Senior Systems Administrator

About the Role

Pump Academy Private Limited (PAPL) is seeking an experienced and self-driven Senior Systems Administrator to strengthen and manage its multi-site IT infrastructure. The incumbent will be responsible for the end-to-end administration, maintenance, and security of hardware, software, cloud platforms, and network assets across PAPL's office locations.

This is a hands-on, ownership-driven role requiring the ability to independently manage IT operations under a formal Information Security Management System (ISMS) aligned to ISO 27001:2022, while ensuring compliance with applicable legal and regulatory frameworks including the Information Technology Act, 2000.

Key Responsibilities

Infrastructure & Systems Administration

• Plan, deploy, configure, and maintain Windows/Linux servers (physical and virtual) across primary and branch office locations.
• Administer and support virtualisation environments (VMware / Hyper-V) and ensure high availability of critical systems.
• Manage storage systems, backup solutions, and disaster recovery (DR) procedures; conduct and document periodic DR drills.
• Maintain system and server documentation, asset registers, and configuration records in the ITSM/ITAM platform.
• Coordinate hardware procurement, vendor engagement, and warranty/AMC tracking for all IT assets.

Cloud Administration (AWS & Azure)

• Administer Microsoft Azure environments including Azure AD (Entra ID), Intune, conditional access, and identity governance.
• Manage AWS workloads EC2, S3, IAM, VPC, CloudWatch ensuring cost optimisation and security best practices.
• Implement and maintain cloud security controls, access policies, and resource tagging standards.
• Support hybrid cloud integration between on-premises infrastructure and cloud platforms.

Microsoft 365 Administration

• Manage the full Microsoft 365 tenant: Exchange Online, SharePoint, OneDrive, Teams, and Intune MDM/MAM.
• Administer licensing, mailbox configuration, retention policies, DLP rules, and conditional access policies.
• Provide Level 2/3 support for Microsoft Teams voice, channels, meetings, and telephony integration.
• Conduct periodic M365 security assessments using Microsoft Secure Score and Defender for Office 365.

Network Infrastructure

• Configure, monitor, and maintain firewalls (Fortinet / SonicWall / Cisco ASA or equivalent), VPNs, and perimeter security.
• Manage Layer 2/3 switching infrastructure — VLAN segmentation, STP, inter-VLAN routing, and port security.
• Administer and troubleshoot Wi-Fi access points — configuration, coverage planning, captive portal, and guest network isolation.
• Monitor network performance using SNMP-based or equivalent NMS tools; respond to alerts and capacity issues proactively.
• Manage ISP links, WAN failover, and QoS configurations across multiple sites.

Physical & Peripheral Infrastructure

• Maintain and support printers, MFDs, scanners, and print server configurations for all offices.
• Manage CCTV/IP surveillance systems — installation, health checks, footage retention policy, and NVR administration.
• Oversee structured cabling, patch panel management, and rack organisation standards.
• Maintain UPS, PDUs, and server room environmental monitoring systems.

Information Security & ISO 27001 Compliance

• Operate within the organisation's ISMS framework; implement and maintain controls per ISO 27001:2022 Annex A requirements.
• Participate in internal audits, risk assessments, and VAPT activities; track and close non-conformities and OFIs.
• Enforce endpoint security — EDR/antivirus deployment, patch management, USB control, and device hardening baselines.
• Administer identity and access management (IAM) — provisioning, deprovisioning, role-based access control, and periodic access reviews.
• Assist in preparation of audit evidence, SOA mappings, and control documentation for external ISO audits.
• Support implementation of the IT Act 2000 and DPDP Act 2023 obligations including data classification, retention, and incident reporting.

IT Support & Service Management

• Act as an escalation point for Level 2 and Level 3 helpdesk incidents; mentor junior IT support staff.
• Log, track, and close incidents, service requests, and change requests in the ITSM platform per defined SLAs.
• Conduct root cause analysis (RCA) for recurring issues and implement permanent corrective actions.
• Create and maintain SOPs, knowledge base articles, and runbooks for all administered systems.

Multi-Site Operations & Travel

• Perform periodic on-site visits to branch offices for infrastructure audits, hardware refresh, and support activities.
• Coordinate with branch IT contacts to ensure consistency of configurations and security baselines across all locations.
• Plan and execute equipment deployments, network changes, and site upgrades with minimal business disruption.

Required Qualifications & Skills

Education

• Bachelor's degree in Computer Science, Information Technology, Electronics, or a related discipline.
• Relevant professional certifications are strongly preferred (see below).

Experience

• 5 - 8 years of hands-on experience in IT infrastructure administration within a corporate or enterprise environment.
• Demonstrated experience managing IT under an ISO 27001-certified ISMS — mandatory.
• Experience supporting multi-site, multi-user environments with diverse hardware and software stacks.

Technical Skills — Mandatory

• Microsoft 365 Administration (Exchange Online, Teams, SharePoint, Intune, Azure AD / Entra ID).
• Firewall administration — policy management, VPN configuration, zone-based security (any major vendor).
• AWS and/or Microsoft Azure cloud platform administration.
• Windows Server (2016/2019/2022) — AD DS, DNS, DHCP, GPO, file services, and print services.
• Network switches — VLAN, spanning tree, 802.1X, port mirroring, QoS.
• Wireless access point administration — enterprise-grade (Cisco/Ruckus/UniFi or equivalent).
• CCTV/IP camera systems — NVR configuration, retention policy enforcement, health monitoring.
• Endpoint management — patch management, EDR deployment, device compliance policy.
• Peripheral device management — printers, MFDs, and print servers.
• Backup and recovery tools — configuration, monitoring, and DR testing.

Technical Skills — Good to Have

• Linux server administration (Ubuntu / RHEL / CentOS).
• Scripting for automation — PowerShell, Bash, or Python.
• SIEM/log management tools — Microsoft Sentinel, Splunk, or equivalent.
• MDM/MAM solutions — Microsoft Intune or JAMF.
• ITSM platforms — ServiceNow, Freshservice, or in-house equivalents.
• Microsoft Teams Rooms (MTR) and AV integration administration.

Regulatory & Compliance Knowledge

• Working knowledge of the Information Technology Act, 2000 and its amendments.
• Familiarity with the Digital Personal Data Protection (DPDP) Act, 2023.
• Understanding of ISO 27001:2022 Annex A controls and audit processes.
• Awareness of ISO 9001, 14001, and 45001 as they relate to IT process interfaces (preferred, not mandatory).

Preferred Certifications

• CompTIA Security+ or Network+
• Microsoft Certified: Azure Administrator Associate (AZ-104)
• Microsoft 365 Certified: Enterprise Administrator Expert (MS-102)
• AWS Certified SysOps Administrator – Associate
• ISO/IEC 27001:2022 Lead Implementer or Lead Auditor
• CCNA or equivalent networking certification

Key Competencies

• Ownership mindset — able to manage systems end-to-end without constant supervision.
• Strong troubleshooting and root cause analysis skills across diverse technology domains.
• Effective communicator — able to explain technical matters clearly to non-technical stakeholders.
• Process discipline — comfortable working within audit-driven, documentation-heavy environments.
• Adaptability — ability to context-switch across infrastructure, security, and support tasks as priorities shift.
• Willingness to travel inter-city at short notice for site visits and support activities.

What PAPL Offers

• A high-ownership, low-bureaucracy environment where your work has direct organisational impact.
• Exposure to a diverse technology stack across on-premises, cloud, and physical security domains.
• Opportunity to contribute to ongoing ISO 27001:2022 certification and compliance initiatives.
• A collaborative, professional work culture with scope for growth into senior security or IT leadership roles.