IT Manager
Responsibilities
1. Infrastructure & Systems Administration
Oversee and maintain hybrid IT architecture, including Microsoft 365, Azure Active Directory / Entra ID, and on-premises Active Directory (AD).
Manage server infrastructure, Active Directory Domain Services, Group Policy Objects (GPO), and system virtualization.
Enforce robust data backup strategies, disaster recovery plans, and incident response protocols.
2. Network & Security Management
Manage regional network architecture, including SASE / Next-Gen Firewalls (e.g., Cato Networks), VPNs, switches, and remote access configurations.
Implement HQ security policies, access controls (RBAC), and least-privilege administrative protocols.
Coordinate network assessments, vulnerability scanning, and cybersecurity implementations in line with corporate standards.
3. Vendor & Service Provider Management
Manage relationships with third-party IT service providers (e.g., Managed IT Services / MITS), contract tokens, SLAs, and technical support engagements.
Ensure third-party access complies with company remote access and privileged account security policies.
Evaluate and approve external tools, hardware, and software applications for operational feasibility and HQ compliance.
4. IT Governance, Strategy & HQ Alignment
Serve as the main technical contact for HQ IT alignment, ensuring local configurations meet global security and operational standards.
Manage local IT budgets, hardware procurement, software licensing, and service token allocation.
Provide technical leadership and user support escalation for regional office staff.
Requirements
Experience & Education
Degree in Computer Science, Information Technology, or a related discipline.
8+ years of experience in IT infrastructure and systems administration, with at least 3+ years in a lead or managerial role.
Strong background in managing hybrid enterprise environments (M365 + On-Premises AD).
Technical Competencies
Identity & Access Management: Deep knowledge of Active Directory, Azure AD/Entra ID, GPO, RBAC, and Privileged Access Management (PAM).
Networking & Security: Hands-on experience with SASE architecture (Cato or similar), SD-WAN, firewall configuration, and remote access protocols.
Vendor Operations: Proven track record in managing Managed Service Providers (MSPs) and external contractors under strict SLA/policy frameworks.
Cybersecurity: Solid understanding of endpoint protection, network assessment tools, and incident response frameworks.
Soft Skills & Certifications
Certifications (Preferred): MCSE / Microsoft Certified: Azure Administrator, CCNA/CCNP, CISSP, or ITIL Foundation.
Communication: Excellent command of English and Chinese (Cantonese/Mandarin) to liaise effectively with regional staff, vendors, and HQ leadership.
Problem Solving: Strong analytical mindset with a balance between technical execution and business policy compliance.
Working Location
San Po Kong
Our Offer
Competitive remuneration package
Discretionary bonus
5-day work week
Birthday leave
Mobile allowance
Education allowance
Medical insurance