Job Details
Job Description
Hire Resolve's client is looking for a Systems Administrator to join their team in Johannesburg, GP. The purpose of the role is to enhance the ICT team's effectiveness by managing, securing, and optimizing systems, networks, and end-user devices across a globally distributed business. The role encompasses system administration, security and compliance, end-user support, and the adoption of innovative tools and processes to ensure operational excellence and alignment with organizational goals. This position demands proactive leadership, technical expertise, and a commitment to fostering collaboration, continuous improvement, and reliability in all ICT operations.
Responsibilities:
Responsibilities:
System Administration
- Administer and maintain productivity suites, ranging from Microsoft 365, which includes Entra, Office 365, SharePoint, Teams, Intune, Defender and Purview to our Line of Business systems.
- Administering and maintaining servers and endpoints, including installation, configuration, and troubleshooting, as well as the migration of any on-premises infrastructure to off-the-shelf cloud-based platforms.
- Facilitate the life cycle of user accounts, permissions, and access across various systems and platforms, which includes the Active Directory and Microsoft Entra.
- Telephony switch and VoIP systems (Mitel based), Datatex suite of products (Amethyst, TES, TNG)
- Implementing and maintaining system backups, disaster recovery plans, and security measures.
Management and Processes
- Assist with IT operational and supply chain management.
- Enable internal service desk to achieve SLA and reporting requirements.
- Manage contracts with vendors (e.g. development platforms, telecommunication companies, password managers) and software licenses.
- Assist teams with planning and adoption of new tools and services.
- Assist in end-user support
- Manage and allocate support tickets to team via Helpdesk system (SpiceWorks)
Security and Compliance
- Align the IT environment to industry regulations and best practices, such as SOC2, CIS Benchmark, ISO 27001, GDPR and PCI-DSS, by configuring, implementing and enforcing security policies.
- Monitor and investigate security alerts and incidents.
- Facilitate security reviews for new software and tools and critically evaluate risks and define mitigations.
- Ensure regular security audits and vulnerability assessments are performed and risks identified are addressed promptly.
- Assist with configuration and evidence gathering.
Support
- Effectively enable and delegate within the team to offer prompt national support and collaborate with representatives in other regions where applicable.
- Facilitate inquiries by understanding the underlying need, followed by identifying and evaluating the various solutions and finally implement the viable solution.
- Collaborate with teams to enable integration with IT systems, e.g. SSO, MFA integration and configuring access packages.
- Serve as an escalation layer for privileged operations as well as complex issues offering prompt and effective resolution, which may vary from hardware/software to network problems and rely on diagnostic skills to resolve.
Documentation and Knowledge Sharing
- Develop IT policies and guidelines.
- Maintaining accurate documentation of configurations, procedures, and troubleshooting guides.
- Sharing knowledge and best practices with team members, promoting continuous learning and improvement.
Minimum experience required to effectively meet the requirements of the position
- Completed the following Microsoft Exams:
- MS-102: Microsoft 365 Administrator
- MD-102: Endpoint Administrator
- SC-100: Microsoft Cybersecurity Architect
- SC-200: Microsoft Security Operations Analyst
- SC-300: Microsoft Identity and Access Administrator
- SC-400: Microsoft Information Protection Administrator
- MS-500: Microsoft 365 Security Administration
- AZ-500: Microsoft Azure Security Technologies
- Holds a degree or diploma in Computer Science, Information Technology, or related field or have the relevant work experience.
- Networking: IP, ICMP, IPSec, UDP, TCP, DNS, DHCP, NTP, LDAP, HTTP, SMB, SIP, Routing, BGP, VPN
- Security: Firewall, CSR, Certificates, SAN, CA, TLS, Mutual TLS, Cipher Suites, Symmetric and Asymmetric Encryption
- Load Balancers: Reverse Proxy, HTTP Proxy, NGINX, Scale Computing and NLB
- Email: MX, SPF, DKIM, DMARC, S/MIME, Microsoft Purview Advanced Message Encryption
- Platforms: Windows, MacOS, Ubuntu, Android, iOS, Apple Business Manager, Google Workspace, Rocky
- Scripting languages: PowerShell, Bash, SQL, Python, Data Manipulation, Automation
- IdPs: SAML, Microsoft Enterprise Applications, SCIM, Custom App Roles
- Microsoft Identity: Hybrid AD, Mult-Factor Authentication, Conditional Access Policies, External Collaboration, PIM, Retrieving Audit Logs, Entitlement Packages
- Microsoft Endpoint Manager: Intune, Secure Boot, Disk Encryption, Account Protection, Firewall, Windows Defender for Endpoint, Device Profiles, Devices Compliance Polices, Device Configuration Polices, Approved Applications, Device Driver Updates, AutoPilot, Onboarding Operating Systems, Dynamic Groups
- Microsoft Purview: DPL policies, eDiscovery, data life cycle management, subject rights management (GDPR)
- Microsoft Security: Improving Security Score, Configuring Alerts, Investigate Incidents, Leveraging Risky Users detection.
- Microsoft Exchange, SharePoint and Teams: Creating Teams disallowing Guests, Auditing external shares.
- Microsoft Azure: KeyVaults, Storage Accounts, SQL server, ADF, Virtual Network, NAT Gateways, VPN Tunnels, Azure Sentinel, Azure Virtual Desktop
- Compliance Policies and Data Protection Acts: ISO 27001, CIS Benchmark, SOC2, PCI DSS, POPIA, GDPR, CCPA, CDPA, DSAR