Group Senior Infrastructure Engineer

JOB PURPOSE

The Group Senior Infrastructure Engineer is a senior technical lead who owns the design, automation, security, and operational health of infrastructure across Ports and Terminals products hosted on Microsoft Azure, on-premises, and hybrid environments. Working in a hybrid Engineering and Operations model, the engineer builds platforms and remains accountable for their availability and continuous improvement in production. They partner with Solutions Architect, Development, Database, Security, and DevOps teams to keep platforms scalable, resilient, secure, cost-efficient, and aligned with enterprise architecture. The engineer drives automation and standardization across the estate using tools such as Terraform, Ansible, PowerShell, and Python, establishes golden images and reference architectures, and systematically reduces manual work. They are responsible for security baselines, patching and vulnerability remediation, least-privilege access, and audit readiness, working closely with the Security team. The engineer owns the lifecycle of compute, storage, networking, virtualization, containers, identity, monitoring, backup, and disaster recovery across a multi-site terminal estate. They translate business continuity needs into RTO and RPO targets, design failover strategies, lead DR testing, and document architectural trade-offs with the stakeholders who depend on them.

The role will strategically carry significant operational leadership. The engineer leads major incident response and complex troubleshooting across SLA-tiered priorities and drives root-cause analysis to permanent fixes. They put proactive monitoring and capacity planning in place.

KEY ACCOUNTABILITIES

Technical Leadership and Collaboration

• Design, deploy, and support scalable hybrid-cloud infrastructure across Cloud and on-premises environments, covering compute, storage, virtualization, operating systems, networking, identity, connectivity, and platform services.
• Take strategical decisions across Infrastructure platform and setup practices.
• Partner with Application, Database, Security, DevOps, Service Management, regional, and business teams to deliver infrastructure solutions and resolve complex service issues.
• Provide technical guidance, peer reviews, knowledge transfer, and mentoring to infrastructure engineers and support teams.
• Engage vendors and service providers for design validation, support escalation, product evaluation, implementation, and lifecycle planning.

Infrastructure Architecture and Engineering

• Produce high-level and low-level designs, implementation plans, operational runbooks, standards, and support documentation for new and existing infrastructure services.
• Assess technical requirements, dependencies, capacity, resilience, security, supportability, and total cost before recommending infrastructure solutions.

Cloud, Virtualization, Operating Systems, and Platforms

• Administer Azure services including Virtual Machines, Virtual Networks, subnets, Network Security Groups, load balancing, private connectivity, identity services, monitoring, backup, and automation.
• Engineer and support VMware ESXi, vCenter, vSphere, Windows Server, Linux, Active Directory, and Microsoft 365 infrastructure services.
• Deploy and support container platforms and workloads using Docker, Podman, and Kubernetes, with appropriate availability, observability, capacity, and security controls.

Network and Infrastructure Security

• Design and deploy enterprise networking, including TCP/IP, routing, switching, DNS, DHCP, VLANs, VPNs, load balancing, segmentation, Wi-Fi, and secure cloud connectivity.
• Implement and maintain firewalls, remote access, IDS/IPS, micro-segmentation, identity and access, secret management, hardening, vulnerability-remediation, and zero-trust controls.
• Ensure infrastructure changes comply with approved security, architecture, change management, audit, and governance requirements.

Automation and Operational Excellence

• Automate infrastructure provisioning, configuration, compliance, and operational activities using Infrastructure as Code, Azure CLI, PowerShell, Bash, Python, and approved CI/CD tooling.
• Drive standardization, reusable templates, self-service capabilities, configuration consistency, and reduction of manual operational effort.
• Implement effective monitoring, alerting, logging, capacity management, performance optimization, asset management, and service-health reporting.

Reliability, Incident Management, and Recovery

• Provide senior technical leadership during critical incidents, coordinate cross-functional troubleshooting, restore services within agreed priorities, and communicate clear technical status and risk.
• Lead root-cause analysis and post-incident reviews, identify corrective and preventive actions, and ensure actions are tracked through closure.
• Design, maintain, and test backup, restore, high-availability, disaster recovery, and business-continuity capabilities against approved service requirements.

JOB CONTEXT

This role operates across cloud and on-premises infrastructure in a hybrid environment, sitting at the intersection of cloud platforms, infrastructure operations, information security, applications, and databases. It balances day-to-day service reliability and incident resolution with longer-term work on automation, standardization, security hardening, capacity, resilience, and cloud modernization.

Success contributes to stable infrastructure services, lower operational and security risk, improved efficiency, and dependable recovery capabilities. The role supports cross-functional teams running complex, distributed systems for diverse customers with varying technical needs and service level expectations, and requires moving between urgent operational demands, such as incident response and customer escalations, and strategic initiatives that improve how the estate is automated, standardized, and optimized.

QUALIFICATIONS, EXPERIENCE AND SKILLS

• A bachelor's degree in computer science, Information Technology, Engineering, or related discipline.
• 10+ years of enterprise infrastructure experience.
• Proven experience designing, operating, and supporting production Azure, VMware, Windows, Linux, networking, and automation platforms in resilient, multi-site environments.
• Deep expertise in Microsoft Azure networking and compute, including Virtual Networks, subnets, NSGs, service endpoints, Azure Virtual Machines, identity services, Azure CLI, and Azure Automation.
• Hands-on administration of VMware ESXi, vCenter, and vSphere at scale, along with Windows Server, Linux, Active Directory, and Microsoft 365.
• Network engineering across Fortinet, Check Point, and Cisco firewalls and switches, including VPN technologies, enterprise routing and switching, segmentation, and Wi-Fi infrastructure.
• Production experience with Docker, Podman, and Kubernetes.
• Automation and scripting in PowerShell, Bash, and Python, with Infrastructure as Code and operational automation that measurably reduces manual effort.
• Operations and resilience expertise spanning monitoring, incident and problem management, performance tuning, capacity planning, asset management, backup, disaster recovery design and testing, infrastructure hardening, vulnerability remediation, and advanced troubleshooting.
• Strong grasp of networking fundamentals, including TCP/IP, routing, switching, DNS, DHCP, VLANs, VPNs, load balancing, segmentation, and secure connectivity principles.
• Solid network security architecture knowledge, including defense-in-depth, zero-trust, identity-based access control, and secure cloud networking, with practical use of Azure Defender, Microsoft Sentinel, Azure Security Center, Azure Firewall Manager, Key Vault, Managed Identities, and conditional access.
• Technical leadership ability to mentor engineers, lead design and change reviews, and set direction across internal and contractor teams.
• Clear written and verbal communication, including translating complex trade-offs for non-technical stakeholders and producing runbooks and architecture documentation.
• Composure and decisive judgment in critical, high-pressure incidents, including coordinating across regions.
• Willingness to work rotating shifts and on-call to support 24x7 services.
• Preferred certifications: Microsoft AZ-104 or AZ-305, VMware VCP, Cisco CCNA or CCNP, RHCSA or RHCE, and Kubernetes CKA or CKAD.

FRAMEWORKS, BOUNDARIES AND DECISION MAKING AUTHORITY

Operates with day-to-day autonomy for cloud and infrastructure engineering activities within approved architecture, security, change management, and operational standards. Escalates significant service, security, financial, or architectural risks to senior management.