Infrastructure Architect, Network & Systems

Atlantic Gate; Hong Kong; On-site; HKD 900,000 - 1,300,000; Full time

Job summary

Atlantic Gate is seeking a senior IT infrastructure architect to own the design of network, systems, cloud and workplace foundations across sites. You will set technical direction, enforce standards, and ensure security, resilience and operability from day one.

You will lead high-availability, DR, and hybrid cloud design, mentor engineers, and provide guidance during complex incidents and major changes. Fluent English required; Cantonese/Mandarin is a plus.

Qualifications

• Strong hands-on background in network and systems engineering with architecture level.
• Solid knowledge of enterprise networking including firewalls, routing, switching, VLANs, VPN, SD-WAN, wireless, DNS, DHCP, load balancing and proxy services.
• Strong systems background including Windows Server, Active Directory, identity, PKI, endpoint management, backup, replication and remote access.
• Experience designing for high availability, disaster recovery, business continuity and secure access in hybrid cloud and on-premises environments.
• Good command of incident, request, change and problem management, including root cause analysis and operational handover.
• Ability to document designs clearly, explain trade-offs and guide engineers through implementation.
• Fluent English. Cantonese or Mandarin is an advantage.

Responsibilities

• Own the design of network, systems, cloud and workplace infrastructure across sites, with security, resilience and operability built in from the start.
• Define, document and enforce infrastructure standards for builds, configuration, monitoring, access, patching and lifecycle management.
• Lead disaster recovery, business continuity and high-availability design, making sure critical services are tested and recoverable.
• Provide deep technical guidance on complex incidents, root cause analysis, major changes and infrastructure projects.
• Support and review designs for firewalls, routing and switching, VPN, SD-WAN, wireless, load balancing, proxy, DNS, DHCP and remote access.
• Support and review designs for Windows and Linux server, directory services, identity, PKI, endpoint management, backup, replication and cloud infrastructure.
• Work with Group technology teams and external providers where shared platforms or outsourced services make sense, while keeping design authority clear.

Skills

Network engineering

Systems engineering

Architecture leadership

Incident management

Documentation & communication

Complex design guidance

Education

Degree in IT/CS/Engineering

Tools

Azure

AWS

Citrix

Job description

This is a senior individual contributor position responsible for the architecture and technical integrity of Atlantic Gate's IT infrastructure. It calls for someone able to operate beyond day-to-day support, setting technical direction and ensuring that platforms are secure, resilient and built to a consistent standard across all sites.

You will own the technical design for the network, systems, cloud and workplace foundations, support the move toward a resilient and well-governed platform, and provide trusted guidance on the most complex incidents, changes and projects.

RESPONSIBILITIES

• Own the design of network, systems, cloud and workplace infrastructure across sites, with security, resilience and operability built in from the start.
• Define, document and enforce infrastructure standards for builds, configuration, monitoring, access, patching and lifecycle management.
• Lead disaster recovery, business continuity and high-availability design, making sure critical services are tested and recoverable.
• Provide deep technical guidance on complex incidents, root cause analysis, major changes and infrastructure projects.
• Support and review designs for firewalls, routing and switching, VPN, SD-WAN, wireless, load balancing, proxy, DNS, DHCP and remote access.
• Support and review designs for Windows and Linux server, directory services, identity, PKI, endpoint management, backup, replication and cloud infrastructure.
• Work with Group technology teams and external providers where shared platforms or outsourced services make sense, while keeping design authority clear.

REQUIRED SKILLS AND EXPERIENCE

• Strong hands-on background in network and systems engineering, moving into or already operating at architecture level.
• Solid knowledge of enterprise networking, including firewalls, routing, switching, VLANs, VPN, SD-WAN, wireless, DNS, DHCP, load balancing and proxy services.
• Strong systems background, including Windows Server, Active Directory, identity, PKI, endpoint management, backup, replication and remote access technologies.
• Experience designing for high availability, disaster recovery, business continuity and secure access in hybrid cloud and on-premises environments.
• Good command of incident, request, change and problem management, including root cause analysis and operational handover.
• Ability to document designs clearly, explain technical trade-offs and guide engineers through implementation.
• Fluent English. Cantonese or Mandarin is an advantage.

DESIRABLE SKILLS AND EXPERIENCE

• Degree in Information Technology, Computer Science, Engineering, Networking or another relevant field.
• Networking, cloud, systems or security certifications such as CCNA, CCNP, Azure, Microsoft, Fortinet, Palo Alto, ITIL or equivalent are valued.
• Experience in a Service Desk, NOC, SOC or enterprise operations environment.
• Exposure to automation, scripting, configuration management, DevOps tooling or infrastructure-as-code practices.
• Experience with Citrix, virtual desktop infrastructure, cloud backup, replication or Linux-based infrastructure is an advantage.
• Experience in a multi-site logistics, shipping or operations-heavy environment is useful.

SUCCESSFUL CANDIDATE

• Technically strong, calm under pressure and able to explain complex designs clearly.
• Quality-focused, security-aware and disciplined about documentation, standards and operational readiness.
• Hands-on enough to troubleshoot deeply, senior enough to set direction and confident enough to challenge weak designs.