IT Infrastructure Engineer

About the Role

Manage day-to-day IT operations, office networks, endpoint security, and identity and access management. Contribute to cloud infrastructure, business systems operations, and automation to provide reliable, secure technical support for employees and business operations.

Responsibilities

Provide day-to-day IT support for employees and manage office equipment, enterprise applications, and IT assets. Deploy, maintain, and optimize office networks, including wireless access points, firewalls, switches, and routers. Implement network segmentation and access controls for employee networks, guest networks, and different device types.

Manage endpoints through MDM, covering device enrollment, initial configuration, application and security policy deployment, system updates, compliance checks, and device offboarding and collection. Improve endpoint and network security through disk encryption, malware protection, application control, and data loss prevention measures.

Strengthen identity verification and employee security awareness to reduce phishing, social engineering, and unauthorized access risks. Manage enterprise accounts and permissions, improve processes for onboarding, role changes, offboarding, and periodic access reviews, and support IT internal controls and audits. Participate in day-to-day operations, monitoring, and troubleshooting for cloud platforms, business systems, and Linux servers.

Contribute to CI/CD, Git. Ops, and operational automation to improve deployment efficiency and system reliability.

Requirements

Experience in enterprise IT or systems operations, with the ability to resolve routine issues independently and drive process improvements. Familiarity with configuring and optimizing enterprise wireless access points, such as Aruba, as well as firewalls, switches, and routers. Understanding of wireless networking principles and the ability to troubleshoot coverage, interference, roaming, and performance issues.

Familiarity with macOS, Windows, and MDM, with experience in device configuration, application distribution, security policy deployment, and endpoint troubleshooting. Understanding of device admission control, network segmentation, endpoint protection, and data loss prevention, with hands-on experience implementing relevant tools or policies.

Familiarity with account and access management in Google Workspace and common enterprise SaaS applications, including SSO, MFA, and employee account lifecycle management. Familiarity with Linux, including system configuration, log analysis, and basic troubleshooting, and an understanding of virtualization, containerization, and orchestration technologies such as KVM, Docker, and Kubernetes.

Familiarity with at least one cloud platform among AWS, Azure, and GCP. Working knowledge of Git and basic CI/CD workflows, with an understanding of tools such as Argo CD and Jenkins, as well as Git. Ops practices. Strong communication and documentation skills, sound security awareness, and the ability to communicate in English in day-to-day work.

Willingness and ability to contribute hands-on to DevOps work.

Preferred Qualifications

Experience building enterprise IT, MDM, device admission control, or endpoint security capabilities from scratch. Hands-on experience with production cloud operations, business systems maintenance, CI/CD, or Terraform. Experience with scripting and automation using Shell, Python, or similar languages. Experience with SOC 2, ISO 27001, or IT internal control projects.