Senior Microsoft System Administrator

PT Metrodata Electronics Tbk; Jakarta Pusat; On-site; IDR 400,000,000 - 800,000,000; Full time

Job summary

PT Metrodata Electronics Tbk seeks a senior Windows and Microsoft platform administrator to design, implement, and operate enterprise‑scale Microsoft environments. You will oversee AD, Exchange, SQL Server, SCCM, IIS/SharePoint, and Office 365, focusing on security, patching, and cost optimization.

You will lead cross‑functional collaboration, drive zero‑trust architecture, manage identities (Entra ID) and automation with PowerShell, Graph API, and IaC, while developing documentation and

Qualifications

• 5+ years of experience in Microsoft enterprise environments, including migration or transformation projects.
• Experience maintaining AD, Exchange, SQL Server in large-scale operations.
• Familiar with patching, backups, monitoring, and security posture.

Responsibilities

• Design, implement, automate, harden, and operate Microsoft platforms at enterprise scale.
• Manage identity and access (Entra ID, PIM, Conditional Access).
• Develop documentation (HLD/LLD, SOP, KB) and conduct knowledge transfer.
• Work cross-team with ITIL practices and DevOps/SRE if relevant.

Skills

PowerShell

Graph API

Entra ID

Zero Trust

Cross-team communication

Education

Microsoft 365 Fundamentals (MS-900)

Azure Fundamentals (AZ-900)

Microsoft 365 Administrator (MS-102)

Microsoft Certified: Endpoint Administrator Associate (MD-102)

Tools

Active Directory

Exchange Server

SQL Server

SCCM

IIS/SharePoint

Job description

Responsibilities

• Install, configure, harden and maintain Windows Server systems securely according to company standards.
• Maintain Microsoft product systems and databases in scope:
  • a) Active Directory: maintain AD users and computers via GUI or PowerShell; set policies via GPO and PowerShell scripts.
  • b) DNS & DHCP Server: maintain updated DNS and DHCP services.
  • c) Exchange Server: monitor, configure, distribute mailboxes and in‑place archives; reconfigure inter‑server connectivity, load balancing; monitor mailbox growth, capacity, logs and backups; install new servers; handle SSL certificates.
  • d) Windows Server: monitor resource allocation, health parameters, services, components, alerts; evaluate and install patches and updates.
  • e) Microsoft SQL Server: install and configure new database systems.
  • f) Windows Server Update Services (WSUS) & Patch Management: synchronize updates, classify, test and approve updates before deployment; monitor patch compliance.
  • g) System Center Configuration Manager (SCCM): update device data, topology; install and configure new servers.
  • h) Web Application Server (IIS), SharePoint, Project Server: manage data growth, logs and archiving; install modules and services for .NET applications; configure new systems.
  • i) Assist in Microsoft assessment, patch/fix/upgrades and security deployment following company change management processes.
  • j) Create corporate error reporting in Microsoft environment and provide solutions for system failures.
  • k) Implement Secure Productive Enterprise: Windows 11 Enterprise, Office 365, Enterprise Mobile and Security.
  • l) Roadmap implementation of Office 365 features.
• Design, implement, automate, harden, and operate Microsoft platforms at enterprise scale.
• Hold fundamental certifications such as Microsoft 365 Fundamentals (MS‑900) or Azure Fundamentals (Z‑900).
• Hold Microsoft 365 Administrator (MS‑102) or Microsoft Certified: Endpoint Administrator Associate (MD‑102).
• Minimum five years experience in Microsoft enterprise environments, including migration or transformation projects and large‑scale daily operations, especially Exchange Server and Active Directory.
• Design and build Microsoft environment architecture (Platform & Infrastructure) per best practice and Zero Trust.
• Manage identity and access (Entra ID, PIM, Conditional Access).
• Handle monitoring, incident/problem management, patching, backup/DR and cost optimization.
• Create automation with PowerShell, Graph API and IaC (Bicep/Terraform).
• Develop documentation (HLD/LLD, SOP, KB) and conduct knowledge transfer.
• Work cross‑team (Infra, Security, Apps, Network, IT Support) with ITIL practices and DevOps/SRE if relevant.
• Problem solve, communicate cross‑functionally, and make decisions using data such as telemetry and logs.
• Manage stakeholders and vendors, and present and train users and engineers.