SYSTEMS ADMINISTRATOR -SYAD20/2026

REPORTING TO: DATA CENTRE MANAGER

Job Purpose:

The Systems Administrator is responsible for the availability, performance, security, and lifecycle management of enterprise systems across on-premises and cloud environments. The role ensures reliable operations of servers, virtualization platforms, storage, directory services, and core enterprise applications, while maintaining a strong security posture, resilience, and compliance with IT policies and regulatory standards.

Key Responsibilities:

1. Operations & Availability

• Administer, monitor, and optimize Windows/Linux servers, virtualization platforms (VMware/Hyper-V), and container hosts (Docker/Kubernetes).
• Manage Active Directory/Azure AD/Entra ID, Group Policy, DNS/DHCP, NTP, certificate services (PKI), and identity integrations (SSO, MFA).
• Oversee patching and updates for OS, firmware, hypervisors, and core applications using tools like WSUS/SCCM/Intune/Ansible.

2. Security & Compliance

• Enforce hardening baselines (e.g., CIS benchmarks), secure configurations, and least-privilege access controls (RBAC).
• Vulnerability management and remediation workflows.
• Manage identity security: password policies, MFA, conditional access, service accounts, and secrets management.
• Support audits and ensure adherence to policies, maintaining accurate CMDB and change records.

3. Cloud & Automation

• Support provisioning and lifecycle of workloads in Azure/AWS/GCP, including IaaS/PaaS services, images, snapshots, security groups, and backups.
• Build automation for routine tasks using PowerShell/Bash/Python, Infrastructure-as-Code (e.g., ARM/Bicep/Terraform), and configuration management (e.g., Ansible/DSC).
• Optimize performance and costs (rightsizing, reserved instances, storage tiers) and maintain tagging/chargeback frameworks.

4. Resilience & Continuity

• Maintain backup and disaster recovery plans, test restores regularly, and participate in site failover exercises.
• Ensure high availability designs (clustering, load balancing), capacity planning, and resource forecasting.

5. Service Delivery & Support

• Own escalations for Tier 2/3 incidents; drive problem management and root-cause analysis (RCA).
• Participate in on-call/shift rotations and after-hours maintenance windows.
• Keep runbooks, diagrams, and knowledge base articles up to date; mentor junior engineers/technicians.

6. Projects & Lifecycle

• Lead or support infrastructure projects: upgrades, migrations (e.g., AD, Exchange/Exchange Online, M365, cloud), and new deployments.
• Perform vendor evaluation, proof-of-concepts, and contribute to architecture reviews and change advisory boards (CAB).
• Manage asset lifecycle (procurement to decommission), ensuring secure data sanitization and proper disposal.

Academic & Professional Qualifications

• Education: Bachelor’s in Computer Science, Information Systems, or equivalent experience.
• Experience: 3–7 years administering enterprise systems (on-prem and/or cloud).
• Certifications (preferred):
  • Microsoft: AZ-104, SC-300, MS-102.
  • VMware: VCP-DCV.
  • Linux: RHCSA or LFCS.
  • ITIL Foundation.
  • Security: CompTIA Security+, AZ-500, or equivalent.

Key Competencies

Core Systems

• Windows Server (AD DS, AAD/Entra ID, DNS/DHCP, GPO, PKI), Linux (RHEL/Ubuntu), shell scripting.
• Virtualization (VMware vSphere, Hyper-V) and containerization (Docker, Kubernetes basics).

Cloud & M365

• Azure/AWS fundamentals: VMs, storage, networking (VNet/VPC, NSG/Security Groups), IAM, Key Vault/KMS.
• Microsoft 365/Exchange Online/SharePoint/OneDrive administration and identity integrations.

Networking (Systems-Focused)

• TCP/IP, VLANs, routing basics, load balancers, reverse proxies, DNS records, NTP, SSL/TLS, and certificates.

Storage & Backup

• SAN/NAS (iSCSI, FC), RAID concepts, snapshots/replication, backup suites (Veeam, Commvault, Rubrik, etc.).

Documentation & ITSM

• ITIL processes (Incident/Problem/Change), CMDB updates, runbooks, topology diagrams (Visio/Draw.io).

How to Apply

ALL applicants MUST apply online to email: recruitment@familybank.co.ke Closing Date: 27th June 2026.

Canvassing will automatically disqualify the candidate. Only shortlisted candidates will be contacted.