Systems & Security Engineer

Hong Kong International School • Full Time • Hong Kong, HK • 18h ago

The Systems & Security Engineer is a hands-on technical role responsible for implementing, administering, maintaining, monitoring, and securing the School's IT infrastructure across on-premises and cloud environments. The role covers enterprise systems, virtualization, storage, backup, networking, firewalls, identity, endpoint management, and cybersecurity technologies to ensure reliable, secure, and resilient IT operations.

KEY AREAS OF RESPONSIBILITY:

Systems and Infrastructure

Implement, administer, and maintain Windows Server, Linux, Active Directory, Azure, Microsoft 365, Entra ID, DNS, DHCP, and related infrastructure services.
Manage VMware virtualization, SAN/storage infrastructure, and Veeam Backup.
Monitor system availability, capacity, and performance; perform upgrades, patching, hardening, backup, recovery, and troubleshooting.
Support disaster recovery and infrastructure resilience.

Network and Firewall

Design, implement, administer, and troubleshoot enterprise LAN/WAN, routing, switching, VLAN, wireless, VPN, and Internet infrastructure.
Manage Juniper networking equipment and enterprise routing and switching technologies.
Implement and administer Palo Alto Networks firewalls, including security policies, NAT, VPN, segmentation, and logging.
Administer Cisco ISE for network access control, authentication, and authorization.
Monitor network availability, performance, capacity, and security and maintain network documentation.

Endpoint and Identity Management

Manage Windows and supported endpoints using Microsoft Intune MDM.
Support MacBook and Apple devices using Jamf Pro.
Administer Active Directory and Entra ID identity and access controls, including MFA, SSPR, Conditional Access, and privileged access.
Troubleshoot endpoint, identity, authentication, and device-management issues.

Security Operations

Administer and monitor SIEM, Defender EDR/XDR, IDS/IPS, Check Point, vulnerability management, and other security platforms.
Monitor and investigate security alerts, suspicious activities, phishing, malware, endpoint, identity, and network security incidents.
Perform vulnerability scanning, remediation, patch management, and system/network hardening.
Assist with security incident investigation, containment, remediation, and recovery, and maintain operational security documentation.

Projects, Documentation and Other Duties

Evaluate, test, implement, and support infrastructure and cybersecurity technologies and participate in upgrades, migrations, and technology refreshes.
Follow established change management procedures and maintain technical documentation, architecture diagrams, configurations, operational procedures, and recovery procedures.
Coordinate with vendors and service providers for technical implementation and support.
Take an active role in professional development and undertake other duties as required to support IT operations.

Other

Undertake other duties and functions as required that will impact and strengthen the contributions of the department and overall operations of the school.

Minimum requirements and qualifications:

Education:

University graduate with a degree in Computer Science, Information Technology, Information Security, Computer Engineering, or related discipline preferred.
Relevant professional certifications are preferred.

Experience:

Minimum 5 years of relevant hands-on experience in enterprise systems, network infrastructure, endpoint management, or cybersecurity operations.
Strong experience with Windows Server, Linux, Active Directory, Azure, Microsoft 365, Entra ID, VMware, SAN/storage, and enterprise backup solutions, preferably Veeam.
Demonstrated experience designing, implementing, managing, and administering enterprise routing and switching networks, including hands-on experience with Juniper equipment.
Experience with Palo Alto Networks firewalls, Cisco ISE, Jamf Pro, Microsoft Intune MDM, SIEM, Defender EDR/XDR, IDS/IPS, Check Point, vulnerability management, and security monitoring.
Strong knowledge of TCP/IP, routing, switching, VLANs, DNS, DHCP, VPNs, wireless, firewalls, and network security.

Certifications:

Network & Firewall: Juniper JNCIA/JNCIS or higher; Palo Alto Networks professional-level certification; Cisco CCNA.
Systems: relevant Microsoft Azure, Microsoft 365, Identity, Security or Endpoint certification; VMware VCP.
Cybersecurity: CompTIA Security+, ISC2 SSCP/CISSP, or relevant GIAC certification.
Candidates are not expected to hold all listed certifications; relevant hands-on experience and certifications across multiple technical disciplines are preferred.

Required skills:

Strong hands-on troubleshooting and problem-solving skills across systems, networks, endpoints, cloud, storage, and security technologies.
Strong security-focused approach to infrastructure administration, with good documentation, organization, and time-management skills.
Good written and verbal communication skills in English; Cantonese and Mandarin are also an advantage.
Ability to work independently and collaboratively, handle confidential information professionally, and work outside normal office hours when required.
Willing to work with and support our students and learning community.
Intellectual flexibility, technical curiosity and a sense of humor, including the ability to learn independently.

Child Protection Statement:

At HKIS, each child’s welfare is paramount. We act to ensure that our students enjoy the right to be protected from harm and exploitation and have their welfare safeguarded.

TO APPLY

We invite you to learn more about our school and discover for yourself career opportunities in our remarkable HKIS community at www.hkis.edu.hk

Interested candidates please forward your updated resume together with a cover letter and references to recruitmentss@hkis.edu.hk

We look forward to hearing from you!

Personal data collected will be used for recruitment purposes only.

Similar Jobs

Senior/Project Engineer (Toys)

Potential Personnel Consultancy • Full Time • Kwai Chung, Hong Kong, HK • HK$ 29,000 - HK$ 35,000 / month • 31min ago

Engineering Full Time

Diploma or above with good English, 2 years or above product sales/marketing/merchandising experience. Responsible to Manage daily works and market research for yarn; Handling customer inquiries and follow-up services; M...

31min ago

Apply

Junior/ Senior Digital Design Engineer

Credo • Full Time • Hong Kong, HK • 6h ago

Engineering Full Time

Duties Microarchitecture and design in Verilog/System Verilog. Define and own ASIC design methodologies. Integrate complex IPs developed by internal groups as well other vendors. Block and Chip level RTL verification and...

6h ago

Apply

Staff Engineer, Security Platform Development

OKX • Full Time • Hong Kong, HK • 6h ago

Engineering Full Time

Who We Are At OKX, we believe that the future will be reshaped by crypto, and ultimately contribute to every individual's freedom. OKX is a leading crypto exchange, and the developer of OKX Wallet, giving millions access...

6h ago

Apply

Project Engineer (Toys/Gift and Premium)

Potential Personnel Consultancy • Full Time • Kwai Chung, Hong Kong, HK • HK$ 26,000 - HK$ 30,000 / month • 6h ago

Engineering Full Time

Higher Diploma in Mechanical/Manufacturing Engineering, 2 years or above toys engineering experience, with Manufacturing company background is a must. Responsible to oversee the engineering and development of plastic toy...

6h ago

Apply

Operations Manager ( Car Charging Station Project )

Potential Personnel Consultancy • Full Time • Tsuen Wan, Hong Kong, HK • HK$ 27,000 - HK$ 33,000 / month • 6h ago

Engineering Full Time

Diploma in Building Service/Electrical Engineering, 1 year or above Car charging station Project experience. Registered Electrical Worker is a must. Responsible to monitor the whole process of the charging station constr...

6h ago

Apply

Senior DevOps Engineer

GFT Technologies APAC & GCC • Full Time • Hong Kong, HK • 6h ago

Engineering Full Time

Job description: About GFT GFT Technologies is an AI-centric global digital transformation company. We design advanced data and AI transformation solutions, modernize technology architectures and develop next-generation...

6h ago

Apply

C++ Engineer

Maisha Mazuri • Full Time • Hong Kong, HK • 12h ago

Engineering Full Time

The role Our partner companies tend to be trading firms with (mostly) in-house developed trading systems. They range in sizes between 15 - 1000 FTE and trade products in both traditional markets and cryptocurrencies. For...

12h ago

Apply

Synthetic Trading Lead Engineer

HSBC • Full Time • Hong Kong, HK • 16h ago

Engineering Full Time

Job description We are currently seeking a high calibre professional to join our team, Equities & Cross-Asset Financing Tech, as Synthetic Trading Lead Engineer . Equities & Cross-Asset Financing Technology is a...

16h ago

Apply

Full Stack Engineer

HSBC • Full Time • Hong Kong, HK • 16h ago

Engineering Full Time

Job description We are currently seeking a high calibre professional to join our team as Full Stack Engineer. In this role you will: Design, implement and deploy enhancements to HSBC’s electronic trading platform Support...

16h ago

Apply

Java Backend Engineers / Technical Leads / Engineering Directors – Trading Systems / Global Blockchain firm

BAH Partners • Full Time • Hong Kong, HK • 20h ago

Engineering Full Time

I am working with a leading global digital asset exchange undergoing a engineering expansion in Hong Kong, with multiple openings from Senior Software Engineer through to hands-on Engineering Lead. This is an opportunity...

20h ago

Apply