System Administrator

Winsupply is seeking a proactive and detail-oriented IT Systems & Security Administrator (L2) with 2 to 4 years of experience to support our hybrid enterprise infrastructure and frontline security operations. In this role, you will safeguard core digital assets across multi-regional environments—monitoring endpoint and web application security events, deploying critical system patches, and responding to operational incidents. Alongside security monitoring, you will play a key role in maintaining system uptime, verifying data backups, and supporting database and network health. This is an excellent opportunity for a technical professional looking to expand their expertise across both enterprise systems administration and frontline SecOps within a collaborative global team.

In this role, you will be the operational backbone of our technical operations, ensuring high availability across servers, networks, and databases while executing critical backup routines and disaster recovery procedures. In addition, you will act as the frontline responder for security alerts (EDR/XDR and SIEM), vulnerability patching, and off-hours operational disruptions.

Key Responsibilities

1.Database Maintenance & Monitoring

• Monitor relational database health, CPU utilization, disk space, memory utilization, connection pool limits, and blocking locks (e.g., DB2, SQL Server, MariaDB, or MongoDB).
• Track replication status, high-availability cluster health, and alert on replication lag or database service interruptions.
• Perform operational maintenance tasks including checking table bloat, space allocation, and executing standard service restart playbooks during scheduled off-hours.

2.Backup, Disaster Recovery & Storage Management

• Oversee and verify automated daily, weekly, and monthly backup schedules across enterprise systems, databases, and cloud/on-premise storage.
• Actively investigate backup failures, resolve storage capacity bottlenecks, and re-trigger failed backup jobs.
• Participate in scheduled Disaster Recovery (DR) drills and execute routine restoration validations to ensure Recovery Point Objectives (RPO) and Recovery Time Objectives (RTO) are strictly maintained.

3.Network & Operating System Administration

• Administer Windows Server and Linux (RHEL, Ubuntu, CentOS) environments, including user access, OS patching, disk space management, and system services.
• Diagnose and resolve network connectivity issues, including DNS resolution failures, DHCP scopes, routing issues, and VPN tunnel drops.
• Verify firewall traffic rules, monitor reverse proxy/load balancer health checks, and manage SSL/TLS certificate renewals to prevent service outages.

4.Endpoint & Web Application Security Monitoring

• Monitor enterprise endpoint detection and response (EDR/XDR) platforms (e.g., Palo Alto Cortex XDR, Defender for Endpoint).
• Triage high-severity alerts, including WildFire Malware sandbox verifications, Local Analysis Malware , and suspicious process executions.
• Execute frontline containment procedures, including host network isolation and account lockdowns following established security playbooks.
• Monitor Web Application Firewalls (WAF) and API gateways for abnormal traffic spikes, suspicious request patterns, and Layer 7 anomalies.

5.Vulnerability & System Patch Management

• Track infrastructure and endpoint vulnerabilities across Linux, Windows, and third-party software.
• Plan, test, and deploy monthly OS patches, kernel updates, and critical security hotfixes during approved off-hours maintenance windows.
• Coordinate patch rollbacks and mitigation steps if updates conflict with production databases or application dependencies.

6.Incident Response & SIEM Monitoring

• Serve as the primary responder for off-hours system outages, database alerts, network interruptions, and high-priority security incidents.
• Monitor enterprise SIEM queues (e.g., Splunk, Microsoft Sentinel) for suspicious authentication attempts, brute-force patterns, and privilege escalation.
• Facilitate swift triage, coordinate with upstream engineering/DBA leads when needed, and lead post-incident Root Cause Analysis (RCA) reporting.

7.Documentation & Continuous Improvement

• Maintain up-to-date Standard Operating Procedures (SOPs), operational runbooks, and shift handover records.
• Track and report on key operational SLAs, including backup success rates, patch compliance percentages, and Mean Time to Resolve (MTTR).

Candidate Qualifications & Skills

• Education: Bachelor’s degree in Computer Science, Information Technology, Electronics, or a related discipline.
• Experience: 2 to 4 years of hands-on experience in Systems Administration, Infrastructure Support, or an integrated SysAdmin / SecOps role.
• Core Technical Competencies:
• OS & Networking: Proficient in Linux and Windows Server administration, Active Directory, DNS, TCP/IP troubleshooting, and basic firewall configurations.
• Database & Backups: Hands-on experience checking database services and locks, combined with practical exposure to enterprise backup solutions (e.g., Veeam, Commvault, AWS Backup, native DB dumps).
• Security Tools: Practical familiarity with EDR/XDR consoles (Palo Alto Cortex XDR preferred) and SIEM alert monitoring.
• Scripting (Advantageous): Working knowledge of Bash, PowerShell, or Python to automate basic health checks and log reviews.
• Work Style: Strong analytical and troubleshooting mindset under incident conditions.
• Flexibility: Willingness to work in rotational shifts and participate in scheduled off-hours/weekend on-call rotations.

Qualifications/Experience

• Associate or Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or equivalent practical experience.
• Relevant industry certifications such as CompTIA Security+, Network+, or (ISC)² SSCP are preferred.
• Familiarity with web application security concepts and common vulnerability scanners (e.g., Nessus, Burp Suite, OWASP ZAP).
• Basic scripting skills (PowerShell, Python, or Bash) for automation and log processing are a plus.
• Experience operating within a SIEM or Security Operations Center (SOC) environment is advantageous.