About the job
You will keep our infrastructure available and secure: HPE servers and storage, Fibre Channel SAN, VMware, Windows and Linux servers, Microsoft 365, SCCM/MECM and enterprise backups.
Full-time, 5 days a week, in Baku (Badamdar settlement).
Salary: 3,000–4,000 AZN, based on experience.
Benefits: medical insurance.
How to apply: send your CV to [email protected] with the subject line "Middle System Administrator".
Responsibilities
- Administer Windows Server, Active Directory, Group Policy, DNS, DHCP, file servers and NTFS/SMB permissions; support Entra ID integration.
- Administer VMware or Hyper-V: VMs, resources, virtual networking, HA/DRS/vMotion and performance.
- Maintain servers, RAID, SAN/NAS and iSCSI; handle HPE hardware, iLO and firmware; troubleshoot Fibre Channel zoning, LUNs and multipathing.
- Run Veeam jobs, investigate failures, perform file- and VM-level restores; maintain backup retention, immutable/off-site copies and DR procedures to RPO/RTO targets.
- Maintain network services and firewall policies; troubleshoot VLAN, routing, NAT and VPN issues; secure remote access.
- Support MFA, privileged account management and Conditional Access.
- Administer Microsoft 365 and Exchange Online: users, mailboxes, groups, licences; troubleshoot mail flow and SPF, DKIM, DMARC.
- Administer Linux servers: services, SSH, scheduled tasks, logs and storage.
- Automate routine tasks with PowerShell and Bash.
- Monitor health and performance; apply patches and vulnerability fixes; investigate incidents and find root causes.
- Follow change management, risk assessment and SLA requirements; keep diagrams, configuration records and documentation current; run regular recovery tests.
Minimum qualifications
- 3–5 years in system administration or IT infrastructure.
- Windows Server 2016–2025 and Active Directory: Group Policy, DNS, DHCP, OUs, domain controllers, replication.
- VMware vSphere/ESXi/vCenter and/or Microsoft Hyper-V.
- Enterprise servers, RAID, SAN/NAS storage and iSCSI.
- Veeam Backup & Replication, backup monitoring and data recovery.
- Networking: TCP/IP, subnetting, VLANs, routing, switching, NAT, VPN and firewall troubleshooting.
- Linux servers (Ubuntu, Debian or RHEL-based).
- Microsoft 365, Exchange Online and Microsoft Entra ID.
- PowerShell or Bash scripting.
- Monitoring, patch management, security hardening, MFA and least-privilege access.
- Strong troubleshooting skills; able to work independently and document procedures; team player.
Preferred qualifications
- HPE ProLiant, iLO, MSA and Primera/3PAR experience.
- Fibre Channel SAN: zoning, WWPNs, LUN mapping, multipathing.
- VMware HA, DRS and vMotion; Veeam immutable backups and disaster recovery testing.
- Entra ID hybrid identity, Conditional Access, Microsoft 365 security, Azure and Defender.
- SCCM/MECM software deployment and patching; WSUS; Failover Clustering.
- FortiGate, Cisco or MikroTik firewalls; Zabbix, PRTG or Grafana monitoring.
- ITIL, ISO 27001 and change management; relevant Microsoft, VMware, Veeam, HPE, Cisco or Fortinet certifications.
