This is the section where round two of the screen actually happens, the closing gate before an
interview hits your inbox. A recruiter takes their time here, and even at that, the current
role still drives around 95% of the result.
That tracks: nothing proves what you can run in production today like the seat you sit in
right now. To earn a "yes", the section has to hit every entry on the
SysAdmin role profile, one bullet per domain you named in Domain
Expertise above. Every bullet has to come off something you genuinely held in production,
never a ticket that landed on your queue.
1
Linux & Windows Server Administration
The flagship work of the role. Show the OS fleets you keep healthy, the version mix you
run, and the lifecycle (build, harden, decommission) behind each host. Name the OS and
the workload it carries, not "administered servers".
Techniques
Build standards
OS hardening (CIS)
Lifecycle management
Service tuning
Tools
RHEL, Ubuntu, Debian
Windows Server 2019 / 2022
systemd, services.msc
Metrics
Hosts under management
Uptime SLA held
Tickets resolved
2
Identity, Access & Directory Services
How every employee logs into the estate. Show the directory you run (Active Directory,
LDAP, IdP), the Group Policy or sudoers setup, and the access request flow underneath it.
Name the policy you set and what it now enforces, not "managed AD".
Techniques
Group Policy / GPO
LDAP / sssd
SSO & MFA
Joiner-mover-leaver
Tools
Active Directory
Okta / Entra ID
FreeIPA
Metrics
Identities managed
Access SLA met
Stale accounts cleaned
3
Patching, Hardening & Vulnerability Management
The discipline that keeps the fleet secure. Show the patch cycle you run, the
vulnerability scanner you act on, and the hardening baseline you defend. Name the cycle
and the percentage of fleet on the latest patch, not "applied patches".
Techniques
Patch automation
CIS & STIG baselines
Maintenance windows
Vuln triage
Tools
WSUS, Satellite, Spacewalk
Ansible playbooks
Tenable, Qualys
Metrics
Patch lead time
Critical CVE closure
Baseline drift down
4
Monitoring, Alerting & Incident Response
What turns a failing service into a closed ticket. Show the monitoring stack you stood up,
the alert pipeline you tuned (down on noise, up on signal), and the production incident
you led the response on. Name the incident and the MTTR you cut, not "handled
alerts".
Techniques
Threshold & trend alerts
Runbook automation
Postmortems
On-call rotation
Tools
Nagios, Zabbix
Prometheus / Grafana
PagerDuty, Opsgenie
Metrics
MTTR cut
Alert noise reduced
Major incidents resolved
5
Backup, Recovery & Storage
How the estate survives a bad day. Show the backup platform you run, the restore tests
you ran (and passed), and the storage capacity you keep healthy. Name the recovery
objective you defend and the actual restore you led, not "managed backups".
Techniques
RPO / RTO design
Restore testing
Snapshot lifecycle
Capacity planning
Tools
Veeam, Commvault
Bacula, Restic
NFS, iSCSI, SMB
Metrics
Restore success rate
RPO / RTO held
Storage headroom
6
Automation & Scripting
What turns a manual fleet into a repeatable one. Show the configuration manager you run,
the scripts that automate a recurring chore, and the hours-per-week you returned to
engineering work. Name the chore you killed, not "wrote scripts".
Techniques
Idempotent playbooks
Cron & scheduled tasks
Self-service automation
Drift detection
Tools
Ansible, Puppet, Chef
PowerShell, DSC
Bash, Python
Metrics
Hosts under code
Toil hours cut
Drift incidents down
7
Networking & Connectivity Operations
The networking pieces a SysAdmin owns day to day: DNS, DHCP, firewall rule requests, VPN
access, load-balancer pool changes. Show the service you keep running, the request flow
behind it, and a connectivity incident you closed. Name the system and what now stays up,
not "worked with networking".
Techniques
DNS / DHCP operations
VPN provisioning
Firewall rule changes
Load-balancer pools
Tools
BIND, Infoblox, Windows DNS
F5, HAProxy, Nginx
OpenVPN, WireGuard
Metrics
Service availability
Change requests fulfilled
DNS error rate
8
Tooling & Workflow
The setup that lets a small SysAdmin team support thousands of users. Show the ticketing
workflow you run, the change-management process you defend, and the runbook library that
cuts on-call ramp. Name the workflow, not "a modern stack".
Techniques
Ticket triage
Change advisory boards
Runbook libraries
On-call shadowing
Tools
ServiceNow, Jira Service Mgmt
Confluence, Notion
Git, GitLab
Metrics
Tickets per shift
Mean time to acknowledge
On-call ramp cut