Assistant Manager, IT Infrastructure

Tai Hing Worldwide Development Ltd; Sha Tin; On-site; HKD 420,000 - 700,000; Full time

Job summary

Tai Hing Worldwide Development Ltd. in Hong Kong seeks an experienced IT Infrastructure Senior Engineer to plan, design, implement, and operate the company's IT backbone, ensuring high availability and security aligned with business needs.

You'll lead BAU operations for networks, servers, storage, and security, manage vendor relationships, and drive infrastructure projects while adhering to ITIL practices.

Qualifications

• Higher Diploma / Bachelor's degree or above in Computer Science or a related field.
• 5+ years of IT infrastructure experience, with at least 2 years in a senior engineer / team core role or equivalent.
• Hands‑on experience with network, server, SAN storage, Windows/Linux, and security operations in medium‑to‑large enterprise environments.
• Technical Skills (Required): Networking: LAN/WAN, Routing & Switching, Firewall, VPN, Wi‑Fi, DNS, DHCP, TCP/IP.
• Technical Skills (Preferred): Cloud platform experience (Azure / AWS / Hybrid Cloud).
• Professional certifications such as MCSE/MCSA, RHCE, CCNA/CCNP, VCP, CISSP/CISM, etc.

Responsibilities

• Monitor and optimize enterprise networks and servers for performance and availability.
• Manage SAN/NAS storage and backup solutions with DR planning and testing.
• Administer Windows Server environments and Linux servers, including AD DS and Azure AD integration.
• Implement infrastructure security policies, firewall rules, access control, log monitoring, and incident response.
• Lead infrastructure and security projects with vendors, SLAs, budgets, and documentation.
• Support ITIL processes and participate in Change, Incident, and Problem Management.

Skills

LAN/WAN networking

Servers & Virtualization

Security operations

AD/Directory Services

Cloud platforms

ITIL / Change Mgmt

Documentation

Education

Bachelor's degree in Computer Science

5+ years IT infrastructure experience

Tools

Windows Server

Linux

VMware/Hyper-V

SAN/NAS

Backup/DR

AD/Directory services tooling

Job description

Assist the Team Lead in planning, designing, implementing, and operating the company's overall IT infrastructure (network, servers, SAN storage, Windows/Linux systems), and take charge of day-to-day information security operations as well as infrastructure- and security-related projects. Ensure systems are highly available, secure, and aligned with business needs.

Key responsibilities

Infrastructure Operations (BAU)

- Responsible for daily monitoring, configuration, troubleshooting, and performance optimization of enterprise networks (LAN/WAN, Firewall, Switch, Router, Wi‑Fi, DNS, DHCP, TCP/IP).

- Manage servers and virtualization platforms (Windows Server, Linux, VMware / Hyper‑V, etc.), including installation, configuration, patch management, capacity planning, and high availability design.

- Manage SAN/NAS storage and backup solutions to ensure effective execution of data backup, restoration testing, and disaster recovery planning.

- Monitor system and network performance (availability, utilization, throughput, latency); perform root cause analysis on alerts and incidents, and implement improvement measures.

Operating Systems and Directory Services

- Manage and maintain Windows Server environments (AD DS, Group Policy, DNS, DHCP, File/Print Server, etc.) and integration with Microsoft Entra ID / Azure AD.

- Manage Linux servers (RHEL/CentOS/Ubuntu, etc.), including installation, configuration, security hardening, scripting automation, and routine maintenance.

- Manage user accounts, permissions, and access controls (AD, Email, Cloud systems) to ensure compliance with the principle of least privilege and regulatory requirements.

Information Security (Infrastructure Security)

- Assist in formulating and implementing infrastructure-level information security policies, standards, and procedures (including ISO 27001-related requirements).

- Handle day-to-day security operations such as firewall policy, network segmentation, access control, endpoint protection, DLP, and log monitoring.

- Participate in security risk assessments, vulnerability management, patch compliance, and compliance audits, and follow up on remediation actions.

- Support security incident response, including investigation, escalation, remediation, and post-incident review.

Infrastructure & Security Projects

- Lead or co‑lead infrastructure and security projects (e.g., firewall upgrades, SD‑WAN, server/storage replacement, virtualization optimization, Zero Trust / NAC, backup/DR improvements), covering requirements gathering, solution design, RFP/RFQ, UAT, cutover, and handover to BAU.

- Manage external vendors and service providers (ISP, DC, hardware/software vendors, MSP), monitoring SLAs, costs, and delivery quality.

- Prepare and maintain technical documentation (Network Diagrams, System Architecture, SOPs, Runbooks, Asset Register, Change Records, etc.).

Team and Process Management

- Assist the Team Lead in assigning and supervising the team’s daily work, providing level‑2 support and technical guidance.

- Participate in Change Management, Incident Management, and Problem Management processes to ensure alignment with ITIL best practices.

- Assist in IT budget planning, procurement evaluation, and asset management to control costs and risks.

Requirements

Education and Experience

- Higher Diploma / Bachelor's degree or above in Computer Science or a related field.

- Minimum 5 years of IT infrastructure experience, with at least 2 years in a senior engineer / team core role or equivalent. Candidates with project leadership and people management experience are preferred.

Hands‑on experience with network, server, SAN storage, Windows/Linux, and security operations in medium‑to‑large enterprise environments.

Technical Skills (Required)

- Networking: LAN/WAN, Routing & Switching, Firewall, VPN, Wi‑Fi, DNS, DHCP, TCP/IP.

- Servers & Virtualization: Windows Server, Linux, VMware / Hyper‑V, Cluster/HA.

- Storage & Backup: SAN/NAS, backup solutions, DR planning and testing.

- Directory & System Services: AD DS, Group Policy, Email System, basic scripting (PowerShell / Bash, etc.).

Information Security: Firewall Policy, Access Control, Endpoint Protection, Log Monitoring, Vulnerability/Patch Management.

Technical Skills (Preferred)

- Cloud platform experience (Azure / AWS / Hybrid Cloud).

Professional certifications such as MCSE/MCSA, RHCE, CCNA/CCNP, VCP, CISSP/CISM, etc.

Other Requirements

- Good written and spoken communication skills in both Chinese and English; able to prepare technical documentation and communicate with vendors.

- High resilience under pressure; able to handle urgent incidents and provide out‑of‑hours support (on‑call / standby).

Strong logical analysis, problem‑solving skills, and a collaborative team spirit.