Systems Administrator job at ASA Microfinance (U) Ltd

Background

ASA Microfinance Uganda Ltd (ASA Uganda) is a for-profit, non-deposit taking Microfinance Institution, operating as a microfinance company and regulated by the Uganda Microfinance Regulatory Authority (UMRA). ASA Microfinance Uganda Ltd is also a member of the Association of Microfinance Institutions of Uganda (AMFIU). ASA Uganda commenced operations in 2013. ASA Uganda is a subsidiary of ASA International, one of the world’s largest international microfinance institutions globally and operates in 13 countries in Africa and Asia. The company was listed in the premium segment on the London Stock Exchange in July ’2018. ASA Microfinance (U) Ltd is seeking for professional, confident, self-motivated, and committed team players to reinforce its capacity by filling the following vacant positions:

Job Purpose

To administer and maintain the ASA Microfinance Uganda Ltd.'s server operating systems, enterprise applications, and identity services, ensuring confidentiality, integrity, availability and optimal performance.

Key Duties and Responsibilities

Server & Operating System Administration (30% weighting):

• Install, configure, patch, upgrade, and decommission Windows and Linux servers.
• Maintain system baselines, gold images, and configuration standards.
• Monitor system health (CPU, memory, disk, services) and ensure optimal performance.

Identity & Access Management (20% weighting):

• Administer Active Directory, Group Policies, and user access.
• Enforce role-based access control (RBAC), least privilege principles, and periodic access reviews.
• Support identity federation and authentication systems.

Enterprise Application Hosting & Support (15% weighting):

• Support enterprise business applications (email systems, file services, ERP systems, etc.).
• Administer application web services (IIS, Apache, Tomcat, etc.).
• Coordinate with vendors on application patches, upgrades, and incidents.
• Support service desk escalation and user requests by resolving system-related incidents within SLA and performing root cause analysis for recurring issues.

Patch, Vulnerability & Endpoint Security Management (25% weighting):

• Implement patch management cycles aligned with security policies.
• Remediate vulnerabilities identified through scans and audits.
• Enforce endpoint protection, EDR/XDR tools, and system hardening.
• Maintain audit logs, access records, and system documentation.

Automation & Optimization (10% weighting):

• Automate repetitive tasks using PowerShell, Bash, or configuration tools (e.g., Ansible).
• Maintain scripts and job scheduling for operational efficiency.

Ideal Job Specifications

Academic qualifications:

University degree in Information technology/Computer Science or related field.

Professional training:

Training and/or certification below is an added advantage: Enterprise Systems Administration e.g. Microsoft Certified (Azure/Windows Server), Linux certifications (RHCSA/RHCE), CompTIA Server+.

Desired work experience:

Two years' experience enterprise systems integration, administration, monitoring & support in medium-to-large organizations. Experience in Banking/Microfinance environment.

Technical Competencies:

• Practical knowledge of Server OS Administration & Lifecycle.
• Identity & Access Management (IAM) experience.
• Security controls hardening & vulnerability management experience.
• Strong understanding of Systems Automation & Configuration Management.

Behavioural Competencies:

• Ability to deliver stable systems with high performance through disciplined administration best practices.
• Soft skills to effectively work with other technical staff teams to resolve cross-layer issues.
• A quick learner that keeps pace with evolving systems, tools, and security requirements.
• A proactive work ethic to ensure timely resolution of incidents and user requests within SLA expectations.

• Install, configure, patch, upgrade, and decommission Windows and Linux servers.
• Maintain system baselines, gold images, and configuration standards.
• Monitor system health (CPU, memory, disk, services) and ensure optimal performance.
• Administer Active Directory, Group Policies, and user access.
• Enforce role-based access control (RBAC), least privilege principles, and periodic access reviews.
• Support identity federation and authentication systems.
• Support enterprise business applications (email systems, file services, ERP systems, etc.).
• Administer application web services (IIS, Apache, Tomcat, etc.).
• Coordinate with vendors on application patches, upgrades, and incidents.
• Support service desk escalation and user requests by resolving system-related incidents within SLA and performing root cause analysis for recurring issues.
• Implement patch management cycles aligned with security policies.
• Remediate vulnerabilities identified through scans and audits.
• Enforce endpoint protection, EDR/XDR tools, and system hardening.
• Maintain audit logs, access records, and system documentation.
• Automate repetitive tasks using PowerShell, Bash, or configuration tools (e.g., Ansible).
• Maintain scripts and job scheduling for operational efficiency.

• Practical knowledge of Server OS Administration & Lifecycle.
• Identity & Access Management (IAM) experience.
• Security controls hardening & vulnerability management experience.
• Strong understanding of Systems Automation & Configuration Management.
• Ability to deliver stable systems with high performance through disciplined administration best practices.
• Soft skills to effectively work with other technical staff teams to resolve cross-layer issues.
• A quick learner that keeps pace with evolving systems, tools, and security requirements.
• A proactive work ethic to ensure timely resolution of incidents and user requests within SLA expectations.

• University degree in Information technology/Computer Science or related field.
• Training and/or certification below is an added advantage: Enterprise Systems Administration e.g. Microsoft Certified (Azure/Windows Server), Linux certifications (RHCSA/RHCE), CompTIA Server+.