System Engineer, Corporate IT Engineering and Technology São Paulo Experienced (Individual Contributor) Corporate IT

SEA Singapore; São Paulo; On-site; BRL 180,000 - 240,000; Full time

Job summary

SEA Singapore is seeking an IT Operations Engineer in Brazil to oversee endpoint management, device provisioning, and lifecycle for Windows, macOS, Android, and iPadOS. You will administer core infrastructure, virtualization, backups, and security workflows while coordinating with regional teams and vendors.

Strong scripting in PowerShell and Python, plus experience with Workspace ONE, Azure AD, and Meraki, are essential for automation and reporting.

Qualifications

• 4+ years in IT systems administration or infrastructure support.
• Strong experience with Windows and macOS endpoint administration.
• Proficient in enterprise MDM and identity services.
• Ability to develop and maintain runbooks and documentation.

Responsibilities

• Endpoint management and device operations across Windows, macOS, and mobile devices.
• Systems administration including AD/Entra ID, DNS, DHCP, VPN, and VLANs.
• Security operations, vulnerability management, and compliance support.
• Scripting and tooling to automate recurring tasks using PowerShell and Python.
• Reporting and governance through structured dashboards for IT leadership.

Skills

PowerShell

Python

Documentation

Troubleshooting

Tools

Workspace ONE

Google MDM

Azure AD

Veeam

ESXi/vCenter

Meraki

Cisco WLC

Job description

Core Responsibilities: Endpoint Management & Device Operations

• Administer and troubleshoot Windows, macOS, Android, iOS/iPadOS, and shared operational devices across the Brazil Corporate IT environmen
• Manage device provisioning, enrollment, staging, policy deployment, compliance validation, and lifecycle using Workspace ONE UEM, Google MDM, Android Zero Touch, and Lenovo provisioning flow
• Support corporate laptops, shared warehouse devices, PDAs, Zebra/Newland scanners, iPads, Zoom Rooms equipment, printers, and other operational endpoint
• Resolve endpoint issues involving enrollment failures, policy conflicts, device ownership and user assignment, Wi-Fi and certificate profiles, kiosk/launcher behavior, VPN access, application behavior, and OS configuratio
• Maintain standardized profiles, sensors, and operational procedures to keep endpoint configuration consistent and auditabl

Systems Administration & Infrastructure Support

• Support and troubleshoot core infrastructure services: Active Directory, Entra ID / Azure AD synchronization, DNS, DHCP, NPS, VPN, certificates, VLANs, and wireless network
• Administer virtualization and server infrastructure including ESXi/vCenter, iDRAC, and FOG imaging, and coordinate on Meraki and Cisco WLC network service
• Manage server backup and recovery — monitoring backup jobs, diagnosing failures, and validating restores — using Veeam and related backup/troubleshooting tool
• Investigate incidents involving DHCP scope behavior, VPN connectivity, wireless authentication, firewall/proxy restrictions, SSL/port conflicts, site-to-site connectivity, and server reachabilit
• Work with local and regional infrastructure teams to validate service availability, collect evidence, execute diagnostics, interpret logs, and drive escalation when require
• Maintain infrastructure governance by documenting service owners, dependencies, operational risks, and troubleshooting runbooks

Security Operations & Compliance Support

• Support vulnerability management, endpoint security, EDR visibility, patch tracking, and security baseline validation across Windows and macOs
• Identify which findings are addressable through OS/application updates, configuration changes, ownership transfers, compensating controls, or vendor limitations
• Produce vulnerability reports that separate actionable items from exceptions, no-fix scenarios, expired/reopened findings, and ownership constraints
• Support security-related access flows: VPN access, corporate device validation, system/network access tickets, certificate/NPS troubleshooting, and Zero Trust investigations

Scripting & Operational Tooling

• Maintain and extend operational scripts and integrations using PowerShell, Python, shells scripting, and platform APIs to keep recurring tasks reliable and repeatable
• Support endpoint inventory reporting, SLA/ticket analysis, device diagnostics, and operational notification
• Build scripting with logging, error handling, and clear documentation so processes can be handed over to and maintained by Helpdesk analysts and other IT team
• Integrate operational data across systems such as Meraki APIs, Workspace ONE, and vCenter where it improves visibility and reduces manual effort

Reporting, Documentation & Governance

• Produce structured reports and dashboards for Corporate IT leadership, local management, Helpdesk teams, and regional stakeholders
• Report on SLA breaches, ticket volume, vulnerability posture, patch status, onboarding readiness, device health, and recurring incident patterns
• Translate raw technical data into management-ready summaries with clear status, impact, ownership, next steps, and recommended action
• Use documentation and reporting to improve accountability, demonstrate operational control, and track responsibility across team

Job Description

Core Responsibilities: Endpoint Management & Device Operations

• Administer and troubleshoot Windows, macOS, Android, iOS/iPadOS, and shared operational devices across the Brazil Corporate IT environmen
• Manage device provisioning, enrollment, staging, policy deployment, compliance validation, and lifecycle using Workspace ONE UEM, Google MDM, Android Zero Touch, and Lenovo provisioning flow
• Support corporate laptops, shared warehouse devices, PDAs, Zebra/Newland scanners, iPads, Zoom Rooms equipment, printers, and other operational endpoint
• Resolve endpoint issues involving enrollment failures, policy conflicts, device ownership and user assignment, Wi-Fi and certificate profiles, kiosk/launcher behavior, VPN access, application behavior, and OS configuratio
• Maintain standardized profiles, sensors, and operational procedures to keep endpoint configuration consistent and auditabl

Systems Administration & Infrastructure Support

• Support and troubleshoot core infrastructure services: Active Directory, Entra ID / Azure AD synchronization, DNS, DHCP, NPS, VPN, certificates, VLANs, and wireless network
• Administer virtualization and server infrastructure including ESXi/vCenter, iDRAC, and FOG imaging, and coordinate on Meraki and Cisco WLC network service
• Manage server backup and recovery — monitoring backup jobs, diagnosing failures, and validating restores — using Veeam and related backup/troubleshooting tool
• Investigate incidents involving DHCP scope behavior, VPN connectivity, wireless authentication, firewall/proxy restrictions, SSL/port conflicts, site-to-site connectivity, and server reachabilit
• Work with local and regional infrastructure teams to validate service availability, collect evidence, execute diagnostics, interpret logs, and drive escalation when require
• Maintain infrastructure governance by documenting service owners, dependencies, operational risks, and troubleshooting runbooks

Security Operations & Compliance Support

• Support vulnerability management, endpoint security, EDR visibility, patch tracking, and security baseline validation across Windows and macOs
• Identify which findings are addressable through OS/application updates, configuration changes, ownership transfers, compensating controls, or vendor limitations
• Produce vulnerability reports that separate actionable items from exceptions, no-fix scenarios, expired/reopened findings, and ownership constraints
• Support security-related access flows: VPN access, corporate device validation, system/network access tickets, certificate/NPS troubleshooting, and Zero Trust investigations

Scripting & Operational Tooling

• Maintain and extend operational scripts and integrations using PowerShell, Python, shells scripting, and platform APIs to keep recurring tasks reliable and repeatable
• Support endpoint inventory reporting, SLA/ticket analysis, device diagnostics, and operational notification
• Build scripting with logging, error handling, and clear documentation so processes can be handed over to and maintained by Helpdesk analysts and other IT team
• Integrate operational data across systems such as Meraki APIs, Workspace ONE, and vCenter where it improves visibility and reduces manual effort

Reporting, Documentation & Governance

• Produce structured reports and dashboards for Corporate IT leadership, local management, Helpdesk teams, and regional stakeholders
• Report on SLA breaches, ticket volume, vulnerability posture, patch status, onboarding readiness, device health, and recurring incident patterns
• Translate raw technical data into management-ready summaries with clear status, impact, ownership, next steps, and recommended action
• Use documentation and reporting to improve accountability, demonstrate operational control, and track responsibility across team

Requirements

• 4+ years in IT systems administration or infrastructure support, with Level 2 / escalation-capable experience
• Strong hands-on knowledge of Windows and macOS endpoint administration and enterprise MDM (Workspace ONE or comparable)
• Solid TCP/IP networking fundamentals: DNS, DHCP, VLANs, VPN, and wireless authentication
• Working experience with directory and identity services (Active Directory, Entra ID) and access/certificate flows
• Experience administering and troubleshooting server backup and recovery (e.g., Veeam), including restore validation
• Scripting ability (PowerShell and/or Python) for operational tasks, reporting, and diagnostics
• Proven ability to independently troubleshoot complex, cross-domain technical issues
• Strong documentation and reporting skills; able to turn technical findings into clear management summaries
• Portuguese fluency and working English for regional and headquarters collaboration