Infrastructure Engineer

Job Title: Infrastructure Engineer Role Overview We are seeking a highly skilled and versatile Full Stack Infrastructure Engineer capable of handling a broad range of responsibilities including Proof of Concept (PoC), Request for Proposal (RFP), and Request for Enhancement (RFE) initiatives. The ideal candidate will possess deep technical expertise across infrastructure layers, strong scripting capabilities, and excellent communication and stakeholder management skills. As a Full Stack Infrastructure Engineer, you will be responsible for the design, analysis, implementation and support of technology systems for the China offices. This will include working closely with many technology engineering teams such as Networks, SecDesign, Proxy, Risk and Windows, in order to implement systems that meet the Firms policies. This will also mean you will need to work with external vendors to ensure that their products meet these policies. You will need to collaborate with the business stakeholders to ensure the systems meet their needs and requirements. This is very much a hands-on role, where you will be involved in the creation of PoCs and evaluations to test the systems prior to production deployment. During the testing period, it may be necessary to work with internal and external teams so that the systems are working in line with MS policies. There are several IoT systems that you will be working with, including BMS (building management system), lighting controls, occupancy and air quality. The ideal candidate should have the skills listed below and should be driven, confident and a team player, who thinks and works strategically. When faced with a problem, the candidate should be able to ask the right questions and leverage their own skills and expertise, as well as the people around them. As many of the technology partners are dispersed globally, it is vitally important that you have experience working in global teams and there may be times meetings are scheduled outside of core hours. Key Responsibilities Lead and support infrastructure-related PoC/RFP/RFE initiatives across diverse platforms.Administer applications with full lifecycle ownership, ensuring seamless request flow and network integration.Manage and troubleshoot network and security configurations including routers, switches, load balancers, proxies, firewalls, DMZ setups, IPs, ports, subnets, MAC addresses, and authentication protocols (RBAC, Kerberos, SSO, LDAP, AD).Perform server administration across Windows, Linux, Mac, and vendor ecosystems (e.g., CA, BMC, IBM DataPower).Develop and maintain automation scripts using PowerShell, Python, Perl, or Shell to streamline operations.Collaborate with DevOps teams to support CI/CD pipelines and cloud infrastructure.Engage with stakeholders and customers to understand requirements, provide updates, and ensure satisfaction.Analytical, strong support and troubleshoot IoT/OT devices across multiple platforms (Android, Windows, Linux, Unix, iOS)Work in a globally distributed team to provide innovative and robust solutionsWork with SecDesign teams to design and apply appropriate controls and processes for integrated solutionsWork with technology partners, stakeholders and SMEs to implement SecDesign approved solutionsProvide support on existing IoT systems, manage upgrades and troubleshoot problemsEnsure production systems are compliant within Hygiene programmedCollaborate with vendors to future proof our systems Required Skills & Competencies Application AdministrationE3 – Excellent - End-to-end request flow with network integrationNetwork & SecurityE3 – Excellent - Deep understanding of network layers, configs, and authentication flowsServer Administration E3 – Excellent -Platform-agnostic, including vendor-specific systemsAutomation ScriptingE3 – Excellent- Strong logic and scripting in PowerShell/Python/Perl/ShellCommunication Skills E3 – Excellent - Clear, concise, and effective communicationCustomer/Stakeholder Mgmt E3 – Excellent - Strong interpersonal and stakeholder engagement skillsCI/CD DevOpsE2 – Proficient - Familiarity with DevOps practices and toolsCloud TechnologyE2 – Proficient - Exposure to cloud platforms and servicesIoT/OT DevicesE3 – Excellent - Platform-agnostic troubleshooting and support Preferred Qualifications Tools & Platforms Tenable, Qualys, Rapid7, NessusMicrosoft Defender, CrowdStrike (exposure management)ServiceNow (Vuln Response module)Tanium, BigFix, SCCM (patching)PracticesVulnerability scanning & assessmentPatch management & remediationRisk scoring (CVSS, EPSS)Threat intelligence integrationConfiguration hardening (CIS benchmarks)Continuous monitoring & compliance DomainsCloud (AWS, Azure, GCP vulnerability posture)On-prem infrastructure (Windows/Linux)Network devices & appliancesContainers & Kubernetes securityIoT/OT vulnerability management (if applicable, strong differentiator in your profile)Bachelor’s or master’s degree in computer science, Information Technology, or related field.Certifications in network/security/cloud technologies (e.g., CCNA, AWS, Azure, etc.) are a plus.