Senior System Engineer

OEC; Chennai District; On-site; INR 2,500,000 - 3,600,000; Full time

Job summary

OEC is seeking a Senior Systems Engineer to design, administer, and continuously improve its corporate IT environment. The role spans Windows Server, Microsoft 365, and Entra ID, with identity and access management and endpoint management at the core, expanding into IaC and AWS, all with a security-first approach.

The candidate should have 10+ years in systems engineering, strong PowerShell skills, and hands-on experience with Intune, SCCM/Autopatch, Jamf, and VMware; on-site work in Chennai,

Qualifications

• Bachelor's degree in Information Technology, Computer Science, or related discipline; substitute allowed with equivalent work experience.
• At least 10 years in IT infrastructure or systems engineering, with Microsoft 365, Windows Server, and enterprise identity platforms experience.
• Ability to read/modify PowerShell scripts; modern certifications preferred (e.g., MS-102, Azure Administrator).

Responsibilities

• Administer Windows Server and endpoint environments, including patching and root-cause analysis.
• Manage Microsoft 365 services (Exchange Online, SharePoint, Teams, Entra ID, Intune) and maintain Conditional Access.
• Operate endpoint management tooling (Intune, SCCM/Autopatch, Jamf) including policy and compliance enforcement.
• Maintain DNS, DHCP, SMTP, file services, and Active Directory; contribute to IaC adoption and AWS deployments.
• Read, modify, and troubleshoot PowerShell scripts; leverage AI-assisted authoring tools.
• Prepare runbooks, architecture diagrams, and troubleshooting guides; track work in Jira/JSM.

Skills

Windows Server

Active Directory

PowerShell

Microsoft 365

Entra ID

Intune

Endpoint management

IAM

VMware vSphere/ESXi

Jira/JSM

Education

Bachelor's degree in IT / CS

Tools

Terraform

AWS

SCCM/Autopatch

Jamf

Copilot

Intune

Job description

The Senior Systems Engineer is a hands-on infrastructure role responsible for the design, administration, and continuous improvement of OEC’s corporate IT environment. Scope spans Windows Server, Microsoft 365 and Entra ID, identity and access management, and endpoint management, with active expansion into IaC and AWS. Security is foundational — every system, configuration, and access decision is approached through a security lens. This person operates independently, holds a high standard for documentation, and actively contributes to team growth.

Key Responsibilities & Duties(essential to the job)

• Administer and maintain Windows Server and endpoint environments, including patching, configuration, and root-cause analysis.
• Manage Microsoft 365 services (Exchange Online, SharePoint, Teams, Entra ID, Intune) and maintain Conditional Access posture.
• Operate endpoint management tooling (Intune, SCCM/Autopatch, Jamf) including policy, enrollment, and compliance enforcement.
• Maintain DNS, DHCP, SMTP, file services, and Active Directory (GPO, ADUC).
• Contribute to IaC adoption — reviewing, testing, and authoring configurations as skills develop.
• Support and expand AWS cloud infrastructure deployments.
• Read, modify, and troubleshoot PowerShell scripts; AI-assisted authoring (Copilot, Claude) is available and encouraged.
• Identify access control gaps, configuration risks, and hardening opportunities proactively.
• Author and maintain runbooks, architecture diagrams, and troubleshooting guides; track work in Jira and JSM.
• Participate in on-call rotation for after-hours system emergencies.

Education

A bachelor’s degree from an accredited college or university is required, with a focus in Information Technology, Computer Science, or related discipline. In the absenceof a degree, equivalent work experience directly related to the key responsibilities of the role will be considered as a substitute for the degree.

Experience, Skills and Key Competencies

At least 10 years in systems engineering or IT infrastructure, with demonstrated experience administering Microsoft 365, Windows Server, enterprise identity platforms (Active Directory, Entra ID), and endpoint management (Intune, SCCM, or Jamf). Ability to read and modify PowerShell is required. Modern Microsoft certifications (e.g., MS-102, Azure Administrator) are preferred.

Required Skills

• Windows Server and Active Directory — GPO, ADUC, DNS, DHCP, SMTP, patching, and domain services
• Microsoft 365 — Exchange Online, SharePoint, Teams, Entra ID, Intune, Conditional Access
• Endpoint management — Intune, SCCM/Autopatch, and/or Jamf
• Virtualization — VMware vSphere/ESXi or Hyper-V
• Identity and access management — SSO/IdP, MFA, RBAC, and privileged access concepts
• PowerShell — read and modify scripts; authoring supported by AI tooling
• Mail flow and hygiene — Exchange with platforms such as Mimecast
• Jira and JSM — project tracking and ticketing

Preferred Skills & Team Growth Areas

Candidates who bring the following contribute immediately; those who don’t are expected to grow into them.

Infrastructure as Code (Active Growth Priority)

• Terraform or equivalent IaC tooling
• Version-controlled infrastructure configuration and change pipelines
• HCL, YAML, or JSON declarative configuration
• Hands-on AWS experience for corporate IT or infrastructure workloads
• Networking, IAM, and compute in AWS environments
• AWS certifications (Solutions Architect Associate, SysOps Administrator) are a plus

Travel & Other Considerations

Travel is rare. This position requires availability for after-hours on-call response as part of the team rotation.