IT Infrastructure Manager (MX)

Kauffman Engineering, LLC.; Reynosa; Hybrid; MXN 1,200,000 - 2,400,000; Full time

Job summary

Kauffman Engineering, LLC. is seeking a senior IT Infrastructure leader to own multi-site networks, private cloud, and plant-floor connectivity across US and Mexico sites.

You will lead onboarding, ensure in-house operations before MSP offboarding, and partner with Cybersecurity to support ERP and MES analytics projects. The role requires 7+ years in IT infrastructure with 3+ years supervising teams; bilingual English/Spanish; and experience with MSP transitions, Azure, and on-prem workloads.

Qualifications

• 7+ years in IT infrastructure, including 3+ years supervising technical teams.
• Multi-site manufacturing experience; US–Mexico operations preferred.
• Bilingual: English and Spanish required.
• Experience transitioning MSP operations in-house and leading ITSM migrations.

Responsibilities

• Lead MSP transition to in-house ITSM; replace MSP tools with Intune, RMM, and DRaaS by specified deadlines.
• Oversee Tier 1–3 service desk across all sites; publish weekly SLA, MTTA, and MTTR metrics.
• Manage network, cloud, and core infrastructure including Azure workloads and on-premise servers.
• Align security with Cybersecurity standards; oversee backups, patching, and DR tests.
• Lead asset lifecycle management and vendor negotiations; maintain diagrams and runbooks.

Skills

IT Infrastructure

Team Leadership

Multi-site Ops

US-Mexico Operations

Bilingual EN/ES

MS & Cloud Knowledge

Strategic Planning

Education

Bachelor’s in Computer Engineering / IT / CS

Tools

Cisco Meraki

SD-WAN

VMware/Hyper-V

Azure

Intune/Autopilot

Microsoft 365/Entra ID

Job description

Job Summary:

Owns Infrastructure & OT Connectivity across four US and Mexico sites: networks, hosted private cloud, Microsoft Azure, on-premises infrastructure, plant-floor connectivity, end-user devices, and the Tier 1–3 service desk. The first priority is bringing support and infrastructure management in-house from the external MSP before the contract ends October 27, 2027. Leads the site IT engineers and on-site support partner, and partners with Business Systems and Cybersecurity to support ERP, MES, and analytics projects.

Key Responsibilities:

MSP Transition & Service Desk

• MSP In-sourcing: Move the help desk to the internal ITSM platform by Feb 2027, replace MSP tools with Intune, RMM, and DRaaS by Jun 2027, and complete MSP offboarding by Oct 27, 2027.
• Service Desk & Site Coverage: Run Tier 1–3 support at all sites; publish weekly SLA, MTTA, and MTTR metrics.
• Onboarding & Offboarding: Deliver devices and accounts before start dates; remove access on the day of separation.

Network, Cloud & Core Infrastructure

• Network: Manage multi-site LAN, WAN, SD-WAN, and Wi-Fi (Cisco Meraki) and carrier performance.
• Cloud & Servers: Manage the hosted private cloud (Expedient), hypervisors, and local servers; operate and expand Azure workloads, including governance, hybrid connectivity, monitoring, and cost management.
• Microsoft & Identity: Administer Microsoft 365, Defender, Purview, Active Directory, Entra ID, DNS, DHCP, and group policy; implement MFA, conditional access, and PAM.
• Backup, DR & Patching: Operate backup and DRaaS with quarterly restore and annual failover tests; patch systems per the vulnerability-management policy.
• Security Alignment: Meet all security and compliance standards set by Cybersecurity.

Plant-Floor OT Connectivity

• Shop-Floor Support: Provide resilient connectivity and industrial hardware (scanners, printers, scales, industrial PCs) to production, test, and warehouse areas.
• OT Segmentation & Projects: Operate OT network segmentation (Purdue model) and support ERP, WMS, MES, and machine-monitoring projects.

Endpoints, Assets & Lifecycle

• Endpoints: Manage Intune and Autopilot provisioning and compliance; execute the PC refresh plan (5-year cadence, 7-year maximum).
• Assets: Maintain asset inventory, warranties, and certified secure disposal.

Team & Vendor Leadership

• Team: Lead and coach site IT engineers; manage on-call rotation and cross-training for backup coverage.
• Vendors & Budget: Hold vendors to SLAs; forecast and manage CapEx/OpEx within approved budgets.
• Documentation: Maintain network diagrams, runbooks, and configuration records.

Scope & Decision Authority

• People: 3 IT Engineers (Reynosa, MX; Virginia Beach, VA; Cumberland City, TN) plus the on-site support partner.
• Decision Rights: Infrastructure design within approved standards, support priorities, engineer assignments, and emergency changes per CAB.
• Escalation: Major incidents, budget variances, and MSP-transition risks to the Director.

Skills and Qualifications:

Experience

• 7+ years in IT infrastructure, including 3+ years supervising technical teams.
• Multi-site manufacturing experience required; US–Mexico (maquiladora) and MSP transition experience preferred.

Technical Competencies

• Cisco Meraki and SD-WAN; VMware/Hyper-V; Microsoft Azure.
• Microsoft 365, Entra ID, Active Directory, Defender, Purview, Intune, Autopilot, and PowerShell.
• ITSM platforms, backup/DRaaS, plant hardware, and OT segmentation.

Leadership & Core Competencies

• Bilingual: Professional English and Spanish (required).
• Leadership: Calm under outages, firm with vendors, and effective leading remote cross-border teams.

Education and Certifications:

Education

• Bachelor’s in Computer Engineering, IT, Computer Science, or equivalent experience.

Certifications & Training

• Required: ITIL 4 Foundation (within 6 months), Cisco Meraki CMSS (within 9 months), Microsoft AZ-104 (within 12 months).
• Preferred: Cisco CCNA at hire.
• Preferred: Microsoft MD-102; company-funded only if approved in the annual development plan.

Working Conditions:

• Location: Reynosa, Tamaulipas plant; hybrid per company policy.
• Travel: 15%–25% to US sites; valid passport required.

Environment: Plant floor with PPE; lifting up to 23 kg (50 lb); on-call for critical incidents