System Administrator / IT Security Engineer

We are looking for a skilled System Administrator with strong hands-on experience in system hardening, endpoint security, and network controls to manage and secure our company laptops, desktops, and internal IT infrastructure.

Location: On-site / Hybrid

Experience: 2–3 years

Type: Full-time / Contract (open to discussion)

Key Responsibilities

Antivirus

Perform OS & System Hardening (Windows/Linux/MAC) as per security best practices (CIS preferred)

Implement Printer hardening and peripheral control policies

Configure USB / Pendrive restrictions and external device controls

Apply Network hardening including firewall rules, access controls, and VPN policies

Block unwanted URLs, websites, and applications

Enable login & logout tracking, activity logging, and audit trails on laptops

Configure and manage domain-based email setup, access controls, and sharing restrictions

Centralize admin/root access with controlled privileges from an admin system

Restrict installation of unauthorized or external software

Monitor systems for compliance, misconfigurations, and security gaps

Maintain documentation, policies, and system security standards

Required Skills

2–3 years experience as a System Administrator / IT Security / Endpoint Security Engineer

Strong knowledge of:

Windows OS hardening (Group Policy, registry, security baselines)

Basic Linux administration

Network security fundamentals (firewalls, VPNs, DNS filtering)

Endpoint security tools and access control

Experience with email domain configuration (Google Workspace / Microsoft 365 preferred)

Understanding of CIS Benchmarks and security best practices

Ability to enforce IT policies in real-world office environments

Nice to Have

Experience in startups or fast-growing environments

Knowledge of compliance or audit requirements

Familiarity with MDM, endpoint management, or zero-trust concepts

Why Join Us

Ownership of end-to-end IT security

Direct impact on company security posture

Opportunity to design and implement real security systems (not just maintain)

Interested candidates can apply or DM directly with their profile and experience details.