System Administrator

Role Overview

Join a leading global digital services company as a System Administrator focusing on advanced endpoint and system management. This position entails expertise in scripting languages, modern operating systems, API integration, and DevOps practices to support and automate Windows endpoint environments effectively.

Key Responsibilities

• Develop advanced PowerShell scripts for automating Windows endpoint management, including Desired State Configuration, remoting, and WMI/CIM interfaces; complement scripting with Bash as needed.
• Manage Windows 11 endpoints covering OS builds, registry settings, policy configurations, troubleshooting, and addressing vulnerabilities.
• Utilize Python, Go, and Java programming skills to enhance automation and integrations.
• Design and validate data schemas using YAML and JSON formats.
• Consume and integrate REST APIs, preferably Microsoft Graph, implementing secure authentication methods such as OAuth2, OIDC, or certificate-based authorization.
• Work extensively with GitLab CI/CD pipelines, adopting advanced pipeline concepts like dynamic child pipelines, directed acyclic graphs, environment-scoped variables, and automated/manual approval gates.
• Adopt robust Git workflows, including branching strategies and merge request automation ensuring peer review and audit readiness.
• Practice infrastructure as code and progressive deployment patterns such as ring-based promotions, canary releases, and blue-green deployments.
• Create and maintain test frameworks using tools like pytest, Robot Framework, or PowerShell Pester, including performance and regression testing; familiarity with desktop/VDI testing tools like Login VSI is advantageous.
• Analyze telemetry and log data for identifying patterns in endpoint remediation failures, develop dashboards and generate compliance reports using Power BI and Grafana.
• Handle endpoint compliance automation following CIS/STIG baselines and provide audit evidence.
• Manage remediation workflows via Intune and SCCM/MECM including detection logic, deployment staging, retries, failure handling, rollback, and SCCM Task Sequence OS deployments.
• Administer ServiceNow Vulnerability Response processes, including lifecycle management, false-positive filtering, and SLA tracking.
• Interpret vulnerability scanner outputs (Qualys, Tenable, Defender), distinguishing between actionable findings and outdated alerts.
• Perform SQL-based data reconciliation among multiple sources including scanner data, ServiceNow, endpoint inventory, and CMDB systems.
• Maintain expertise across modern endpoint management tools such as Intune, SCCM/MECM, Tanium, Nexthink, JAMF, and BigFix.

Qualifications

• Bachelor of Technology (B.Tech) or Bachelor of Engineering (B.E.) in any specialization.

Additional Information

This role is based onsite in Hyderabad, India, and offers a salary range between 500000 and 1000000 INR per annum. Experience with complex IT infrastructure in global enterprises is highly valued.