IT & Security Operations Administrator

IT & Security Operations Administrator

Location: On-site
Department: IT / Security
Reports to: CTO / Head of Operations

About the Role

Liquid Technologies is looking for a hands-on IT & Security Operations Administrator to own internal IT, endpoint security, server security, network security, SaaS administration, and employee support for a 65-person team.

This person will secure and maintain employee laptops, internal servers, business tools, access controls, EDR, office network, backups, and IT support workflows so employees remain fully operational with minimal downtime.

The role works closely with DevOps but does not own production cloud infrastructure, CI/CD pipelines, or client cloud environments.

Key ResponsibilitiesIT & Systems Administration

● Manage employee laptops, desktops, local servers, network devices, and internal business tools.

● Set up, configure, patch, troubleshoot, and maintain Windows, macOS, and Linux devices.

● Own laptop maintenance, repairs, replacements, upgrades, spare devices, and readiness so employees can work without avoidable downtime.

● Maintain device inventory, server inventory, software licenses, warranties, procurement records, and lifecycle replacements.

● Manage IT support tickets, prioritize requests, track SLAs, resolve issues, and document recurring problems.

● Create and maintain SOPs for IT support, onboarding, offboarding, access management, backups, and device management.

Security Operations

● Enforce MFA, SSO, least-privilege access, password manager usage, endpoint security, and secure configuration standards.

● Own joiner, mover, and leaver access workflows, including immediate offboarding from critical systems.

● Conduct regular access reviews, vulnerability checks, device compliance reviews, and internal risk assessments.

● Monitor security alerts, investigate suspicious activity, document incidents, and support post-incident action items.

● Support ISO 27001, SOC 2, client security questionnaires, asset registers, evidence collection, and audit readiness.

EDR, Endpoint & Server Security

● Own EDR deployment, monitoring, and maintenance across company laptops, desktops, and internal servers.

● Ensure all managed endpoints and internal servers have active EDR coverage and healthy reporting.

● Maintain endpoint security baselines including disk encryption, OS patching, firewall settings, antivirus/EDR, screen lock, and restricted admin access.

● Secure internal servers through patching, hardening, logging, backup policies, access controls, and vulnerability remediation.

● Maintain server records including owner, purpose, OS, patch status, backup status, access list, and security controls.

● Monitor server health, uptime, disk usage, access logs, failed login attempts, and abnormal activity.

Network & SaaS Administration

● Configure and maintain firewalls, routers, switches, VPN, Wi-Fi, and internal network security.

● Implement network segmentation, access controls, and traffic monitoring where needed.

● Administer internal tools such as Google Workspace / Microsoft 365, Slack, Jira, GitHub, VPN, password manager, HR systems, and other business applications.

● Train employees on security best practices, phishing risks, password hygiene, and secure device usage.

Key KPIs

● 99% Network Uptime

● 100% of active employees have MFA enabled on critical systems.

● 100% of company devices are inventoried and assigned to owners.

● 100% of employee laptops are maintained, secured, and operational.

● Spare / backup laptop availability maintained for urgent employee downtime cases.

● 95%+ endpoint patch compliance.

● 95%+ internal server patch compliance.

● 100% of internal servers are inventoried with owner, purpose, access list, patch status, and backup status.

● 100% EDR coverage across managed laptops, desktops, and internal servers.

● 100% of leavers are removed from critical systems within 24 hours.

● Monthly access review completed for critical tools, servers, and privileged accounts.

● EDR alerts reviewed, triaged, and documented within agreed SLA.

● Quarterly backup restore test completed and documented for critical internal systems.

● Critical incidents documented with root cause and action items.

● IT support tickets tracked, prioritized, and resolved within agreed SLA.

● Recurring IT issues documented with root cause and preventive action.

● Security SOPs created and maintained for onboarding, offboarding, device management, EDR, server hardening, backups, and incident response.

Required Qualifications

● 3+ years of experience in IT administration, systems administration, network administration, or IT security operations.

● Strong working knowledge of Windows, macOS, and Linux.

● Experience managing employee devices, local servers, firewalls, VPNs, Wi-Fi, and internal networks.

● Experience with Google Workspace or Microsoft 365 administration.

● Knowledge of MFA, SSO, IAM, EDR, endpoint security, patching, backups, and access management.

● Experience with ticketing, documentation, SOPs, and user support workflows.

● Strong troubleshooting skills across hardware, software, operating systems, networks, and connectivity.

● Ability to work independently and build structure in a growing company.

Preferred Qualifications

● Experience with MDM/RMM tools such as Intune, Jamf, Kandji, Google Endpoint Management, NinjaOne, or similar.

● Experience with EDR, SIEM, firewalls, VPNs, server hardening, and endpoint protection tools.

● Familiarity with ISO 27001, SOC 2, internal audits, or client security reviews.

● Certifications such as CompTIA Security+, Network+, CCNA, Fortinet NSE, Microsoft, Google Workspace, Linux, or ISO 27001 Foundation/Internal Auditor.

● Scripting ability in PowerShell, Bash, or Python.

Scope Note

This role owns internal IT, employee laptops, endpoint security, internal servers, office network, SaaS administration, access controls, EDR, IT tickets, and internal security operations.

Production cloud infrastructure, CI/CD pipelines, application deployments, and client cloud environments are owned by DevOps. This role will collaborate with DevOps on access control, security policies, compliance evidence, and incident response where needed.

Pay: From Rs150,000.00 per month

Application Question(s):

• How many years of professional experience do you have managing internal IT infrastructure, including employee devices, servers, networks, and IT support?
• Do you have hands-on experience administering Microsoft 365 or Google Workspace, including user access, MFA, SSO, and endpoint security?
• Have you managed endpoint security (EDR), firewalls, VPNs, patch management, and access controls in a corporate IT environment?
• How soon you can join if get selected? (in days)
• Are you comfortable to manage commute to Zamzama Phase V, Karachi?
• Are you comfortable to work in evening shift? ( 3 PM- 12 AM)
• Current salary (in PKR)
• Expected Salary (in PKR)
• Are you currently employed?

Work Location: In person