Senior Infrastructure Engineer

At KMS Technology, we are dedicated to delivering cutting-edge solutions and services that empower businesses to achieve their goals. Our team is composed of highly skilled professionals who are passionate about technology and innovation. We are seeking a seasoned Senior Infrastructure Engineer with 10+ years of experience to own and modernize the hybrid and on-premises infrastructure for a leading U.In this role, you will act as the principal infrastructure lead: driving data center operations, network engineering, security, and storage architecture.
Because physical hardware resides at the client's manufacturing facilities, you will orchestrate on-site execution remotely by specifying hardware configurations, writing step-by-step runbooks, and directing local IT staff and vendors. Additionally, you will partner with business leadership to advise on core IT decisions and pilot forward-looking initiatives, including on-premises Kubernetes deployment and self-hosted AI models.
On-Call: Periodic on-call availability for major outage resolution and critical maintenance windows.
Language: Strong written and spoken English proficiency for asynchronous and real-time collaboration.
Virtualization: Architect, maintain, and tune a virtualized data center comprising dozens of physical and virtual servers across Hyper-V (Windows Server Datacenter) and KVM (Linux).
Backup & DR: Own business continuity and disaster recovery strategies (using Bareos, Azure Backup, or similar), including automated backup monitoring, routine restore testing and detailed DR runbooks.
Streamline server, network, and access management using Ansible and Bash scripts. Maintain core internal tooling (GitLab EE, Passbolt). Network Infrastructure & Cybersecurity
Network Operations: Design, optimize, and manage LAN, subnets, VLANs, routing, and secure VPNs across manufacturing plant and office locations.
Traffic & Security Analysis: Monitor and analyze network traffic (Wireshark, NetFlow) across plant subnets to detect anomalies and optimize throughput.
Vulnerability Management: Perform vulnerability scans, fix security gaps, enforce firewall policies and collaborate directly with the client's in-house cybersecurity specialist.
Remote Physical Operations & Vendor Direction
Hardware & Cabling Specifications: Define hardware configurations (servers, workstations, network switches, IP camera systems) and draft precise step-by-step setup guides for on-site staff.
Structured Cabling & Surveillance: Design Ethernet/fiber cabling alterations, evaluate vendor proposals and verify completed installations. Plan and configure IP surveillance systems (NVR/VMS) and their dedicated subnets.
Remote Hands Orchestration: Utilize out-of-band management tools (iDRAC, iLO, IPMI) to troubleshoot,recover and provision bare-metal systems remotely.
cloud models for document management.
Pilot next-generation infrastructure platforms, including on-premises Kubernetes clusters and locally hosted AI/LLM models (e.g., Documentation & Asset Management: Maintain thorough technical documentation, including network topologies, system architecture diagrams, asset inventories and credential/access management records.
Experience: 10+ years in systems, network engineering and infrastructure administration within complex on-premises or hybrid environment setups.
Remote Leadership: Proven track record of managing physical data centers and network infrastructure remotely,including directing on-site remote hands and third-party vendors.
Solid hands‐on expertise with Hyper‐V and KVM (or Red Hat Virtualization / oVirt).
OS & Directory Services: Senior‐level administration of Windows Server (Active Directory, Group Policy, file permissions) and enterprise Linux distributions.
Networking & Security: Deep knowledge of network design (VLANs, subnets, routing, VPNs), firewall policies and traffic/vulnerability analysis.
Storage & DR: Proficiency with enterprise SAN/NAS hardware (Pure Storage or similar) and backup/DR tooling (Bareos/Bacula, Azure Backup, or Commvault).
Practical experience automating system configuration and deployment with Ansible and shell scripts.
Hardware & Out-of-Band Management: Strong background using iDRAC, iLO, or IPMI for out-of-band recovery, with sufficient hardware knowledge to specify physical rack equipment, structured cabling and power requirements.
Communication: Exceptional written English skills and strong documentation habits to support asynchronous, cross‐border workflows.
Network Hardware: Surveillance Systems: Hands‐on setup and management of enterprise IP surveillance camera systems (NVR/VMS).
Containerization & AI: Familiarity with on‐premises Kubernetes deployments and self‐hosted AI/LLM models.
Applications & Databases: Experience supporting ERP systems (e.g., Microsoft Dynamics AX), CAD software platforms (AutoCAD, BricsCAD) or database admin