Job Title: Systems Engineer – Cybersecurity & Infrastructure
Organisation: Quality Chemical Industries
Duty Station: Kampala, Uganda
About Organisation:
Quality Chemical Industries Limited (QCIL) is East Africa’s largest pharmaceutical manufacturer and one of the largest in Sub-Saharan Africa (SSA). The Company manufactures antiretrovirals, artemisinin-based combination therapies (ACTS) and, Hepatitis medicines, to treat HIV/AIDS, Malaria, and Hepatitis respectively.
Job Summary: The Systems Engineer (Cybersecurity & Infrastructure) is a senior technical role responsible for designing, securing, and governing QCIL’s server and platform environment. The incumbent will lead infrastructure architecture, virtualization (VMware), enterprise application platform readiness (Microsoft 365, SAP, LIMS, TrackWise), and system security controls required to protect GxP/GMP environments. This role owns standards, technical governance, and disaster recovery design, while the Systems Administrator executes approved operational workstreams.
Key Duties and Responsibilities:
- Infrastructure Architecture & Governance
- Assess current server, virtualization, storage, identity, and application platform architecture and produce a target-state roadmap.
- Define and maintain system standards: build templates, naming conventions, IP/DNS standards for servers, patching baselines, backup standards, and logging standards.
- Approve system changes that affect regulated (GxP/GMP) services, ensuring documented impact assessment and rollback plans.
- Ensure new technologies align with QCIL architecture and security guidelines before deployment.
- Cybersecurity for Servers, Identity & Platforms
- Own server hardening standards (Windows/Linux) and ensure alignment to recognized baselines and QCIL policies.
- Lead vulnerability management for servers and core platforms: scan review, risk triage, remediation planning, and verification.
- Administer and tune endpoint/server security tooling (EDR/AV policies for servers), and ensure critical servers are onboarded to SIEM/log monitoring.
- Implement privileged access controls
- Partner with the Network Engineer to ensure IT/OT segmentation is enforced for systems
- Support incident response for system-side events.
- Virtualization (VMware) & Platform Engineering
- Own VMware design and lifecycle management.
- Define VM templates, resource sizing standards, snapshot governance, and host patching schedules with controlled maintenance windows.
- Design backup and recovery procedures for VMware hosts and critical VMs based on best practices.
- Core Enterprise Systems (Microsoft 365, SAP, LIMS, TrackWise)
- Lead infrastructure readiness for core platforms.
- Coordinate vendor and internal technical teams during upgrades, changes, and troubleshooting of enterprise systems.
- Define and maintain application dependency maps and connectivity matrices (ports/protocols) for regulated applications.
- Backup, Disaster Recovery & Business Continuity
- Own backup strategy and recovery assurance for servers, VMs, and databases: retention, encryption, monitoring, and restore testing.
- Design, implement, supervise, and test QCIL’s Disaster Recovery Plan for systems.
- Ensure DR documentation and evidence is audit-ready for GxP/GMP requirements.
- Compliance, Audit & Documentation
- Lead technical remediation of audit findings related to systems, access controls, patching, backups, logging, and security configuration.
- Maintain architecture diagrams, as-built documentation, SOPs/runbooks, and system inventories.
- Prepare monthly operational reporting: platform health, risks, vulnerability posture, backup/DR status, and improvement roadmap.
Key Performance Indicators (KPIs)
- Platform availability (uptime) for critical services (AD/DNS, virtualization, core apps).
- Backup success rate and restore test success rate for critical systems.
- Vulnerability remediation SLA compliance (critical/high findings).
- Audit findings closed within agreed timelines with evidence.
- Mean time to resolve (MTTR) for system incidents and reduction of recurring issues.
Qualifications, Skills and Experience:
- BSc degree in IT, Computer Science, Engineering, or related field.
- Minimum 5 years in Systems Administration/Engineering with demonstrated ownership of VMware and Windows Server environments.
- Hands-on experience supporting enterprise platforms (Microsoft 365, SAP or similar ERP, LIMS, TrackWise or regulated quality systems).
- Experience with vulnerability management and security tooling (EDR, SIEM concepts, hardening).
- Certifications (Preferred)
- Microsoft (e.g., Windows Server / Azure / M365) certifications.
- VMware (VCP) or equivalent virtualization certification.
- Security-related certification (e.g., Security+, vendor security training) – advantage.
- ITIL Foundation – advantage.
- Core Technical Skills
- Windows Server (AD DS, GPO, DNS, DHCP), Linux administration, scripting/automation basics (PowerShell).
- VMware vCenter/ESXi, HA/DRS, capacity planning, troubleshooting performance bottlenecks.
- Backup and recovery tooling and methodology; DR planning and testing.
- Database fundamentals (SQL Server/Postgres) including backup/restore, permissions, performance monitoring.
- Security hardening, vulnerability remediation workflows, logging/monitoring concepts, and incident support.
Behavioral Competencies
- Strong analytical problem-solving; evidence-based troubleshooting.
- Excellent documentation discipline and change control mindset (especially for GxP systems).
- Ability to communicate technical risk and options to non-technical stakeholders.
- Collaborative leadership; mentoring Systems Administrator and working across teams.
How to Apply:
Interested persons who meet the above requirements should hand deliver or email their applications and resumes with supporting documents, with the “Role Name” as the subject to the Qcil Front Desk, or recruitment@qcil.com
Deadline: 13th February 2026
NB: Only shortlisted candidates will be contacted. Qcil is an equal opportunity employer and therefore lobbying for the above position will lead to automatic disqualification.
For more of the latest jobs, please visit https://www.theugandanjobline.com or find us on our facebook page https://www.facebook.com/UgandanJobline
Level of Education: bachelor degree
Work Hours: 8
Experience in Months: 60