Senior System Engineer (WINDOWS)

Our client is a well known leading IT provider in Malaysia and currently looking for a Senior System Engineer (WINDOWS) in Department Information Technology. This role Reports to Asst. Manager-System Engineering. The Senior System Engineer (Windows & Microsoft 365) is responsible for the administration, security, automation, performance, and operational resilience of enterprise Microsoft technology platforms across on-premises, VMware, AWS, Azure, private cloud, and Microsoft 365 environments.

The role serves as the subject matter expert for Windows Server, Active Directory, Microsoft 365, and related infrastructure technologies, ensuring systems remain secure, available, recoverable, and compliant with organizational and regulatory requirements. The incumbent will lead infrastructure initiatives, drive automation and standardization, support business-critical platforms, and provide technical leadership for infrastructure modernization, operational improvements, cybersecurity, and resilience program Key Responsibilities Windows Infrastructure, Cloud & Platform Engineering Administer, maintain, monitor, troubleshoot, and optimize Windows Server environments across physical, VMware, AWS, Azure, and private cloud platforms.

Manage operating system installation, configuration, upgrades, patching, server builds, and lifecycle management. Administer and support Microsoft Active Directory, Group Policy (GPO), DNS, DHCP. Perform system capacity planning, performance tuning, health monitoring, and availability management. Administer, maintain, troubleshoot, upgrade, and migrate Windows-hosted applications and web platforms, including Microsoft IIS and related middleware components.

Administer and support Microsoft 365 services including Exchange Online, Microsoft Entra ID (Azure AD), Microsoft Teams, SharePoint Online, OneDrive, and related collaboration services. Manage hybrid identity integration between on-premises Active Directory and Microsoft Entra ID, including synchronization and authentication services.

Administer user lifecycle management, mailbox provisioning, license management, distribution groups, shared mailboxes, and Microsoft 365 platform configurations. Support enterprise monitoring and observability platforms including Grafana, Cloud. Watch, Azure Monitor, and other infrastructure monitoring solutions. Windows Security, Compliance & Automation Execute server patching, vulnerability remediation, security hardening, certificate renewals, access reviews, and configuration changes in accordance with change-management procedures.

Administer and support Active Directory security, Group Policy governance, privileged access controls, and identity management solutions. Administer and support Microsoft Defender for Endpoint, Microsoft Defender for Office 365, Conditional Access, Multi-Factor Authentication (MFA), and Microsoft Entra ID security controls.

Investigate Windows Event Logs, authentication activities, security alerts, system performance issues, and infrastructure incidents. Implement and maintain Microsoft 365 security, compliance, retention, audit, and data protection controls. Develop and maintain Power. Shell scripts and automation workflows for provisioning, configuration management, patching, monitoring, reporting, and repetitive operational tasks.

Ensure compliance with organizational security standards, regulatory requirements, and audit controls. Maintain accurate asset, configuration, patching, access, and operational records. Follow applicable IT policies, ITIL practices, BNM RMiT, MoF, ISO 27001, and cybersecurity controls relevant to assigned systems and activities.

Backup, Recovery & Resilience Administer and support Windows CIFS, backup solutions, and recovery processes. Perform backup verification, file restoration testing, server recovery exercises, and disaster recovery drills; document results and implement improvements. Support Windows Failover Clustering, high availability platforms, business continuity arrangements, and service recovery procedures for mission-critical systems.

Participate in planned maintenance activities, infrastructure upgrades, technology refresh initiatives, and after-hours support when required. Support resilience testing, recovery validation, and continuous improvement of infrastructure recovery capabilities. Documentation & Continuous Improvement Develop and maintain Windows Server, Microsoft 365, and infrastructure build standards, SOPs, runbooks, architecture diagrams, operational procedures, and troubleshooting guides.

Identify opportunities for automation, standardization, performance optimization, operational efficiency, and service improvement. Support infrastructure modernization, migration, cloud adoption, and technology transformation initiatives. Prepare operational reports, incident summaries, root cause analysis inputs, technical recommendations, and management updates.

Collaborate with cybersecurity, network, cloud, application, and project teams to deliver secure and resilient infrastructure solutions.

Requirements

Bachelor's Degree or Diploma in Computer Science, Information Technology, Engineering, or a related field. Relevant certifications in Microsoft, Cloud, Virtualization, or IT Service Management are an advantage. Minimum 5-8 years of hands-on experience in Windows systems administration, infrastructure engineering, or enterprise IT operations.

Proven experience administering enterprise Windows Server environments. Experience managing Active Directory, Group Policy, DNS, DHCP, IIS, PKI, File Services, and Microsoft infrastructure platforms. Experience supporting Microsoft 365 services including Exchange Online, Microsoft Entra ID, Microsoft Teams, SharePoint Online, and OneDrive.

Experience working in hybrid infrastructure environments comprising on-premises data centers, VMware, AWS, Azure, and private cloud platforms. Experience in incident, problem, change, patch, backup, recovery, and technical documentation management. Experience supporting highly available, business-critical production environments within regulated industries is an advantage.

Knowledge, Skills & Competencies Strong hands-on experience in Windows Server, Active Directory, Group Policy, Microsoft 365, and Microsoft Entra ID administration. Knowledge of DNS, DHCP, PKI, IIS, networking, virtualization, storage, backup, high availability, and disaster recovery technologies. Experience with Power.

Shell scripting, automation, and infrastructure monitoring tools. Good understanding of Windows security, vulnerability management, patching, access control, and compliance requirements. Experience supporting hybrid environments across on-premises, VMware, AWS, Azure, and Microsoft 365 platforms. Strong troubleshooting, communication, documentation, and stakeholder management skills.

Ability to work independently, manage priorities, and support critical systems in a 24x7 enterprise environment.