Assistant Manager, IT Infrastructure

About the role

Assist the Team Lead in planning, designing, implementing, and operating the company's overall IT infrastructure (network, servers, SAN storage, Windows/Linux systems), and take charge of day-to-day information security operations as well as infrastructure- and security-related projects. Ensure systems are highly available, secure, and aligned with business needs.

Key responsibilities

• Infrastructure Operations (BAU)

  - Responsible for daily monitoring, configuration, troubleshooting, and performance optimization of enterprise networks (LAN/WAN, Firewall, Switch, Router, Wi‑Fi, DNS, DHCP, TCP/IP).

  - Manage servers and virtualization platforms (Windows Server, Linux, VMware / Hyper‑V, etc.), including installation, configuration, patch management, capacity planning, and high availability design.

  - Manage SAN/NAS storage and backup solutions to ensure effective execution of data backup, restoration testing, and disaster recovery planning.

  - Monitor system and network performance (availability, utilization, throughput, latency); perform root cause analysis on alerts and incidents, and implement improvement measures.

• Operating Systems and Directory Services

  - Manage and maintain Windows Server environments (AD DS, Group Policy, DNS, DHCP, File/Print Server, etc.) and integration with Microsoft Entra ID / Azure AD.

  - Manage Linux servers (RHEL/CentOS/Ubuntu, etc.), including installation, configuration, security hardening, scripting automation, and routine maintenance.

  - Manage user accounts, permissions, and access controls (AD, Email, Cloud systems) to ensure compliance with the principle of least privilege and regulatory requirements.

• Information Security (Infrastructure Security)

  - Assist in formulating and implementing infrastructure-level information security policies, standards, and procedures (including ISO 27001-related requirements).

  - Handle day-to-day security operations such as firewall policy, network segmentation, access control, endpoint protection, DLP, and log monitoring.

  - Participate in security risk assessments, vulnerability management, patch compliance, and compliance audits, and follow up on remediation actions.

  - Support security incident response, including investigation, escalation, remediation, and post-incident review.

• Infrastructure & Security Projects

  - Lead or co-lead infrastructure and security projects (e.g., firewall upgrades, SD‑WAN, server/storage replacement, virtualization optimization, Zero Trust / NAC, backup/DR improvements), covering requirements gathering, solution design, RFP/RFQ, UAT, cutover, and handover to BAU.

  - Manage external vendors and service providers (ISP, DC, hardware/software vendors, MSP), monitoring SLAs, costs, and delivery quality.

  - Prepare and maintain technical documentation (Network Diagrams, System Architecture, SOPs, Runbooks, Asset Register, Change Records, etc.).

• Team and Process Management

  - Assist the Team Lead in assigning and supervising the team’s daily work, providing level-2 support and technical guidance.

  - Participate in Change Management, Incident Management, and Problem Management processes to ensure alignment with ITIL best practices.

  - Assist in IT budget planning, procurement evaluation, and asset management to control costs and risks.

Requirements

• Education and Experience

  - Higher Diploma / Bachelor’s degree or above in Computer Science or a related field.

  - Minimum 5 years of IT infrastructure experience, with at least 2 years in a senior engineer / team core role or equivalent. Candidates with project leadership and people management experience are preferred.

  Hands-on experience with network, server, SAN storage, Windows/Linux, and security operations in medium-to-large enterprise environments.

• Technical Skills (Required)

  - Networking: LAN/WAN, Routing & Switching, Firewall, VPN, Wi‑Fi, DNS, DHCP, TCP/IP.

  - Servers & Virtualization: Windows Server, Linux, VMware / Hyper‑V, Cluster/HA.

  - Storage & Backup: SAN/NAS, backup solutions, DR planning and testing.

  - Directory & System Services: AD DS, Group Policy, Email System, basic scripting (PowerShell / Bash, etc.).

  Information Security: Firewall Policy, Access Control, Endpoint Protection, Log Monitoring, Vulnerability/Patch Management.

• Technical Skills (Preferred)

  - Cloud platform experience (Azure / AWS / Hybrid Cloud).

  Professional certifications such as MCSE/MCSA, RHCE, CCNA/CCNP, VCP, CISSP/CISM, etc.

• Other Requirements

  - Good written and spoken communication skills in both Chinese and English; able to prepare technical documentation and communicate with vendors.

  - High resilience under pressure; able to handle urgent incidents and provide out-of-hours support (on-call / standby).

  Strong logical analysis, problem-solving skills, and a collaborative team spirit.