Role & responsibilities

Monitoring, RMM and alert response

- Daily driver on our RMM platform [NinjaOne / Datto RMM / ConnectWise Automate / N-able name yours]: patching policies, scripting, monitor configuration, automation
- Zabbix building templates, triggers and thresholds that produce actionable alerts rather than noise
- Owning the alert queue — triaging what comes in, resolving what you can, escalating what you cannot, and permanently killing alerts that never mattered
- Tuning monitoring so recurring false positives get fixed at the source instead of muted

Firewalls, networking and VPN

- Sophos firewalls — rules, NAT, web and application filtering, IPS, and Sophos Central administration
- pfSense / OPNsense — configuration, upgrades, high availability and troubleshooting
- IPsec site-to-site tunnels — building them, and more importantly diagnosing why phase 1 or phase 2 dropped
- SSL VPN — remote access configuration, certificate handling, client-side troubleshooting
- Core networking judgment: VLANs, routing, NAT, DNS, and reading a packet capture when it comes to that

Virtualization and servers

- VMware (vSphere / ESXi) — host and cluster administration, storage, patching, upgrades
- Proxmox — cluster management, backups, ZFS and storage, VM and container administration
- Windows Server 2016 to 2019 upgrades — in-place and migration paths, AD and domain controller role handling, application compatibility, and a real rollback plan
- General Windows Server administration: Active Directory, group policy, DNS, DHCP, certificates, file services

Identity and Microsoft 365

- Microsoft 365 tenant administration — Exchange Online, mail flow and mail security, SharePoint and OneDrive, licensing
- Entra ID (Azure AD)



— Entra Connect / AD Connect sync, conditional access, MFA, hybrid identity
- Diagnosing sync failures, duplicate objects and hybrid identity problems that do not show up cleanly in the portal

Backup and recovery

- Veeam — Backup & Replication and Microsoft 365 backup: job design, repository management, failure triage
- Restore testing — actually performing test restores on a schedule, not assuming green jobs mean recoverable data
- Understanding each client’s RPO and RTO, and knowing where the real gaps are

Documentation

- IT Glue — you keep it accurate. Passwords, configurations, network diagrams and runbooks stay current because you update them as you work, not in a quarterly cleanup sprint
- Writing documentation an L1 engineer can follow without calling you

Preferred candidate profile

Required

- [3-10]+ years in systems administration, with meaningful time in an MSP or multi-client setting
- Hands-on depth across the stack above we will test this in interview
- Proven experience supporting North American or other overseas clients
- Excellent written and spoken English; you will speak directly to Canadian and US clients
- The judgment to work independently — for most of your shift, you are the senior engineer on duty
- Clear written handover discipline, so the North American team picks up exactly where you left off
- Documentation discipline — a genuine requirement here, not a bullet point

Strongly preferred

- Certifications: [Sophos Certified Engineer or Architect, VMware VCP, Microsoft AZ-800 or AZ-104, Veeam VMCE, CCNA]
- Experience running or improving a NOC alert queue
- Scripting in PowerShell and/or Bash for automation
- Experience migrating clients between platforms — on-premises to cloud, Hyper-V to VMware or Proxmox

📌 Senior Systems Engineer (India)
🏢 Vusixsystems
📍 India