Senior IT Administrator

Senior System Administrator

Job Title: Senior System Administrator

Seniority Level: Senior

Years of Relevant Experience: 7+ years

Department: IT & Infrastructure Security

Reporting Organization: Client Company

Employment Type: Full-time

Location: Kochi

Job Summary

The Senior System Administrator & IT Lead will be the technical and strategic anchor for Admaren’s IT infrastructure. This role is responsible for ensuring the high availability, security, and performance of maritime engineering platforms (SECURELOAD/COEMs) while leading a technical team to maintain a "Security-First" culture aligned with ISO 27001 standards.

Key Responsibilities:

(A) Team Leadership & Management

• Team Mentorship: Lead, mentor, and grow a team of IT Support Technicians and Junior Admins. Conduct performance reviews and identify skill gaps.
• Strategic Planning: Translate business goals into technical roadmaps. Manage the IT budget and hardware procurement cycles.
• Vendor Management: Manage relationships with ISPs, hardware vendors, and cloud service providers to ensure optimal service and pricing.
• Policy Stewardship: Act as the technical champion for ISO 27001 compliance, ensuring the team follows all ISMS protocols.

(B) Identity, Cloud & Data Security

• Identity (Entra ID): Manage Microsoft Entra ID (Azure AD), implementing Conditional Access, PIM, and MFA to secure maritime engineering data.
• Data Governance (MS Purview): Implement and manage Microsoft Purview for data discovery, classification, and lifecycle management. Define and enforce sensitivity labels across the organization.
• DLP Strategy: Design and maintain Data Loss Prevention (DLP) policies across Endpoint, Exchange, SharePoint, and Teams to prevent unauthorized exfiltration of maritime intellectual property.
• MDM (Intune): Oversee Microsoft Intune for automated device enrollment (Autopilot), security baselines, and remote wipe capabilities.
• Collaboration (SharePoint): Design secure SharePoint structures with sensitivity labels to prevent unauthorized exfiltration of proprietary 3D/naval data.

(C) Infrastructure, Network & Connectivity

• Firewall & Edge: Expert administration of FortiGate and Sophos firewalls, including SD-WAN and secure VPN tunnels for remote staff.
• Secure Wi-Fi: Maintain a high-performance 802.1X/RADIUS authenticated wireless network optimized for heavy 3D modeling and engineering traffic.
• Virtualization: Manage and optimize hybrid clusters on VMware Pro and Proxmox VE.
• Cloud (AWS & Cloudflare): Manage AWS resources (EC2/S3) and Cloudflare WAF/CDN for global application delivery.

(D) IT Operations & Monitoring (ITSM)

• ITSM (ManageEngine): Act as the lead administrator for ManageEngine ServiceDesk Plus. Standardize the "Joiner-Mover-Leaver" (JML) workflows and CMDB accuracy.
• Log Management: Establish centralized logging to ensure all security events are audited for ISO 27001 Annex A.12.
• Capacity Planning: Perform predictive analysis on hardware and cloud usage to ensure scalability before bottlenecks occur.

Qualifications & Experience

• Experience: 7+ years in IT/Infrastructure, with 1+ years in a leadership or senior capacity.
• Education: B.Tech/B.E in Computer Science, Information Technology, or a related field.
• ISO 27001 Knowledge: Deep understanding of ISMS controls, specifically regarding onboarding, exit procedures, and asset management.
• Certifications: * Fortinet NSE 4/5 or Sophos Certified Engineer.
• Microsoft 365 Certified: Endpoint Administrator Associate.
• Microsoft Certified: Information Protection and Compliance Administrator Associate (SC-400).
• AWS Certified SysOps Administrator.

Performance Indicators (KPIs)

• Compliance: 100% accuracy in the Asset Register and Onboarding/Exit logs for ISO audits.
• Data Security: Zero unauthorized data leaks from Purview-protected repositories.
• Uptime: 99.9% availability of core engineering servers and cloud platforms.
• Security: Zero unauthorized access incidents via Entra ID/VPN.
• Team Efficiency: Maintaining MTTR (Mean Time to Resolve) within ServiceDesk Plus SLAs.