Senior IT Administrator

Required Qualifications & Experience

• Experience: 5+ years of experience in system administration, cloud operations, or network engineering within an MSP, ISP, or Web Hosting environment.
• AWS & Hosting Stacks: Deep operational experience with AWS core services, Linux (Ubuntu), cPanel/WHM, WHMCS, and Nginx/Apache stacks.
• Networking & VOIP: Advanced hands-on experience with MikroTik router configurations, UniFi/Grandstream switching and wireless networks, and 3CX/Yeastar IP-PBX systems.
• Databases: Practical experience managing, backing up, and optimizing MySQL, MariaDB, and PostgreSQL.
• Identity & Security: Strong experience with Microsoft Entra ID, Google Workspace, and implementing JIT access and ISMS security practices.

Role Overview

We are seeking a high-caliber Senior IT Administrator to lead, maintain, and secure our multi-tenant cloud environments, managed hosting stack, enterprise networks, and client-facing IT infrastructure.

In this role, you will be the core technical authority across our AWS cloud infrastructure, Microsoft Entra ID and Google Workspace tenant management, Linux/cPanel/WHMCS hosting platforms, high-throughput MikroTik/UniFi routing networks, and 3CX/Yeastar VoIP clusters. You will also oversee client SLA fulfillment and drive our Information Security Management System (ISMS)—implementing Just-In-Time (JIT) access controls, risk management, and multi-tenant security isolation.

Core Responsibilities

1. Multi-Tenant Cloud & Managed Infrastructure (AWS)

   1. Architect, configure, and maintain AWS environments supporting client services, including EC2, VPC, CloudWatch, SES, Lambda, LightSail, Workmail, and Security Groups.
   2. Design resilient VPC topologies, multi-region connectivity, and automated failover for client hosting workloads.
   3. Implement centralized logging and real-time monitoring via AWS CloudWatch to ensure strict adherence to service level agreements (SLAs).
   4. Automate infrastructure provisioning, client server deployments, and administrative tasks using AWS Lambda and automation tools.

2. Managed Web Hosting & ISP Operations

   1. Administer Linux web hosting environments (Ubuntu Server) running cPanel/WHM and WHMCS for multi-tenant web hosting, domain provisioning, and automated client billing workflows.

   2. Manage, tune, and secure Apache and Nginx web servers for high traffic, low latency, and zero-downtime client sites.

      1. Administer, back up, and optimize production relational database clusters (MySQL, MariaDB, and PostgreSQL).
   3. Support ISP-level email routing, deliverability tuning (SPF/DKIM/DMARC), and transactional email infrastructure via AWS SES.

3. Tenant Identity & Directory Services

   1. Administer Microsoft Entra ID and Google Workspace across internal operations and client tenant environments.
   2. Enforce Least Privilege access, Single Sign-On (SSO), Multi-Factor Authentication (MFA), and Conditional Access rules across multi-client tenants.
   3. Manage user lifecycle provisioning, directory syncs, and client account integrations.

4. Networking, Telephony & On-Premises Systems

   1. Architect, deploy, and maintain MikroTik router environments (dynamic routing, BGP/OSPF, high-capacity firewalls, site-to-site VPNs, and bandwidth queue management).
   2. Deploy and manage client network environments using UniFi, Grandstream, and TP-Link switches, wireless access points, and security appliances.
   3. Maintain internal Windows Server environments, including Active Directory Domain Services (AD DS), DNS, DHCP, and RRAS/VPN connectivity.
   4. Support enterprise VoIP offerings across 3CX and Yeastar platforms, managing SIP trunks, call routing, and client PBX instances.

5. ISMS, Risk Management & Compliance

   1. Maintain Information Security Management System (ISMS) controls aligned with ISO/IEC 27001 standards across internal and client-hosted environments.
   2. Enforce Just-In-Time (JIT) Authorization and Privileged Access Management (PAM) for all root and administrative server, database, and infrastructure access.
   3. Perform regular risk assessments, vulnerability scanning, patch deployment, and tenant isolation reviews.
   4. Conduct root-cause analysis for system outages, manage security logs, and maintain client-facing Disaster Recovery (DR) and Business Continuity (BCP) runbooks.

Preferred Certifications

​

• AWS: AWS Certified Solutions Architect – Associate / Professional, AWS Certified Security – Specialty
• Networking: MikroTik Certified Network Associate (MTCNA) / Certified Routing Engineer (MTCRE), CCNA
• Security & Governance: ISO/IEC 27001 Lead Implementer, CISSP, CISM
• Linux / Microsoft: LPIC-2 / RHCSA, Microsoft Certified: Identity and Access Administrator Associate

​

Standardised Compensation & Benefits Package

​

• Base Salary Range: Market-aligned senior rate commensurate with experience (N$ 380,000 – N$520,000 per annum cost to company).

• Performance Bonus: Discretionary annual performance bonuses linked to platform uptime, client SLA compliance, and infrastructure project milestones.

• Benefits Included:

  • Medical aid.

  • Pension fund employer contribution.

  • Home internet subsidisation for on-call rotational shifts.

  • Annual certification and technical skill development budget (paid exam vouchers and study materials).

  • Flexible work arrangements (hybrid model).