Lead System Administrator

Job Description

JOB DESCRIPTION

KEY RESPONSIBILITIES
1. Virtualisation & Server Infrastructure (VMware) .
Administer VMware vCenter and ESXi infrastructure (v7.x and v8.x) across the 9-host server fleet
- cluster management, vSphere HA/DRS configuration, resource pool management, and host patching within approved maintenance windows. .
Provision new virtual machines aligned to workload requirements monitor VM resource utilisation and implement right-sizing recommendations to optimise cluster performance and capacity. .
Monitor physical host hardware health via iLO/iDRAC and vCenter hardware status coordinate firmware and driver updates manage hardware failures and vendor RMA processes. .
Configure and maintain on-premises servers for both physical and virtualised workloads diagnose server-level OS and application issues apply security patches within approved windows. 2. SAN Storage Management (HPE MSA 2060/2050, EMC VNX, Huawei Dorado) .
Administer the HPE MSA 2060 and MSA 2050 arrays
- manage disk groups, virtual pools, volumes, and host mappings monitor health and I/O performance coordinate drive replacements and firmware updates. .
Administer the Dell EMC VNX unified storage platform
- manage storage pools, LUNs, file systems, and CIFS/NFS shares coordinate with Dell EMC support for firmware and fault resolution. .
Administer the Huawei Dorado all-flash array
- manage storage pools, LUNs, host groups, and replication monitor NVMe performance and capacity coordinate Huawei support for upgrades. .
Configure and manage SAN switch zoning, ISL links, and port assignments supporting the fibre channel fabric monitor fabric health and resolve path failures between hosts and LUNs. .
Monitor storage capacity trends across all arrays forecast growth requirements and raise procurement proposals before capacity thresholds are reached. 3. Active Directory
- Identity & Access Management (25,000+ Objects) .
Administer Active Directory for 25,000+ user accounts
- manage user lifecycle, group memberships, OU structure, and attribute management conduct regular AD hygiene reviews for stale accounts and empty groups. .
Design, configure, and maintain Group Policy Objects across all OUs
- security settings, software deployment, desktop restrictions, and drive mapping conduct regular GPO audits for conflicts and misconfigured inheritance. .
Manage workstation, laptop, and server domain join troubleshoot join failures and ensure correct OU placement and GPO application for all newly joined systems. .
Manage and maintain the Azure AD Connect server
- monitor sync cycles, diagnose and resolve synchronisation errors (object conflicts, attribute mismatches, connector failures), and manage password hash sync to O365. .
Manage the AD audit framework
- user activity logging, AD object change tracking, and file access audit logs review audit reports for anomalies and produce compliance reports for management. .
Administer enterprise DHCP servers
- manage scopes, reservations, and exclusion ranges across all network segments monitor utilisation, resolve IP conflicts, and maintain IPAM documentation. .
Administer enterprise DNS servers
- manage forward and reverse lookup zones, all record types, and conditional forwarders troubleshoot resolution failures affecting authentication, applications, and internet access. 4. Print & File Server Management .
Administer the enterprise print server
- manage queues, share permissions, driver deployments, and print spooler health deploy printers via Group Policy resolve print failures and driver conflicts. .
Manage the MyQ print management platform
- configure AD integration, quota management, pull-print queues, and cost reporting troubleshoot MyQ agent and authentication failures. .
Administer the Head Office and Bur Dubai file servers
- manage shared folder structures, NTFS and share-level permissions, and ACL inheritance conduct regular permissions audits for least-privilege compliance. .
Configure and maintain DFS Replication between HO and Bur Dubai file servers monitor replication health, resolve backlogs and conflicts, and validate data consistency between namespaces. .
Manage file-level recovery from Shadow Copies, VSS snapshots, and Commvault restore jobs validate restored data integrity and document recovery actions. 5. Patch & Application Management (7,500 Systems) .
Manage ManageEngine Patch Manager Plus for OS and third-party application patching across 7,500 systems spanning all regions
- define approval workflows, test in pilot groups, schedule deployment windows, and report compliance. .
Configure and manage PDQ Deploy for remote application deployments and patch packages
- build packages, define target collections, schedule deployments, and investigate failed deployment root causes. .
Generate patch compliance reports from ManageEngine and PDQ identify and remediate non-compliant systems report monthly compliance status to IT management. 6. Monitoring, Environmental Sensors & Alerts .
Deploy and mainta