure/AWS) for hybrid infrastructure.

• Scripting/automation (PowerShell, Bash, Ansible) for task automation.

• Vendor-specific certifications (VMware VCP, Microsoft, storage vendor certifications).

• Advanced storage technologies (hyperconverged infrastructure, storage replication).

• Security tooling beyond baseline (SIEM integration, advanced EDR configuration).