{"id":4289969,"url":"https://alion.io/job/sg-support-senior-it-infrastructure-engineer","title":"Senior IT Infrastructure Engineer","company":{"id":318293,"name":"SG Support","domain":"sgsupport.bg","url":"https://alion.io/company/sgsupport","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"DevOps","role_family":"DevOps","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Kuala Lumpur, Malaysia"],"countries":["MY"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Azure","optional":false},{"name":"FortiGate","optional":false},{"name":"ITIL","optional":false},{"name":"Jira","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"PCI DSS","optional":false},{"name":"Power BI","optional":false},{"name":"PowerShell","optional":false},{"name":"Rest API","optional":false}],"status":"live","first_seen_at":"2026-11-13T22:58:00Z","employer_posted_date":null,"last_verified_at":"2026-11-13T22:58:00Z","board_verified":false,"closed_at":null,"days_open":0,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":0},"description":"Role Summary\nThis role is responsible for the stable, secure, and compliant operation of SG Support infrastructure services while also driving continuous improvement through automation, identity governance, and structured enhancement work. The successful candidate is an all-rounder who can operate across ITIL Level 1 to Level 3, manage workflows end-to-end in Jira, execute change safely, and maintain strong operational discipline in a PCI DSS Tier 1 environment. A strong emphasis is placed on building and maintaining automation as a normal operating standard, not as an optional add-on.\n\nWork Allocation\n60% Business as Usual BAU Operations\n20% Project and Process Enhancement Proactive\n20% Personal Development\n\n1)Business as Usual BAU Operations 60%\nEnsure smooth and secure operation of IT systems and infrastructure in accordance with established standards and internal controls\nExecute and fully close out the daily BAU checklist consistently, ensuring tasks are completed with appropriate notes or evidence where required\nTroubleshoot and resolve infrastructure issues promptly to minimize downtime and service impact\nMonitor system health and performance, maintain monitoring coverage, and perform regular maintenance tasks\nManage incidents and service requests from Level 1 through Level 3, including triage, escalation, vendor coordination, and end-to-end resolution ownership\nMaintain accurate and current operational documentation including runbooks, standard operating procedures, architecture notes, and configuration references\nOperate and maintain identity and access platforms, including Azure Entra ID configurations, enterprise application registrations, authentication and access controls, and governance-related operational tasks\nMaintain strong operational ownership and follow-through, ensuring critical operational needs are met during high workload periods, with a practical and responsible approach to extended hours when required for service restoration or urgent deliverables\n\nAutomation Expectations embedded in BAU and Delivery\nIdentify repeatable operational tasks and convert them into reliable automation to reduce manual work and improve consistency\nCreate, refactor, and maintain automation assets primarily using PowerShell, with clear documentation and safe operational controls\nBuild and maintain API-driven integrations using REST calls where needed, including handling authentication, pagination, throttling, retries, and structured error handling\nTreat automation as a standard part of delivery, including testing, validation, error handling, and maintainability\nBuild lightweight reporting and operational visibility using Power BI where appropriate to enable measurable outcomes and reduce manual status tracking\n\n2)Project and Process Enhancement Leading and Implementation 20%\nLead discussions and collaborate with stakeholders to identify infrastructure enhancements that improve reliability, security, compliance readiness, identity governance maturity, or operational efficiency\nDevelop clear project and process plans including scope, assumptions, dependencies, timeline, risks, testing approach, validation steps, and rollback plan\nExecute infrastructure changes efficiently while ensuring accountability, documentation quality, and adherence to change objectives\nImplement identity governance improvements, including Azure PIM approaches, role management practices, and enterprise application registration governance that aligns with operational and audit requirements\nStrengthen monitoring, alerting, and operational workflows with measurable outcomes and post-implementation validation\nDeliver automation-first improvements, prioritizing API-based integrations and scriptable workflows over manual processes\n\nITIL and Change Management Expectations\nOperate across ITIL Level 1 to Level 3 responsibilities including helpdesk management, ticket triage, escalation management, and workflow governance in Jira\nEnsure incident, request, problem, and change records are handled with proper categorization, prioritization, documentation, and closure quality\nApply disciplined change management for any work that can impact services, including risk assessment, stakeholder communication, approvals, implementation validation, and rollback readiness\nMaintain clear audit trails through Jira documentation and associated evidence capture\n\nPCI DSS Tier 1 Compliance Awareness\nOperate in a PCI DSS Tier 1 compliant environment where audit readiness, evidence quality, and control consistency are important\nSupport audit activities by maintaining documentation, access governance practices, change records, inventories, and monitoring evidence aligned to internal compliance processes\nDesign and execute changes in a way that does not introduce security or control gaps, and raise risks early when compliance impact is possible\nPrior experience supporting PCI DSS audits or operating in regulated environments is beneficial\n\nEmail Platform and Delivery Awareness\nSupport services that rely on email delivery and email blasting operations by understanding mail flow concepts, authentication mechanisms, and operational dependencies\nKnowledge of role account standards such as RFC 2142 style mailboxes and aliases is preferred\n\nCommunication and Work Practices\nKeep the manager informed with concise, timely updates on operational health, major incidents, key risks, and delivery status\nProactively communicate progress, blockers, and expected timelines, escalating early when needed\nDemonstrate a self-starter mindset with strong ownership, curiosity, and continuous learning habits, translating learning into practical improvements for the team\nUse AI productivity tools responsibly to improve speed and quality of delivery while maintaining confidentiality and governance expectations\n\n3) Personal Development 20%\nContinuously improve technical skills and stay current with industry trends and best practices\nPursue relevant certifications with focus on Azure, identity governance, infrastructure, security, and service management disciplines\nExperiment with new technologies and tools that improve productivity, security posture, and operational effectiveness, and document outcomes for reuse\n\nCore Deliverables\nCompleted daily BAU checklist with consistent closure quality and evidence where required\nReliable incident resolution with clear root cause analysis and preventative actions for recurring issues\nOperational runbooks and documentation maintained and kept current\nMonitoring coverage and service availability reporting supported by UptimeRobot and platform-native tooling\nWell-structured change and project documentation including testing, validation, approvals, and rollback planning\nAutomation assets including PowerShell scripts and API-driven integrations that reduce BAU workload and improve consistency\nIdentity governance artifacts such as enterprise application registration documentation, access model documentation, and PIM related operational controls\nOperational dashboards and reporting where needed using Power BI Professional\nCompliance supporting evidence aligned to PCI DSS related operational expectations\n\nMeasures of Success:\n1)BAU\nHigh service stability with fewer repeat incidents and reduced time to restore service for priority issues\nConsistent completion of BAU checklist with strong documentation quality\nImproved monitoring coverage and reduced blind spots\nIncreased percentage of repeatable BAU tasks automated and measurable reduction in manual effort\n\n2)Projects and Improvements\nEnhancements delivered with measurable outcomes such as reduced operational toil, improved reliability, or stronger identity governance maturity\nChanges executed safely with minimal incidents and clear validation evidence\nHigher stakeholder confidence due to clear planning, governance, and communication\n\n3)Personal Development\nCertifications or measurable skill milestones achieved\nLearning applied into operational, automation, or process improvements that the team can reuse\n\nWhat We're Looking For:\nProven experience as a Senior IT Infrastructure Engineer or similar role\nStrong proficiency in PowerShell scripting with the ability to create, refactor, merge, and troubleshoot scripts end-to-end\nStrong experience with API integration and calling REST APIs, including authentication patterns and structured error handling\nExtensive knowledge of Microsoft Azure, Microsoft 365, and Cloudflare\nStrong experience with Azure Entra ID including enterprise application registration and governance practices\nStrong experience implementing or operating Azure Privileged Identity Management PIM or equivalent privileged access solutions\nHands-on experience with Fortinet FortiGate and Fortinet Access Points and Cisco switching networks\nExperience with DUO or equivalent MFA solutions and enterprise credential management ideally 1Password EPM or equivalent\nExperience leading infrastructure projects from planning to delivery and stabilization\nStrong problem-solving and analytical skills\nEffective communication and stakeholder management skills","description_format":"text","description_chars":9112,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Continuous learning"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Retail & Shop Systems","POS Terminals & Kiosks"],"lifecycle":[{"event":"open","at":"2026-11-13T22:58:00Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":30,"reasons":["seen:0","win:early"],"computed_at":"2026-11-14T00:13:17Z"},"pay":null,"html_url":"https://alion.io/job/sg-support-senior-it-infrastructure-engineer","json_url":"https://alion.io/job/sg-support-senior-it-infrastructure-engineer.json","meta":{"generated_at":"2026-11-14T00:13:17Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":473,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-15T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":318293},"rest":"https://alion.io/mcp/rest/get_company?id=318293"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fsg-support-senior-it-infrastructure-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"free","price":{"credits":0,"usd":0},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fsg-support-senior-it-infrastructure-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fsg-support-senior-it-infrastructure-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/sg-support-senior-it-infrastructure-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fsg-support-senior-it-infrastructure-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4289969}},{"tool":"search_jobs","arguments":{"company":"sgsupport.bg","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4289969},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}