Systems Engineer

A Saudi company in the defence industry sector is building its information system from the ground up. You can consider there is no existing IT estate: no network, no servers, no email governance, no document controls. You will build all of it - and you will build it with your own hands.

This is a delivery role, not a management one: no team to lead, and the direct backing of General Management to get it done.

–  The physical foundation. Technical room (two flats), server, redundant storage, UPS with clean shutdown, structured cabling — specified by you, installed by contractors.

–  The network. Segmentation, firewall, enterprise Wi-Fi, secure remote access.

–  Identity and access. Directory, strong authentication, conditional access, just-in-time privileges, access reviews.

–  Document classification. Labelling, level-appropriate encryption, access by role and confidentiality level, control of copying, removable media and external sharing.

–  Email governance. Automatic copy to department heads, outbound content control and quarantine, immutable archiving.

–  Traceability. Centralised, tamper-proof logging that answers who did what, when, and to which document.

–  The business chain. Quotation to order to invoicing to accounting, on a market package configured by an integrator you direct and then operate.

Starting assumption is Microsoft 365 Business. You may propose another stack - provided it is market-standard and another engineer could take it over.

 

THE CONSTRAINT THAT DEFINES THIS ROLE You will deploy the encryption that protects classified documents. You will not be cleared to read them. Keys are held outside IT under dual custody, and your administrative actions are logged and independently reviewed.

 

–  Seven years or more in systems, network and security administration

–  Server room, UPS and structured cabling: you have done it, not only specified it.

–  Identity and access management, document classification and encryption, enterprise email security, backup with a tested restore.

–  Centralised logging.

–  Documentation good enough for a successor to take over without speaking to you.

–  Fluent professional English, written and spoken. Arabic valued. Saudi nationals and expatriates equally welcome.

–  Document processes, configurations, and standard operating procedures.

–  Administer, monitor, and maintain servers, networks, and systems infrastructure.

–  Solid knowledge of Windows Server/Linux environments.

–  Experience with networking (TCP/IP, DNS, DHCP, VPN).

–  Familiarity with virtualization (VMware/Hyper-V) and cloud platforms (Azure/AWS).

–  Strong troubleshooting and problem-solving skills.

–  Good understanding of cybersecurity fundamentals.

–  Assist with onboarding/offboarding of employees (IT equipment setup)

 

–  Certifications: Microsoft Certified (MCSA/MCSE), CompTIA Security+, CCNA, or similar

–  Experience with scripting/automation (PowerShell, Python, Bash)

–  Exposure to ITIL practices