Systems Administrator- Secruity

**Overall Job Purpose**:
This is for a position that is a natural technical progression from the Senior ICT Support role. It is a role with additional responsibility whereby national oversight of a technical nature is required for one or more brands. Responsible for administration, the co-ordination, configuration, installation, documentation and management of ADvTECH IT architectures and related services within the enterprise.

Identification and resolution of high-level technical problems and malfunctions regarding hardware, software, network, servers and other related IT services. Ensures a stable and well performing environment for the business processing systems.

Participates in various ICT projects intended to continually improve/upgrade the systems infrastructure, ensuring change management procedures and methodologies are implemented and followed. Proactively researches and locates the necessary tools and processes to identify and avert troublesome trends as they develop.

**Responsibilities**:
**Output 1 -** **Administration and Management - Windows Server**:

- Physical or Virtual Windows Server from provisioning, through operations to decommissioning according to Group standards
- Proactively perform regular maintenance and performance monitoring of Windows Server, which includes resource management, software updates and repairs when system errors occur
- Optimize processes and drive process improvement to increase performance and reduce costs
- Troubleshoot and facilitate any hardware repairs and/or upgrades in co-operation with support vendors

**Output 2 -** **Administration and Management - Active Directory**:

- Administer and the On-Premises Identity for Group Admin Staff (all contract types), Schools Students and Tertiary Students
- Administer and on-premises and cloud Windows Desktop computers within Active Directory in collaboration with Site ICT
- Perform regular Active Directory audits that includes stale user/computer object clean-ups and access rights management
- Monitor and Maintain standards for installations of Microsoft Windows Operating System technology including AD Forests, Azure AD, Domains, Trusts, DNS, DHCP, Group Policy and Organizational Units
- Create and update technical documentation of operating procedures as needed

**Output 3 -** Administration of LAN WAN Infrastructure**:

- Troubleshoot and monitor campus networking equipment, which includes firewalls, switches, Wi-Fi, and broadband equipment and escalate to partners/providers
- Administer and troubleshoot URL/Application block/allow configuration on campus firewalls as required by business while maintaining a secure environment
- Monitor and maintain standards at campus level server rooms and cabling cabinets

**Output 4 -** **ICT Security Network and End Points**:

- Troubleshoot Firewalls for the ADvTECH group of companies and divisions This includes the Branch / Site firewalls
- Administer, Endpoint Security for the ADvTECH group of companies and divisions
- Administer, Encryption (standards, database, IPSec) for the ADvTECH group of companies and divisions
- Administer, MBAM / Bitlocker for Intune for the ADvTECH group of companies and divisions
- Administer, Network Security (overview and approval) for the ADvTECH group of companies and divisions
- Administer, Patch Management (including WSUS, Intune, and SCCM). This includes implementation of extended features, client inventory
- Administer, monitoring, monthly reporting, and capacity planning

**Output 5 - **ICT Security Data Centre**:

- Troubleshoot Firewalls for the ADvTECH group of companies and divisions. This includes the Data Centre, Azure, and Branch / Site firewalls
- Administer, Web Application Firewalls for the ADvTECH group of companies and divisions
- Administer, Advanced Threat Analytics (MDE/MDI) for the ADvTECH group of companies and divisions
- Administer, Vulnerability Management for the ADvTECH group of companies and divisions
- Administer, (50/50 Security/AD) for the ADvTECH group of companies and divisions
- Administer, Digital Security Certificates for the ADvTECH group of companies and divisions
- Administer, Patch Management (including WSUS, INTUNE, and SCCM). This includes implementation of extended features, client inventory
- Administer Global Protect for the Group
- Administer of Log Servers

**Output 6 - ICT Security Governance**:

- Remediation of Security Risk Register items for the ADvTECH group of companies and divisions
- Assist in Forensic Investigations for the ADvTECH group of companies and divisions.
- Participate, contribute, in Security Forum. This includes driving security awareness and instructing staff on activities that need to be performed to ensure that the ADvTECH Network and Systems are secure.

**Output 7 - Cloud Infrastructure**:

- Administration of Backup and Disaster Recovery for both the Private and Public data Centres. This includes the:

- Backups and DR
- Replication to Azure
- Replication to Amazo