System Administrator

Aivantage Global; Ahmedabad District; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

Aivantage Global is seeking a Systems Administrator to manage and secure a hybrid infrastructure spanning on-premises systems, Microsoft 365, Azure, and AWS. You will own security controls, SOC 2 and ISO 27001:2022 compliance, and coordinate with vendors for third-party risk management.

You will ensure operational health, security posture, and audit readiness while delivering end-user support and ongoing compliance across WatchGuard, Seqrite, and cloud services.

Qualifications

• 4-7+ years of hands-on Systems Administration experience in hybrid or multi-cloud environments.
• Strong experience with Microsoft 365 (Office 365), Azure, and AWS.
• Proven security and compliance focus (SOC 2 and ISO 27001:2022) with vendor coordination.

Responsibilities

• Administer and secure hybrid cloud and on-prem infrastructure (M365, Azure AD Entra, AWS).
• Manage WatchGuard Firewall, endpoint protection (Seqrite), and security hardening.
• Lead security controls, audit readiness, and ISMS improvement.
• Coordinate with vendors for TPRM, risk assessments, and attestations.
• Provide end-user support, document processes, and train staff.
• Oversee backup, DR activities, and recovery procedures.

Skills

Microsoft 365

Azure

AWS

WatchGuard

Seqrite

SOC 2

ISO 27001

TPRM

End-user support

Security hardening

Tools

PowerShell

Graph API

Bash

Python

Infrastructure-as-Code

Job description

Job Summary

We are seeking a modern Systems Administrator to manage and secure our hybrid infrastructure spanning on-premises systems, Microsoft 365 (Office 365), Azure, and AWS. This role combines traditional systems administration with strong ownership of security controls, SOC 2 and ISO 27001:2022 compliance, Third-Party Risk Management (TPRM), and coordination with vendors and Cloud Service Providers.

You will ensure the operational health, security posture, and audit readiness of our environment - including Microsoft 365, WatchGuard Firewall, and Seqrite Antivirus - while delivering reliable end-user support and continuous compliance.

Key Responsibilities

Microsoft 365, Cloud Hybrid Infrastructure Management

• Administer, configure, and optimize Microsoft 365 (Office 365) services including Exchange Online, SharePoint Online, OneDrive, Teams, Intune, and related collaboration/security features.
• Manage hybrid identity and access through Microsoft Entra ID (Azure AD) integrated with on-premises Active Directory.
• Administer infrastructure across Azure and AWS (compute, storage, networking, identity) as well as on-premises servers, storage, and virtualization platforms.
• Provision, harden, and maintain cloud and on-prem resources following least-privilege and security best practices.
• Monitor performance, capacity, availability, and costs using native tools (Microsoft 365 Admin Center, Azure Monitor, AWS CloudWatch, etc.).
• Automate routine tasks using PowerShell, Graph API, Bash, Python, or Infrastructure-as-Code where applicable.

Network Perimeter Security

• Manage and maintain WatchGuard Firewall appliances and configurations, including rule sets, VPN, intrusion prevention, traffic monitoring, and policy enforcement.
• Oversee network infrastructure (routers, switches, wireless access points, VPNs) and troubleshoot connectivity/security issues.
• Ensure secure remote access and network segmentation aligned with compliance requirements.

Endpoint Antivirus Security

• Administer and maintain Seqrite Antivirus (endpoint protection, policy management, threat detection, reporting, and updates) across the environment.
• Oversee endpoint security posture, malware protection, and integration with Microsoft 365 / Intune device management where applicable.

Security, Compliance Audit Support (SOC 2 / ISO 27001:2022)

• Implement, maintain, and evidence technical controls required for SOC 2 Type II and ISO 27001:2022.
• Support internal and external audits through evidence collection, control documentation, auditor responses, and remediation tracking.
• Manage identity access (Microsoft Entra ID / Azure AD, AWS IAM), Conditional Access, MFA, Privileged Access Management, logging, encryption, and security baselines across Microsoft 365, Azure, AWS, and on-prem systems.
• Conduct vulnerability management, patching, configuration hardening (CIS Benchmarks), and regular security assessments.
• Contribute to risk assessments, gap analysis, and continuous improvement of the Information Security Management System (ISMS).

Third-Party Risk Management (TPRM) Vendor Coordination

• Perform and support due diligence for vendors, SaaS providers, and Cloud Service Providers (CSPs), including security reviews and questionnaire responses.
• Coordinate with Microsoft, Azure, AWS, WatchGuard, Seqrite, and other vendors on support cases, security advisories, shared-responsibility model, and ongoing risk monitoring.
• Maintain vendor access reviews and track third-party security certifications/attestations.
• Partner with Security, GRC, Legal, and Procurement teams on TPRM processes.

End-User Support Training

• Provide timely and effective technical support to end-users across Microsoft 365, endpoints, network access, and related systems.
• Respond to support requests, troubleshoot and resolve hardware, software, connectivity, and access issues promptly.
• Act as an escalation point for complex user issues (Tier 2/3) while ensuring a positive user experience.
• Create and maintain clear documentation, knowledge base articles, and user guides.
• Train employees on best practices for system usage, data security, Microsoft 365 tools, and security awareness.

Backup, Disaster Recovery Operational Excellence

• Own backup, restore, and disaster recovery processes for Microsoft 365, cloud, and on-prem systems; regularly test recovery procedures to meet RTO/RPO objectives.
• Maintain high-quality system documentation, runbooks, and operational procedures.
• Participate in change management, incident response, and post-incident reviews.
• Support cloud migration, Microsoft 365 optimization, modernization, and security enhancement projects.

Required Qualifications Skills

• 4-7+ years of hands-on Systems Administration experience in hybrid or multi-cloud environments.
• Strong practical experience administering Microsoft 365 (Office 365) - including Exchange Online, SharePoint, Teams, OneDrive, Intune, and Entra ID / Azure AD.
• Hands-on experience with Microsoft Azure and/or Amazon Web Services.
• Proven experience managing WatchGuard Firewall (configuration, policies, VPN, monitoring, troubleshooting).
• Experience administering Seqrite Antivirus or similar enterprise endpoint protection platforms.
• Demonstrated experience supporting SOC 2 and/or ISO 27001:2022 (control implementation, evidence collection, audit support).
• Solid understanding of Third-Party Risk Management (TPRM) and vendor security assessments.
• Strong end-user support skills with a customer-service mindset and ability to communicate technical issues clearly to non-technical users.
• Strong skills in identity management, networking, Windows/Linux servers, and security hardening.
• Excellent documentation, communication, and cross-functional collaboration skills.

Preferred / Nice-to-Have

• Certifications such as:
  • Microsoft 365 Certified: Administrator Expert or Modern Desktop Administrator
  • Microsoft Certified: Azure Administrator Associate (AZ-104) or Azure Security Engineer (AZ-500)
  • AWS Certified SysOps Administrator - Associate
  • CompTIA Security+ / CySA+
  • WatchGuard-related certifications or training
  • ISO 27001 or SOC 2 related training/experience
• Experience with Infrastructure-as-Code, automation, SIEM/EDR tools, Microsoft Defender, or AWS Security Hub.
• Prior experience in a regulated or audit-heavy environment.