[ref. s66113120] Bedok - Infrastructure & security engineer

Responsibilities:

• Install, configure, and maintain physical and virtual servers (latest Windows Server OS), network devices (switches, firewalls), and desktops/laptops in a secure, on-premise data center environment.
• Manage and optimize the data center infrastructure, including physical rack organization, cabling, environmental controls, and power management.
• Support and improve network infrastructure — including design, VLAN configuration, routing, switching, and firewall rules — to ensure performance, stability, and scalability.
• Perform system and network hardening following industry standards (e.g., CIS Benchmarks) and security best practices.
• Monitor system and network performance; troubleshoot and resolve infrastructure issues across servers, networks, storage, and endpoints.
• Automate routine administrative tasks using PowerShell and scripting to improve operational efficiency and consistency.
• Support and maintain infrastructure applications such as backup systems, antivirus, endpoint protection, monitoring tools, and logging platforms.
• Manage and secure file transfer services (e.g., SFTP), ensuring encryption, access control, and policy enforcement.
• Participate in or support the execution of patch management, upgrades, and server migrations (including off-hours or weekends when needed).
• Deploy and maintain virtualization platforms including Hyper-V and VMware, including provisioning, resource allocation, and snapshots.
• Assist in planning and executing infrastructure projects — including server refreshes, office IT deployments, and client site setups.
• Provide Level 1 and Level 2 technical support for internal users and clients, and ensure all incidents and tasks are properly documented.
• Collaborate with security stakeholders or vendors on vulnerability assessments and penetration testing (VAPT); assist in remediation and documentation.
• Support compliance with data protection regulations (e.g., PDPA) and implement relevant technical and administrative controls.
• Maintain documentation for infrastructure configurations, procedures, security policies, and incident reports.

Requirements:

• Diploma or higher in Information Technology, Computer Engineering, or a related field.
• Minimum 3 years of hands-on experience in IT infrastructure, data center, or systems/network administration roles.
• Strong knowledge of Microsoft Windows Server (2016/2019/2022), Active Directory, DNS, DHCP, and Group Policy.
• Experience managing virtualization platforms including Hyper-V and VMware in a production environment.
• Proficiency in PowerShell scripting for task automation and system management.
• Solid understanding of network architecture, VLANs, Layer 2/3 switching, routing, and firewall configurations.
• Familiarity with infrastructure security hardening, patching, and applying CIS Benchmarks or other recognized security guidelines.
• Experience implementing or supporting Vulnerability Assessment and Penetration Testing (VAPT) activities.
• Familiarity with secure protocols such as SFTP, SSL/TLS, and concepts like least privilege and access control.
• Able to work outside regular business hours (e.g., weekends or evenings) during critical maintenance windows or infrastructure rollouts.
• Strong problem-solving skills and a professional, collaborative attitude.
• Willing to travel occasionally for customer site support and deployment.

Added Advantages:

• Able to work independently and as a team, being proactive with a mind for details and creative in trouble-shooting and problem-solving.
• Demonstrate problem-solving skills or work improvements, especially with different approaches as well as leveraging usage of tools and/or AI.
• Ability to source for solutions (software/hardware/hybrid) that are economical, timely and good.