Systems Engineer

Hong Kong International School; Hong Kong; On-site; HKD 900,000 - 1,300,000; Full time

Job summary

Hong Kong International School is seeking a Systems Engineer to implement, administer, and secure the IT infrastructure across on-premises and cloud environments. The role covers enterprise systems, virtualization, storage, backup, identity, endpoint management, networking, firewalls, and cybersecurity.

The ideal candidate has 5+ years in enterprise IT, strong Windows/Linux, AD, Azure, M365, Entra ID, VMware, SAN/storage and backup experience, plus skills in Juniper, Palo Alto, Cisco ISE, Jamf

Qualifications

• Minimum 5 years of hands-on experience in enterprise systems and infrastructure.
• Strong knowledge of Windows Server, Linux, AD, Azure, M365, Entra ID, VMware, SAN/storage, and backup solutions.
• Experience with Juniper, Palo Alto, Cisco ISE, Intune MDM, Jamf Pro, SIEM and security monitoring.

Responsibilities

• Implement, administer, and maintain Windows Server, Linux, AD, Azure, M365, Entra ID and related services.
• Manage virtualization, SAN/storage, and backup (Veeam) infrastructure.
• Monitor availability, patching, hardening, disaster recovery, and security operations.
• Administer identity, endpoint management, and device security across Windows, macOS and iOS.
• Design and manage enterprise network, firewall policies, VPNs, and logging.
• Support security incident response, vulnerability management, and documentation.

Skills

Troubleshooting

Security

Networking

Windows Server

Linux

Active Directory

Azure

Microsoft 365

Intune MDM

Jamf Pro

VMware

SAN/Storage

Veeam

Networking (Juniper)

Palo Alto Firewalls

Cisco ISE

SIEM / Defender / Cortex

Identity & Access Management

Education

Bachelors in CS / IT / CE

Certifications (Azure / M365 / Identity / Security / Endpoint)

Tools

VMware

Veeam

Juniper equipment

Palo Alto Firewalls

Cisco ISE

Jamf Pro

Microsoft Intune

Entra ID

Azure / M365

SIEM Defender/Cortex

Job description

The Systems Engineer is a hands-on technical role responsible for implementing, administering, maintaining, monitoring, and securing the School's IT infrastructure across on-premises and cloud environments. The role covers enterprise systems, virtualization, storage, backup, identity, endpoint management, networking, firewalls, and cybersecurity technologies to ensure reliable, secure, and resilient IT operations.

KEY AREAS OF RESPONSIBILITY:

Systems and Infrastructure

Implement, administer, and maintain Windows Server, Linux, Active Directory, Azure, Microsoft 365, Entra ID, DNS, DHCP, and related infrastructure services.

Manage VMware virtualization, SAN/storage infrastructure, and Veeam Backup.

Monitor system availability, capacity, and performance; perform upgrades, patching, hardening, backup, recovery, and troubleshooting.

Manage Data Center operation.

Support disaster recovery and infrastructure resilience.

Identity and Endpoint Management

Administer Active Directory and Entra ID identity and access controls, including MFA, SSPR, Conditional Access, and privileged access.

Manage Windows and supported endpoints using Microsoft Intune MDM.

Support MacBook and Apple devices using Jamf Pro.

Troubleshoot identity, endpoint, authentication, and device-management issues.

Network and Firewall

Design, implement, administer, and troubleshoot enterprise LAN/WAN, routing, switching, VLAN, wireless, VPN, and Internet infrastructure.

Manage Juniper networking equipment and enterprise routing and switching technologies.

Implement and administer Palo Alto Networks firewalls, including security policies, NAT, VPN, segmentation, and logging.

Administer Cisco ISE for network access control, authentication, and authorization.

Monitor network availability, performance, capacity, and security and maintain network documentation.

Security Operations Support

Administer and monitor SIEM, Defender/Cortex EDR/XDR, Check Point, vulnerability management, and other security platforms.

Monitor and investigate security alerts, suspicious activities, phishing, malware, endpoint, identity, and network security incidents.

Perform vulnerability scanning, remediation, patch management, and system/network hardening.

Assist with security incident investigation, containment, remediation, and recovery, and maintain operational security documentation.

Projects, Documentation and Other Duties

Evaluate, test, implement, and support infrastructure and cybersecurity technologies and participate in upgrades, migrations, and technology refreshes.

Follow established change management procedures and maintain technical documentation, architecture diagrams, configurations, operational procedures, and recovery procedures.

Coordinate with vendors and service providers for technical implementation and support.

Take an active role in professional development and undertake other duties as required to support IT operations.

Minimum requirements and qualifications:

Education:

University graduate with a degree in Computer Science, Information Technology, Computer Engineering, or related discipline preferred.

Relevant professional certifications are preferred.

Experience:

Minimum 5 years of relevant hands‑on experience in enterprise systems, endpoint management, network infrastructure.

Strong experience with Windows Server, Linux, Active Directory, Azure, Microsoft 365, Entra ID, VMware, SAN/storage, and enterprise backup solutions, preferably Veeam.

Strong knowledge of TCP/IP, routing, switching, VLANs, DNS, DHCP, VPNs, wireless, firewalls, and network security.

Experience with Microsoft Azure and M365.

Experience in supporting Apple and Microsoft products (e.g. Apple OS, Windows OS)

Experience designing, implementing, managing, and administering enterprise routing and switching networks, including hands‑on experience with Juniper equipment.

Experience with Palo Alto Networks firewalls, Cisco ISE, Microsoft Intune MDM, Jamf Pro, SIEM, Defender/Cortex EDR/XDR, Check Point, vulnerability management, and security monitoring.

Certifications:

Relevant Microsoft Azure, Microsoft 365, Identity, Security or Endpoint certification; VMware VCP.

Relevant hands‑on experience and certifications across multiple technical disciplines are preferred.

Required skills:

Strong hands‑on troubleshooting and problem‑solving skills across systems, networks, endpoints, cloud, storage, and security technologies.

Strong security‑focused approach to infrastructure administration, with good documentation, organization, and time‑management skills.

Good written and verbal communication skills in English; Cantonese and Mandarin are also an advantage.

Ability to work independently and collaboratively, handle confidential information professionally, and work outside normal office hours when required.

Willing to work with and support our students and learning community.

Intellectual flexibility, technical curiosity and a sense of humor, including the ability to learn independently.

Child Protection Statement:

At HKIS, each child’s welfare is paramount. We act to ensure that our students enjoy the right to be protected from harm and exploitation and have their welfare safeguarded.

Personal data collected will be used for recruitment purposes only.