ROLE OVERVIEW
The Senior System Engineer (Windows & Microsoft 365) is responsible
for the administration, security, automation, performance, and operational
resilience of enterprise Microsoft technology platforms across on-premises,
VMware, AWS, Azure, private cloud, and Microsoft 365 environments. The role
serves as the subject matter expert for Windows Server, Active Directory,
Microsoft 365, and related infrastructure technologies, ensuring systems remain
secure, available, recoverable, and compliant with organizational and
regulatory requirements.
The incumbent will lead infrastructure initiatives, drive automation and
standardization, support business-critical platforms, and provide technical
leadership for infrastructure modernization, operational improvements,
cybersecurity, and resilience program
KEY RESPONSIBILITIES
Windows Infrastructure,
Cloud & Platform Engineering
1.
Administer, maintain, monitor,
troubleshoot, and optimize Windows Server environments across physical, VMware,
AWS, Azure, and private cloud platforms.
2.
Manage operating system
installation, configuration, upgrades, patching, server builds, and lifecycle
management.
3.
Administer and support Microsoft
Active Directory, Group Policy (GPO), DNS, DHCP.
4.
Perform system capacity planning,
performance tuning, health monitoring, and availability management.
5.
Administer, maintain,
troubleshoot, upgrade, and migrate Windows-hosted applications and web
platforms, including Microsoft IIS and related middleware components.
6.
Administer and support Microsoft
365 services including Exchange Online, Microsoft Entra ID (Azure AD),
Microsoft Teams, SharePoint Online, OneDrive, and related collaboration
services.
7.
Manage hybrid identity integration
between on-premises Active Directory and Microsoft Entra ID, including
synchronization and authentication services.
8.
Administer user lifecycle
management, mailbox provisioning, license management, distribution groups,
shared mailboxes, and Microsoft 365 platform configurations.
9. Support
enterprise monitoring and observability platforms including Grafana,
CloudWatch, Azure Monitor, and other infrastructure monitoring solutions.
Windows
Security, Compliance & Automation
1.
Execute server patching,
vulnerability remediation, security hardening, certificate renewals, access
reviews, and configuration changes in accordance with change-management
procedures.
2.
Administer and support Active
Directory security, Group Policy governance, privileged access controls, and
identity management solutions.
3.
Administer and support Microsoft
Defender for Endpoint, Microsoft Defender for Office 365, Conditional Access,
Multi-Factor Authentication (MFA), and Microsoft Entra ID security controls.
4.
Investigate Windows Event Logs,
authentication activities, security alerts, system performance issues, and
infrastructure incidents.
5.
Implement and maintain Microsoft
365 security, compliance, retention, audit, and data protection controls.
6.
Develop and maintain PowerShell
scripts and automation workflows for provisioning, configuration management,
patching, monitoring, reporting, and repetitive operational tasks.
7.
Ensure compliance with
organizational security standards, regulatory requirements, and audit controls.
8.
Maintain accurate asset,
configuration, patching, access, and operational records.
9. Follow
applicable IT policies, ITIL practices, BNM RMiT, MoF, ISO 27001, and
cybersecurity controls relevant to assigned systems and activities.
Backup, Recovery & Resilience
1.
Administer and support Windows
CIFS, backup solutions, and recovery processes.
2.
Perform backup verification, file
restoration testing, server recovery exercises, and disaster recovery drills;
document results and implement improvements.
3.
Support Windows Failover
Clustering, high availability platforms, business continuity arrangements, and
service recovery procedures for mission-critical systems.
4.
Participate in planned maintenance
activities, infrastructure upgrades, technology refresh initiatives, and
after-hours support when required.
5.
Support resilience testing,
recovery validation, and continuous improvement of infrastructure recovery
capabilities.
Documentation & Continuous
Improvement
1.
Develop and maintain Windows
Server, Microsoft 365, and infrastructure build standards, SOPs, runbooks,
architecture diagrams, operational procedures, and troubleshooting guides.
2.
Identify opportunities for
automation, standardization, performance optimization, operational efficiency,
and service improvement.
3.
Support infrastructure
modernization, migration, cloud adoption, and technology transformation
initiatives.
4.
Prepare operational reports,
incident summaries, root cause analysis inputs, technical recommendations, and
management updates.
5.
Collaborate with cybersecurity,
network, cloud, application, and project teams to deliver secure and resilient
infrastructure solutions.