[Hiring] Systems Engineer @Foundever®

Role Description

We are looking for a hands-on System Engineer with strong Windows Server + Active Directory L3 depth and VMware operations expertise to support a global enterprise environment. This is a stakeholder-facing role requiring:

• Structured troubleshooting
• SLA-based incident handling
• Vulnerability remediation ownership
• Excellent English communication

Key Responsibilities

• Active Directory / Windows (L3)
  • Troubleshoot and manage AD DS including FSMO roles, AD replication, and DNS in enterprise environments.
  • Deep GPO troubleshooting (inheritance/blocking, loopback processing, WMI filters, replication/SYSVOL issues, gpresult/RSOP analysis).
  • Implement and maintain access controls aligned to RBAC and least privilege principles.
• VMware (day-to-day operations)
  • Operate VMware vSphere environments: vCenter health checks, cluster monitoring, alarms, capacity/performance basics.
  • Perform ESXi patching using vLCM/VUM, maintenance mode workflows, and post-patch validation.
  • Manage snapshot lifecycle, support HA/DRS monitoring, and handle vMotion-related operational scenarios.
• Patching + Vulnerability Remediation
  • Own Windows patching activities using a named tool (SCCM/MECM and/or WSUS; BigFix exposure is a plus).
  • Drive a structured vulnerability remediation lifecycle: scan → severity triage → supersedence check → remediate (patch/manual) → validate → sign-off.
  • Coordinate maintenance windows, change processes, deployment validations, and reporting.
• Incident / Problem Management
  • Handle P1/P2 incidents with SLA-driven escalation, bridge call initiation, and crisp stakeholder updates.
  • Produce high-quality RCA with corrective/preventive actions.
  • Author runbooks/SOPs (not just follow) with measurable operational impact (MTTR reduction, fewer repeats, audit readiness).

Qualifications

• AD L3 depth: FSMO, replication, DNS + real GPO troubleshooting experience
• RBAC: must know the term and explain least privilege/access governance clearly
• VMware ops depth: vCenter + ESXi patching (vLCM/VUM) + HA/DRS + vMotion (structured day-to-day understanding)
• Windows patching ownership: hands-on with SCCM/MECM and/or WSUS (planning, deployment, troubleshooting, reporting)
• Vulnerability remediation: can explain an end-to-end structured process from scan to sign-off
• Incident escalation + RCA: understands SLA, P1/P2 handling, bridge call logic, and problem management outputs
• Runbook/SOP authoring: examples with impact
• English communication: clear, structured, confident (global stakeholder-facing)
• Scenario-based thinking: can think out loud and troubleshoot step-by-step (not tool listing only)
• Comfortable working in rotational shifts (remote)

Good-to-Have

• BigFix (IBM BigFix) exposure: relays/fixlets/baselines/deployments
• Hyper-V exposure
• PowerShell scripting for triage/automation
• ITIL / Change Management experience

What We Will Evaluate (Interview Focus)

• RBAC explanation + least privilege approach
• FSMO roles + failure impact
• GPO troubleshooting scenarios (inheritance/loopback/WMI/replication)
• VMware operational depth (vCenter, vLCM/VUM, HA/DRS, vMotion, snapshots)
• Vulnerability remediation walkthrough (supersedence + validation + sign-off)
• SLA-based escalation + RCA + runbook authorship
• Communication clarity and structured thinking