System Administrator- Ict Secrurity and Cloud

**Overall Job Purpose**:
Responsible for the day to day administration of Business and IT Systems. Configuration programming, installation, and support of ADvTECH IT architectures and related services for the enterprise. Monitors performance and maintains systems and servers according to requirements ensuring they work effectively.

Identifies and resolves all hardware and software technical problems and malfunctions related to the system operations and underlying hardware. Escalate business process problems to the accountable system, owner.

Advises team leader in the areas of performance analysis, problem-solving, and infrastructure and system planning, with the potential to affect the successful execution of business transactions. Ensures a stable performance environment for the business processing system.

Provides reports and metrics relating to overall systems health ,to improve system availability and performance, thus providing an holistic management view and recommendations to alleviate pre-empty and avoid potential issues.

**Responsibilities**:
**Output 1 -** **Administration and Management - Windows Server**:

- Physical or Virtual Windows Server from provisioning, through operations to decommissioning according to Group standards
- Proactively perform regular maintenance and performance monitoring of Windows Server, which includes resource management, software updates and repairs when system errors occur
- Optimize processes and drive process improvement to increase performance and reduce costs
- Troubleshoot and facilitate any hardware repairs and/or upgrades in co-operation with support vendors

**Output 2 -** **Administration and Management - Active Directory**:

- Administer and the On-Premises Identity for Group Admin Staff (all contract types), Schools Students and Tertiary Students
- Administer and on-premises and cloud Windows Desktop computers within Active Directory in collaboration with Site ICT
- Perform regular Active Directory audits that includes stale user/computer object clean-ups and access rights management
- Monitor and Maintain standards for installations of Microsoft Windows Operating System technology including AD Forests, Azure AD, Domains, Trusts, DNS, DHCP, Group Policy and Organizational Units
- Create and update technical documentation of operating procedures as needed

**Output 3 -** Administration of LAN WAN Infrastructure**:

- Troubleshoot and monitor campus networking equipment, which includes firewalls, switches, Wi-Fi, and broadband equipment and escalate to partners/providers
- Administer and troubleshoot URL/Application block/allow configuration on campus firewalls as required by business while maintaining a secure environment
- Monitor and maintain standards at campus level server rooms and cabling cabinets

**Output 4 -** **ICT Security Network and End Points**:

- Troubleshoot Firewalls for the ADvTECH group of companies and divisions This includes the Branch / Site firewalls
- Administer, Endpoint Security for the ADvTECH group of companies and divisions
- Administer, Encryption (standards, database, IPSec) for the ADvTECH group of companies and divisions
- Administer, MBAM / Bitlocker for Intune for the ADvTECH group of companies and divisions
- Administer, Network Security (overview and approval) for the ADvTECH group of companies and divisions
- Administer, Patch Management (including WSUS, Intune, and SCCM). This includes implementation of extended features, client inventory
- Administer, monitoring, monthly reporting, and capacity planning

**Output 5 - **ICT Security Data Centre**:

- Troubleshoot Firewalls for the ADvTECH group of companies and divisions. This includes the Data Centre, Azure, and Branch / Site firewalls
- Administer, Web Application Firewalls for the ADvTECH group of companies and divisions
- Administer, Advanced Threat Analytics (MDE/MDI) for the ADvTECH group of companies and divisions
- Administer, Vulnerability Management for the ADvTECH group of companies and divisions
- Administer, (50/50 Security/AD) for the ADvTECH group of companies and divisions
- Administer, Digital Security Certificates for the ADvTECH group of companies and divisions
- Administer, Patch Management (including WSUS, INTUNE, and SCCM). This includes implementation of extended features, client inventory
- Administer Global Protect for the Group
- Administer of Log Servers

**Output 6 - ICT Security Governance**:

- Remediation of Security Risk Register items for the ADvTECH group of companies and divisions
- Assist in Forensic Investigations for the ADvTECH group of companies and divisions.
- Participate, contribute, in Security Forum. This includes driving security awareness and instructing staff on activities that need to be performed to ensure that the ADvTECH Network and Systems are secure.

**Output 7 - Cloud Infrastructure**:

- Administration of Backup and Disaster Recovery for both the Private and Public data Centres. This includes the:

- Backups