Systems Engineer

The Systems Engineer is a hands-on technical role responsible for implementing, administering, maintaining, monitoring, and securing the School's IT infrastructure across on-premises and cloud environments. The role covers enterprise systems, virtualization, storage, backup, identity, endpoint management, networking, firewalls, and cybersecurity technologies to ensure reliable, secure, and resilient IT operations.

KEY AREAS OF RESPONSIBILITY:

Systems and Infrastructure

• Implement, administer, and maintain Windows Server, Linux, Active Directory, Azure, Microsoft 365, Entra ID, DNS, DHCP, and related infrastructure services.

• Manage VMware virtualization, SAN/storage infrastructure, and Veeam Backup.

• Monitor system availability, capacity, and performance; perform upgrades, patching, hardening, backup, recovery, and troubleshooting.

• Manage Data Center operation.

• Support disaster recovery and infrastructure resilience.

Identity and Endpoint Management

• Administer Active Directory and Entra ID identity and access controls, including MFA, SSPR, Conditional Access, and privileged access.

• Manage Windows and supported endpoints using Microsoft Intune MDM.

• Support MacBook and Apple devices using Jamf Pro.

• Troubleshoot identity, endpoint, authentication, and device-management issues.

Network and Firewall

• Design, implement, administer, and troubleshoot enterprise LAN/WAN, routing, switching, VLAN, wireless, VPN, and Internet infrastructure.

• Manage Juniper networking equipment and enterprise routing and switching technologies.

• Implement and administer Palo Alto Networks firewalls, including security policies, NAT, VPN, segmentation, and logging.

• Administer Cisco ISE for network access control, authentication, and authorization.

• Monitor network availability, performance, capacity, and security and maintain network documentation.

Security Operations Support

• Administer and monitor SIEM, Defender/Cortex EDR/XDR, Check Point, vulnerability management, and other security platforms.

• Monitor and investigate security alerts, suspicious activities, phishing, malware, endpoint, identity, and network security incidents.

• Perform vulnerability scanning, remediation, patch management, and system/network hardening.

• Assist with security incident investigation, containment, remediation, and recovery, and maintain operational security documentation.

Projects, Documentation and Other Duties

• Evaluate, test, implement, and support infrastructure and cybersecurity technologies and participate in upgrades, migrations, and technology refreshes.

• Follow established change management procedures and maintain technical documentation, architecture diagrams, configurations, operational procedures, and recovery procedures.

• Coordinate with vendors and service providers for technical implementation and support.

• Take an active role in professional development and undertake other duties as required to support IT operations.

Other

• Undertake other duties and functions as required that will impact and strengthen the contributions of the department and overall operations of the school.

Minimum requirements and qualifications:

Education:

• University graduate with a degree in Computer Science, Information Technology, Computer Engineering, or related discipline preferred.

• Relevant professional certifications are preferred.

Experience:

• Minimum 5 years of relevant hands-on experience in enterprise systems, endpoint management, network infrastructure.

• Strong experience with Windows Server, Linux, Active Directory, Azure, Microsoft 365, Entra ID, VMware, SAN/storage, and enterprise backup solutions, preferably Veeam.

• Strong knowledge of TCP/IP, routing, switching, VLANs, DNS, DHCP, VPNs, wireless, firewalls, and network security.

• Experience with Microsoft Azure and M365.

• Experience in supporting Apple and Microsoft products (e.g. Apple OS, Windows OS)

• Experience designing, implementing, managing, and administering enterprise routing and switching networks, including hands-on experience with Juniper equipment.

• Experience with Palo Alto Networks firewalls, Cisco ISE, Microsoft Intune MDM, Jamf Pro, SIEM, Defender/Cortex EDR/XDR, Check Point, vulnerability management, and security monitoring.

Certifications:

• Relevant Microsoft Azure, Microsoft 365, Identity, Security or Endpoint certification; VMware VCP.

• Relevant hands-on experience and certifications across multiple technical disciplines are preferred.

Required skills:

• Strong hands-on troubleshooting and problem-solving skills across systems, networks, endpoints, cloud, storage, and security technologies.

• Strong security-focused approach to infrastructure administration, with good documentation, organization, and time-management skills.

• Good written and verbal communication skills in English; Cantonese and Mandarin are also an advantage.

• Ability to work independently and collaboratively, handle confidential information professionally, and work outside normal office hours when required.

• Willing to work with and support our students and learning community.

• Intellectual flexibility, technical curiosity and a sense of humor, including the ability to learn independently.

Child Protection Statement:

• At HKIS, each child’s welfare is paramount. We act to ensure that our students enjoy the right to be protected from harm and exploitation and have their welfare safeguarded.

TO APPLY

We invite you to learn more about our school and discover for yourself career opportunities in our remarkable HKIS community at www.hkis.edu.hk

Interested candidates please forward your updated resume together with a cover letter and references to 立即應徵

We look forward to hearing from you!

Personal data collected will be used for recruitment purposes only.