Infrastructure Engineer

Job summary

Design, implement, and support technology systems and IoT infrastructure for China offices while collaborating with global engineering teams. Lead PoC, RFP, and RFE initiatives to ensure systems meet firm policies and business requirements.

Job details

Role Overview We are seeking a highly skilled and versatile Full Stack Infrastructure Engineer capable of handling a broad range of responsibilities including Proof of Concept (PoC), Request for Proposal (RFP), and Request for Enhancement (RFE) initiatives. The ideal candidate will possess deep technical expertise across infrastructure layers, strong scripting capabilities, and excellent communication and stakeholder management skills. As a Full Stack Infrastructure Engineer, you will be responsible for the design, analysis, implementation and support of technology systems for the China offices. This will include working closely with many technology engineering teams such as Networks, SecDesign, Proxy, Risk and Windows, in order to implement systems that meet the Firms policies. This will also mean you will need to work with external vendors to ensure that their products meet these policies. You will need to collaborate with the business stakeholders to ensure the systems meet their needs and requirements. This is very much a hands-on role, where you will be involved in the creation of PoCs and evaluations to test the systems prior to production deployment. During the testing period, it may be necessary to work with internal and external teams so that the systems are working in line with MS policies. There are several IoT systems that you will be working with, including Client (building management system), lighting controls, occupancy and air quality. The ideal candidate should have the skills listed below and should be driven, confident and a team player, who thinks and works strategically. When faced with a problem, the candidate should be able to ask the right questions and leverage their own skills and expertise, as well as the people around them. As many of the technology partners are dispersed globally, it is vitally important that you have experience working in global teams and there may be times meetings are scheduled outside of core hours. Key Responsibilities Lead and support infrastructure-related PoC/RFP/RFE initiatives across diverse platforms. Administer applications with full lifecycle ownership, ensuring seamless request flow and network integration. Manage and troubleshoot network and security configurations including routers, switches, load balancers, proxies, firewalls, DMZ setups, IPs, ports, subnets, MAC addresses, and authentication protocols (RBAC, Kerberos, SSO, LDAP, AD). Perform server administration across Windows, Linux, Mac, and vendor ecosystems (e.g., CA, BMC, IBM DataPower). Develop and maintain automation scripts using PowerShell, Python, Perl, or Shell to streamline operations. Collaborate with DevOps teams to support CI/CD pipelines and cloud infrastructure. Engage with stakeholders and customers to understand requirements, provide updates, and ensure satisfaction. Analytical, strong support and troubleshoot IoT/OT devices across multiple platforms (Android, Windows, Linux, Unix, iOS) Work in a globally distributed team to provide innovative and robust solutions Work with SecDesign teams to design and apply appropriate controls and processes for integrated solutions Work with technology partners, stakeholders and SMEs to implement SecDesign approved solutions Provide support on existing IoT systems, manage upgrades and troubleshoot problems Ensure production systems are compliant within Hygiene programmed Collaborate with vendors to future proof our systems Required Skills & Competencies: Application Administration E3 – Excellent - End-to-end request flow with network integration Network & Security E3 – Excellent - Deep understanding of network layers, configs, and authentication flows Server Administration E3 – Excellent -Platform-agnostic, including vendor-specific systems Automation ScriptingE3 – Excellent- Strong logic and scripting in PowerShell/Python/Perl/Shell Communication Skills E3 – Excellent - Clear, concise, and effective communication Customer/Stakeholder Mgmt E3 – Excellent - Strong interpersonal and stakeholder engagement skills CI/CD DevOps E2 – Proficient - Familiarity with DevOps practices and tools Cloud Technology E2 – Proficient - Exposure to cloud platforms and services IoT/OT Devices E3 – Excellent - Platform-agnostic troubleshooting and support Preferred Qualifications Tools & Platforms Tenable, Qualys, Rapid7, Nessus Microsoft Defender, CrowdStrike (exposure management) ServiceNow (Vuln Response module) Tanium, BigFix, SCCM (patching)Practices Vulnerability scanning & assessment Patch management & remediation Risk scoring (CVSS, EPSS) Threat intelligence integration Configuration hardening (CIS benchmarks) Continuous monitoring & compliance Domains Cloud (AWS, Azure, GCP vulnerability posture) On-prem infrastructure (Windows/Linux) Network devices & appliances Containers & Kubernetes security IoT/OT vulnerability management (if applicable, strong differentiator in your profile) Bachelor’s or master’s degree in computer science, Information Technology, or related field. Certifications in network/security/cloud technologies (e.g., CCNA, AWS, Azure, etc.) are a plus.

What you’ll do

Design, implement, and support technology systems and IoT infrastructure for China offices while collaborating with global engineering teams. Lead PoC, RFP, and RFE initiatives to ensure systems meet firm policies and business requirements.

Requirements

Requires deep expertise in network security, server administration, and automation scripting across multiple platforms. A degree in Computer Science or IT is required, with proficiency in DevOps and cloud technologies preferred.

Listed skills

• CI/CD · Preferred
• Linux · Preferred
• Network Configuration · Preferred
• Stakeholder Management · Preferred
• Python · Preferred

Other relevant skills

Identified from the job description. Confirm important requirements above.

• Infrastructure Engineering
• Network Security
• Server Administration
• Automation Scripting
• IoT/OT Support
• CI/CD
• Cloud Technology
• Stakeholder Management
• Application Administration
• Vulnerability Management
• Patch Management
• PowerShell
• Python
• Linux
• Windows Server
• Network Configuration

Job areas

• Technology
• Engineering
• Security & Safety
• Software
• Finance & Accounting