Profile Summary

IAMS Engineering needs specific IT infrastructure elements in order to guarantee the quality, performance and security of our Software Engineering processes. This infrastructure needs to be managed and maintained by System Administrators.

Duties and Responsibilities include the following. Other duties may be assigned.

Hardware

• Ensure production machines are under maintenance by monitoring maintenance contracts and renewing them on time.
• Provide financial information for budget planning and purchase. 
• Ensure that the firmware of all important hardware components is up-to-date. Monitor available firmware updates, plan downtime for updates and apply updates. For sensitive systems, deploy firmware updates on test systems before production roll-out.
• When new servers are deployed, install hardware and operating system, configure system.

With support from IT

• Contact vendors when hardware maintenance is required and monitor maintenance operations until successfully completed.
• Startup/shutdown production systems for planned or unplanned power outages.
• Install and configure software agents including UPS monitoring and backup agents.
• Document and maintain IP addresses for production systems that use a fixed address.
• Setup and troubleshoot network services including DHCP, DNS, SMTP, internet access, firewall.
• Setup production system to interact with corporate systems for authentication, virus monitoring/scanning, backups, storage, notifications/alerts.
• Add or remove systems to/from corporate network
• Adapt Engineering systems to IT infrastructure changes (physical access, network, storage, security, ...)

Security

• Enforce corporate IT and Engineering security policies relative to Engineering Systems (authentication, access control, encrypted communications, vulnerability patching, ...)
• Setup authentication and authorisation verification for user access to production systems and service accounts.
• Manage cryptographic secrets related to production systems authentication (SSL certificates) and software code signing.
• Configure and maintain forward proxies (Squid).
• Monitor system vulnerabilities.
• Monitor security logs

Service accounts

• Anonymous local and domain accounts for system access by automated processes
• Setup service accounts
• Manage authentication and authorisation for service accounts
• Manage service account access control keys and other secrets.

Operating Systems maintenance

• Validate software updates on pre-production machines
• Deploy validated updates on production machines
• Monitor system logs, disk space
• Troubleshoot issues (network, disk, performance, ...

​​​​​​​​​​​​​​​​​​​​​Automation

• Write and maintain scripts to automate system administration tasks (replication/backups, monitoring, cleanup, housekeeping)
• Setup system maintenance automation jobs locally scheduled tasks or a central job scheduler.

Disaster Recovery

• Deploy and maintain production systems data backup devices and software for local and offsite backups.
• Monitor local and offsite backup execution and ensure data is backed up daily
• Conduct periodic disaster recovery exercise for each local site and publish corresponding records.

Qualifications:

To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. The requirements listed below are representative of the knowledge, skill, and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

• Dell hardware administration: iDRAC
• Linux system administration
• Disaster recovery management (Synology, Rubrik)
• Windows Server system administration
• Mac system administration
• Virtualization (VMware ESX, VirtualBox, Hyper-V)
• Containerization (Docker, Podman)
• Security: SSL/TLS, Kerberos, SAML/OpenID, MFA, virus detection, vulnerability monitoring
• Active Directory, LDAP
• VLAN, LACP, DHCP, DNS, NTP, SSH/SCP, HTTPS
• Scripting (Unix shell, windows PowerShell, python)
• Neo4J, Mercurial, Git, Bitbucket, GitLab, Nexus, IQ Server, Squid, Jenkins, SonarQube

Education and/or Experience:

• 8-10 years of experience as system administrator
• Having an Engineering and/or business degree with a Technical Interest 

Customer Expectations:

Highlight knowledge, skills, abilities and traits necessary in this role to satisfy our customer's expectations.

• Solid presenting and communication skills
• Customer oriented, and empathetic toward customer needs
• Ability to navigate the ambiguity of customer pain points, distill that information down to suscint user stories that will ultimately address the customer’s needs.