Sr. System Engineer

Role: System Engineer / Senior System Engineer (L2–L3) Location: Remote / Full-time Shifts: Rotational (24x7 support model / on-call) Experience: 6–12 years Background preference: Tier-1 enterprise / global IT services exposure Role Summary We are looking for a hands-on System Engineer with strong Windows Server + Active Directory L3 depth and VMware operations expertise to support a global enterprise environment.

This is a stakeholder-facing role requiring structured troubleshooting , SLA-based incident handling , vulnerability remediation ownership , and excellent English communication . Key Responsibilities Active Directory / Windows (L3) Troubleshoot and manage AD DS including FSMO roles , AD replication , and DNS in enterprise environments. Deep GPO troubleshooting (inheritance/blocking, loopback processing, WMI filters, replication/SYSVOL issues, gpresult/RSOP analysis).

Implement and maintain access controls aligned to RBAC and least privilege principles. VMware (day-to-day operations) Operate VMware vSphere environments: vCenter health checks , cluster monitoring, alarms, capacity/performance basics. Perform ESXi patching using vLCM/VUM , maintenance mode workflows, and post-patch validation. Manage snapshot lifecycle, support HA/DRS monitoring, and handle vMotion -related operational scenarios.

Patching + Vulnerability Remediation Own Windows patching activities using a named tool ( SCCM/MECM and/or WSUS ; BigFix exposure is a plus). Drive a structured vulnerability remediation lifecycle: scan → severity triage → supersedence check → remediate (patch/manual) → validate → sign-off . Coordinate maintenance windows, change processes, deployment validations, and reporting. Incident / Problem Management Handle P1/P2 incidents with SLA-driven escalation , bridge call initiation, and crisp stakeholder updates.

Produce high-quality RCA with corrective/preventive actions. Author runbooks/SOPs (not just follow) with measurable operational impact (MTTR reduction, fewer repeats, audit readiness). Mandatory Requirements (All Must-Have) AD L3 depth: FSMO, replication, DNS + real GPO troubleshooting experience RBAC: must know the term and explain least privilege/access governance clearly VMware ops depth: vCenter + ESXi patching (vLCM/VUM) + HA/DRS + vMotion (structured day-to-day understanding) Windows patching ownership: hands-on with SCCM/MECM and/or WSUS (planning, deployment, troubleshooting, reporting) Vulnerability remediation: can explain an end-to-end structured process from scan to sign-off Incident escalation + RCA: understands SLA, P1/P2 handling, bridge call logic, and problem management outputs Runbook/SOP authoring: examples with impact English communication: clear, structured, confident (global stakeholder-facing) Scenario-based thinking: can think out loud and troubleshoot step-by-step (not tool listing only) Comfortable working in rotational shifts (remote) Good-to-Have BigFix (IBM BigFix) exposure: relays/fixlets/baselines/deployments Hyper-V exposure PowerShell scripting for triage/automation ITIL / Change Management experience What We Will Evaluate (Interview Focus) RBAC explanation + least privilege approach FSMO roles + failure impact GPO troubleshooting scenarios (inheritance/loopback/WMI/replication) VMware operational depth (vCenter, vLCM/VUM, HA/DRS, vMotion, snapshots) Vulnerability remediation walkthrough (supersedence + validation + sign-off) SLA-based escalation + RCA + runbook authorship Communication clarity and structured thinking #LI-PN1