Global System Administrator at Vitol in Singapore, Singapore

companyDescription Vitol is a leader in the energy sector with a presence across the spectrum: from oil through to power, renewables and carbon.  From 40 offices worldwide, we seek to add value across the energy supply chain, including deploying our scale and market understanding to help facilitate the energy transition. To date, we have committed over $2 billion of capital to renewable projects, and are identifying and developing low-carbon opportunities around the world. Our people are our business. Talent is precious to us and we create an environment in which individuals can reach their full potential, unhindered by hierarchy. Our team comprises more than 65 nationalities and we are committed to developing and sustaining a diverse work force. Learn more about us here. jobDescription We are seeking an experienced and hands-on Global System Administrator to join our Singapore team. The ideal candidate brings a minimum of 10 years of experience managing complex, multi-system IT environments with a strong focus on Windows Server infrastructure. You will be responsible for the installation, upgrade, configuration, administration, and maintenance of a broad range of systems and appliances, while managing projects end-to-end — including professional services coordination, handovers, and documentation. Key Responsibilities: Infrastructure & Virtualisation Administer and manage 100+ virtual servers running Windows Server 2019 and 2025. Manage VMware vCenter and ESXi environments, including automation via PowerCLI and vRealize Orchestrator. Maintain NetApp MetroCluster SAN storage, including NFS/CIFS and MPIO configurations. Support and manage Data Centre operations, including rack management, capacity planning, and hardware lifecycle. Backup & Disaster Recovery Manage enterprise backups using Veeam Backup & Replication, including scheduling, monitoring, and recovery testing. Maintain and regularly test Disaster Recovery (DR) runbooks and failover procedures. Patch & Endpoint Management Deploy and manage Microsoft patches, service packs, and feature releases via Microsoft Endpoint Configuration Manager (MECM) and Microsoft Intune. Manage device lifecycle and compliance via AirWatch (Workspace ONE) and Intune co-management policies. Directory, Identity & Access Management Administer Active Directory Domain Services, DNS, DHCP, LDAP, and Group Policy. Manage Azure Entra ID (formerly Azure AD), including hybrid identity, Conditional Access policies, MFA enforcement, and Privileged Identity Management (PIM). Support Zero Trust security principles across identity and access management. Messaging & Collaboration Systems Administer Microsoft Exchange Server 2019 SE (on-premises, physical), covering global rules, transport policies, monitoring, scripting, upgrades, and capacity sizing. Maintain a strong working knowledge of messaging fundamentals: MX/SPF/DKIM/DMARC records, S/MIME signatures, and email encryption. Support and administer Microsoft 365 collaboration tools including Teams, SharePoint Online, and Exchange Online. Cloud & Hybrid Infrastructure Manage and optimise the organisation's hybrid cloud environment, spanning on-premises infrastructure and Microsoft Azure. Support cloud governance, cost management, and security posture across Azure subscriptions. Assist with workload migrations from on-premises to cloud where applicable. Automation, Scripting & AI Automate repetitive tasks and improve operational efficiency using PowerShell, Python, and modern DevOps tooling. Leverage AI-assisted automation (including Microsoft Copilot, Power Automate, and AI agents) to deploy workers for routine operational tasks. Develop and maintain internal runbooks, automation scripts, and infrastructure-as-code (IaC) templates. Security & Compliance Apply and maintain security hardening standards across Windows Server, Active Directory, and cloud environments. Collaborate with the security team to support vulnerability management, patching cadence, and audit readiness. Enforce and review Group Policy and Intune compliance policies to meet internal and regulatory standards. Monitoring & Observability Administer monitoring platforms (e.g. Centreon, Zabbix, or equivalent) to ensure proactive detection of infrastructure issues. Define and maintain alerting thresholds, dashboards, and escalation workflows. Citrix & Virtual Desktop Administer and support Citrix Virtual Apps and Desktops (CVAD) farm environments, including application publishing, session management, and performance tuning. Project & Documentation Management Lead infrastructure projects from initiation through to delivery, including vendor and professional services coordination. Maintain accurate and up-to-date technical documentation, SOPs, handover notes, and runbooks. qualifications Operating Systems Windows Server 2019 & 2025 administration Virtualisation VMware ESXi & vCenter PowerCLI and vRealize Orchestrator scripting Storage NetApp SAN (MetroCluster) NFS/CIFS, MPIO Backup & DR Veeam Backup & Replication Directory Services Active Directory Domain Services DNS, DHCP, LDAP, Group Policy Messaging Exchange Server 2019 SE — strong experience required Microsoft 365, Exchange Online Cloud Microsoft Azure Azure Entra ID Office 365 / Microsoft 365 Administration Endpoint Management Citrix Virtual Apps and Desktops (CVAD) AirWatch / Workspace ONE Microsoft Intune / MECM Monitoring Centreon, Zabbix, or equivalent tools Networking DMZ, load balancing, VLANs, firewalls PaloAlto firewall knowledge — advantageous Scripting & Automation PowerShell, Python AI-assisted automation (Copilot, Power Automate, AI agents) Personal Attributes Honest, trustworthy, and flexible in approach. Excellent verbal and written communication skills. Proven ability to work independently and collaboratively under pressure, with shifting priorities. Highly responsive, energetic, and proactive. Self-motivated with a strong sense of ownership, accountability, and the ability to meet deadlines. Creative problem-solver with a resourceful mindset. Strong team player with an open, non-political style and high personal integrity. Willingness to work outside normal business hours and travel when required. additionalInformation