Senior Executive, Cloud Engineer

1. Cloud and Hybrid Infrastructure Operations
• Provision, configure, operate, and maintain approved cloud services, including virtual machines, storage, virtual networks, load balancers, backup services, monitoring tools, and assigned platform services.
• Support approved Windows and/or Linux servers and VMware vSphere environments, including ESXi, vCenter Server, virtual machines, storage, monitoring, backup, patching, troubleshooting, and hybrid-cloud connectivity.
• Monitor availability, capacity, performance, health, service limits, backup status, certificates, and operational alerts; investigate and escalate based on severity and business impact.
• Maintain accurate inventories, configurations, ownership, environment classification, support contacts, dependencies, and lifecycle records.
2. Architecture, Governance, and Security
• Implement approved landing-zone structures, subscriptions or accounts, resource groups, naming, tagging, network patterns, environment separation, and architecture standards.
• Apply least-privilege principles, Role-Based Access Control (RBAC), Multi-Factor Authentication (MFA), privileged-access processes, encryption, secrets and certificate management, logging, vulnerability management, and periodic access reviews.
• Prepare technical designs, diagrams, implementation plans, service estimates, and operational documents for review and approval; raise exceptions for unapproved deviations.
• Maintain audit and control evidence and coordinate remediation with the Infrastructure, Security, Applications, Internal Audit, and relevant system-owner teams.
3. Cloud Migration and Modernization
• Assist with discovery and assessment of physical and virtual servers, VMware workloads, applications, databases, integrations, dependencies, performance, recovery requirements, and migration constraints.
• Support approved workload treatment decisions such as retain, retire, rehost, replatform, refactor, replace, or relocate.
• Prepare and execute pilot and migration-wave plans covering prerequisites, testing, backup, synchronization, cutover, rollback, communication, hypercare, operational acceptance, and formal handover.
• Capture migration evidence, lessons learned, business acceptance, and closure documentation.
4. Networking and Hybrid Connectivity
• Configure and support approved cloud networking, routing, DNS, network security groups, firewall integration, VPN or private connectivity, and segmentation.
• Monitor connectivity among cloud, data center, head office, branches, and approved third parties; troubleshoot latency, reachability, routing, DNS, and access issues.
• Coordinate related changes with SD-WAN, ISP, firewall, and infrastructure owners; maintain network diagrams, IP plans, traffic flows, dependencies, and approved firewall requirements.
5. Backup, Disaster Recovery, and Service Continuity
• Configure and monitor backup, retention, replication, recovery points, recovery objectives, and alerting for assigned services.
• Conduct scheduled backup-restore tests and disaster-recovery exercises in accordance with approved Recovery Time Objectives (RTOs) and Recovery Point Objectives (RPOs); record evidence, outcomes, issues, and improvement actions.
• Maintain recovery runbooks, escalation contacts, service dependencies, failover and failback steps, and business-validation requirements.
6. Automation, Monitoring, Cost, and Capacity
• Use approved PowerShell, Bash, Python, Terraform, vendor templates, or equivalent tools to improve repeatability, traceability, configuration consistency, and deployment quality.
• Build or maintain dashboards and alerts for availability, utilization, capacity, backup, security, performance, and cost indicators.
7. Service, Project, and Vendor Coordination
• Follow incident, problem, change, release, configuration, knowledge, and service-management processes; support root-cause analysis and preventive actions.

Education: Bachelor’s degree in Information Technology, Computer Science, Cloud Computing, Information Systems, or a related field. Equivalent relevant experience may be considered in accordance with HR policy.
Professional Qualification: Role-relevant certification in Huawei Cloud, Microsoft Azure, AWS, VMware, Windows Server, Linux, networking, backup, security, DevOps, or ITIL is preferred.
Relevant Years of Experience: Minimum 3 to 5 years in cloud infrastructure, on-premises server administration, VMware virtualization, networking, platform operations, workload migration, or a related infrastructure role.
Technical Knowledge: Working knowledge of at least one major cloud platform; Windows and/or Linux servers; VMware vSphere, ESXi, and vCenter Server; TCP/IP, DNS, VPN, firewalls, storage, monitoring, backup, security controls, and hybrid-cloud connectivity.
Migration and Operations: Ability to assess dependencies, prepare implementation and rollback plans, troubleshoot services, support controlled cutovers, maintain runbooks, and execute changes with evidence.
Automation: Basic working ability with PowerShell, Bash, Python, Terraform, vendor templates, or equivalent approved automation tools is preferred.
Language: Professional communication skills in Khmer and English are preferred for reporting, vendor coordination, technical documentation, and cross-functional collaboration.
Mobility and Availability: Ability to support assigned ISI Group locations and participate in approved after-hours changes, migrations, recovery tests, or major-incident response when required.
Behavioral Requirements: Ownership, integrity, confidentiality, teamwork, continuous learning, calm execution under pressure, analytical thinking, and attention to detail.