Basic Function

The Senior IT Officer (Infrastructure and Security) acts as the lead technical engineer responsible for the hands-on configuration, maintenance, and securing of the Council’s server and network environment. This role focuses on operational excellence, ensuring that servers are patched, networks are optimized, and security incidents are detected and responded to immediately.

Duties and Responsibilities

1) System Administration:

• Configure and maintain Windows and Linux server environments,
• Ensure optimal performance for the TVET MIS ERP and other Council applications.
• Perform routine patching and OS hardening.

2) Network Operations:

• Manage network devices (switches, routers, firewalls, and wireless controllers), monitoring traffic flow and bandwidth usage to prevent bottlenecks.

3) Security Operations (SecOps):

• Monitor the Security Information and Event Management (SIEM) system for alerts;
• Lead the immediate technical response to security incidents (e.g., malware, phishing, intrusion attempts).

4) Backup and Recovery.

• Execute daily backup routines for all critical data and systems;
• Perform regular restoration tests to verify the integrity of backups in line with the Disaster Recovery Plan.

5) Endpoint Security.

Manage the deployment and updates of antivirus/EDR (Endpoint Detection and Response) solutions across all staff workstations and mobile devices.

6) Supervision and leadership

• Provide supervision, technical support, guidance and capacity building to staff under direct supervision
• Prepare unit plans and performance agreements for staff under supervision
• Provide on-the job training, coaching and mentoring to staff under supervision.
• Perform any other duties as may be assigned.

Supervision received: The Senior IT Officer Infrastructure and Security is directly supervised by the ManagerInfrastructure and Security.

Supervision exercised: Provides supervision to the IT Officer Infrastructure and Security.

Education Requirements

• Bachelor’s degree in Computer Science, Information Technology, or Engineering.
• Certifications: CompTIA Security+, CCNA (Cisco Certified Network Associate), or Microsoft Certified: Azure Administrator.

Experience

• A minimum of six(6) years of experience in ICT, with at least three (3) years in a leadership or supervisory role.

Knowledge and Skills

• Network Engineering: Deep expertise in designing and maintaining LAN/WAN architectures, including the configuration of core switches, routers, and secure VPNs.
• Server Administration: Advanced proficiency in administering Windows Server (Active Directory, DNS, Group Policy) and Linux environments (RHEL/Ubuntu).
• Virtualization: Hands-on mastery of virtualization platforms (VMware vSphere or Hyper-V), including cluster management and resource pooling.
• Cybersecurity Operations: Proven ability to manage Next-Gen Firewalls, intrusion detection systems, and SIEM tools for real-time threat monitoring.
• Cloud Infrastructure: Working knowledge of hybrid cloud environments (Azure/AWS), including identity management (MFA/SSO) and cloud connectivity.
• Automation & Scripting: Competency in using PowerShell or Bash for task automation, and familiarity with Infrastructure as Code (IaC) tools like Ansible.
• Disaster Recovery: Experience in executing backup strategies and testing Disaster Recovery plans to ensure strict Recovery Time Objectives (RTOs) are met.
• Endpoint Security: Skill in deploying and managing Endpoint Detection and Response (EDR) solutions to protect organizational assets from malware.
• Compliance & ITIL: Strong understanding of ITIL service management processes and data protection standards (ISO 27001/NIST).
• Strong adherence to Change Management processes and documentation standards.

Physical Demands: None

Travel requirements: The position may require occasional travel within/out of the country.

• Configure and maintain Windows and Linux server environments,
• Ensure optimal performance for the TVET MIS ERP and other Council applications.
• Perform routine patching and OS hardening.
• Manage network devices (switches, routers, firewalls, and wireless controllers), monitoring traffic flow and bandwidth usage to prevent bottlenecks.
• Monitor the Security Information and Event Management (SIEM) system for alerts;
• Lead the immediate technical response to security incidents (e.g., malware, phishing, intrusion attempts).
• Execute daily backup routines for all critical data and systems;
• Perform regular restoration tests to verify the integrity of backups in line with the Disaster Recovery Plan.
• Manage the deployment and updates of antivirus/EDR (Endpoint Detection and Response) solutions across all staff workstations and mobile devices.
• Provide supervision, technical support, guidance and capacity building to staff under direct supervision
• Prepare unit plans and performance agreements for staff under supervision
• Provide on-the job training, coaching and mentoring to staff under supervision.
• Perform any other duties as may be assigned.

• Network Engineering: Deep expertise in designing and maintaining LAN/WAN architectures, including the configuration of core switches, routers, and secure VPNs.
• Server Administration: Advanced proficiency in administering Windows Server (Active Directory, DNS, Group Policy) and Linux environments (RHEL/Ubuntu).
• Virtualization: Hands-on mastery of virtualization platforms (VMware vSphere or Hyper-V), including cluster management and resource pooling.
• Cybersecurity Operations: Proven ability to manage Next-Gen Firewalls, intrusion detection systems, and SIEM tools for real-time threat monitoring.
• Cloud Infrastructure: Working knowledge of hybrid cloud environments (Azure/AWS), including identity management (MFA/SSO) and cloud connectivity.
• Automation & Scripting: Competency in using PowerShell or Bash for task automation, and familiarity with Infrastructure as Code (IaC) tools like Ansible.
• Disaster Recovery: Experience in executing backup strategies and testing Disaster Recovery plans to ensure strict Recovery Time Objectives (RTOs) are met.
• Endpoint Security: Skill in deploying and managing Endpoint Detection and Response (EDR) solutions to protect organizational assets from malware.
• Compliance & ITIL: Strong understanding of ITIL service management processes and data protection standards (ISO 27001/NIST).
• Strong adherence to Change Management processes and documentation standards.

• Bachelor’s degree in Computer Science, Information Technology, or Engineering.
• Certifications: CompTIA Security+, CCNA (Cisco Certified Network Associate), or Microsoft Certified: Azure Administrator.