Infrastructure & Security Manager
Job Duties:
Lead the design, deployment, and maintenance of enterprise infrastructure, including servers, mail gateways, networks, virtualization (VM), and cloud environments (AWS, Alicloud).
Own the organization's cloud strategy and execution — architecting, deploying, and optimizing cloud environments across Hong Kong and overseas operations.
Manage CI/CD pipelines, containerization, and orchestration (Kubernetes) to support reliable, scalable deployments.
Plan and execute Disaster Recovery (DR) drills and maintain business contingency plans to ensure operational resilience.
Implement and maintain enterprise security solutions; monitor, investigate, and respond to security incidents with timely reporting.
Conduct risk assessments, vulnerability scans, and security testing; develop and enforce IT security policies, standards, and procedures.
Lead internal and external audits to ensure compliance with ISO and other regulatory and business requirements.
Provide expert guidance on secure, resilient system architecture and emerging infrastructure and security technologies.
Drive infrastructure and cloud projects end-to-end with strong project management discipline — scope, schedule, budget, and stakeholder management.
Deliver staff training and awareness programs to promote a strong security and operational culture.
Job Requirements:
Bachelor's degree in Computer Science, Information Technology, or related discipline.
Minimum 8 years of experience in IT infrastructure and security operations, including proven hands-on experience delivering and deploying infrastructure and cloud environments, with time spent in a supervisory or team-lead capacity.
Demonstrated track record of executing cloud deployments for Hong Kong and overseas/foreign operations.
Strong knowledge of infrastructure technologies — servers, mail gateways, networking, virtualization (VM), CI/CD, and Kubernetes.
Hands-on experience with cloud platforms (AWS, Azure), including deployment, configuration, and security settings.
Solid understanding of DR drills, contingency/business continuity planning, ISO standards, and compliance.
Working knowledge of cybersecurity frameworks, risk management practices, and incident response (SIEM, IDS/IPS, PAM, IAM).
Strong project management skills, with the ability to lead projects and teams independently and collaboratively.
Good command of written and spoken English, Mandarin, and Cantonese.
Professional certifications such as PMP, ITIL, TOGAF, AWS/Azure certifications, CISSP, or CISM are preferred.
Candidates with less experience may be considered for the position of Infrastructure and Security Engineer.