CyberClan · 1 day ago
System Administrator
CyberClan is a global leader in cybersecurity and incident response, helping organizations recover from cyber incidents. They are seeking a skilled and proactive System Administrator to join their Post-Breach Remediation team, focusing on restoring and strengthening IT infrastructure for clients after incidents.
Responsibilities
Rapidly assess and restore client environments impacted by cybersecurity incidents, including ransomware encryption or data exfiltration
Build, configure, and maintain physical, virtual, and cloud-based servers, ensuring secure and stable operations
Design and implement tailored IT infrastructure recovery plans based on the unique needs and technologies of each client
Restore functionality across the full technology stack — from hypervisors and servers to desktops, laptops, and network devices
Work at the network, infrastructure, and user level to bring systems back online safely, securely, and efficiently
Manage and recover core services including Active Directory, DNS, DHCP, GPO, and remote access tools
Collaborate closely with client teams, adapting to their environments and tools while bringing expert-level knowledge and professionalism
Maintain and restore backup and disaster recovery solutions, ensuring data integrity and minimal downtime
Participate in an on-call rotation to provide critical infrastructure support during high-pressure recovery scenarios
Qualification
Required
Helpdesk Support – providing frontline assistance and resolving user issues
3rd Line Support – handling complex escalations and advanced troubleshooting
Field Engineer – delivering on-site technical support and installations
Backup Engineer – managing data protection, recovery, and continuity solutions
Server Engineer – building, configuring, and maintaining server infrastructure
Infrastructure Engineer – designing and supporting core IT systems and networks
Cloud Engineer – deploying and managing services across platforms such as Azure, AWS, and Microsoft 365
System Administrator – overseeing daily operations, system health, and performance
Windows Server 2008–2025
Active Directory, DNS, DHCP, GPO
Remote Desktop Services, RDP and 3rd party Remoting tools
Virtualisation platforms (Hyper-V, VMware)
Microsoft 365, Azure, AWS
Backup solutions (e.g., Veeam, BackupExec)
Desktop imaging tools (MDT, SCCM, Intune)
Networking fundamentals (IP, routing, switching, firewalls)
PowerShell scripting and automation
Web and Email filtering
Excellent communication and interpersonal abilities
Calm and confident in high-pressure situations
Strong organisational and time management skills
Willingness to travel frequently and work on-site
Self-driven and adaptable to evolving priorities
Supportive team player with mentoring capabilities
Degree in Information Technology, Computer Science, or a related field (or equivalent experience)
Preferred
Familiarity with cybersecurity environments or incident response
Experience with Security hardening (VPNs, firewalls, group policies)
Security monitoring tools (e.g., SIEM)
Linux / MacOS platforms
SQL DB
CompTIA Network+, Server+, Security+
Microsoft MCSA/MCSE
Microsoft AZ-900/ AZ-104
Cisco CCNA/CCNP
ITIL, PRINCE2, or PMI
CISSP, OSCP, GCIH, GCFA (desirable)