Senior Infrastructure Engineer

Kmstechnology1; Región Centro; Hybrid; MXN 1,200,000 - 1,800,000; Full time

Job summary

Kmstechnology1 seeks a seasoned Senior Infrastructure Engineer to own and modernize hybrid and on-prem infrastructure for a U.S. livestock equipment and manufacturing client.

You will lead data center operations, network security, and storage architecture, coordinating on-site work remotely and guiding local teams and vendors. Responsibilities include virtualization, AD, GPO, backup/DR, and automation with Ansible.

Qualifications

• Senior-level experience in overseeing virtualization, data centers, and hybrid/on-prem environments.

Responsibilities

• Own virtualization, data center operations, and storage architecture across Windows and Linux.
• Design, deploy, and secure network infrastructure including VPNs and subnets.
• Lead remote physical operations, drafting precise runbooks and guiding local staff/vendors.
• Advise leadership on architecture choices (on-prem vs cloud) and pilot on-prem Kubernetes and AI/LLM models.
• Maintain comprehensive documentation, asset inventories, and credential management.

Skills

Virtualization

Active Directory

Hyper-V

KVM

Windows Server

Linux

Networking

Security

Ansible

Bash scripting

iDRAC

iLO

Out-of-band management

Documentation

Tools

GitLab EE

Passbolt

Bareos

Azure Backup

Commvault

Wireshark

NetFlow

IPMI

Job description

We are seeking a seasoned Senior Infrastructure Engineer with 10+ years of experience to own and modernize the hybrid and on-premises infrastructure for a leading U.S. livestock equipment and manufacturing company. In this role, you will act as the principal infrastructure lead: driving data center operations, network engineering, security, and storage architecture.

Because physical hardware resides at the client's manufacturing facilities, you will orchestrate on-site execution remotely by specifying hardware configurations, writing step-by-step runbooks, and directing local IT staff and vendors. Additionally, you will partner with business leadership to advise on core IT decisions and pilot forward-looking initiatives, including on-premises Kubernetes deployment and self-hosted AI models.

On-Call: Periodic on-call availability for major outage resolution and critical maintenance windows.

Language: Strong written and spoken English proficiency for asynchronous and real-time collaboration.

Key Responsibilities

1. 1. Systems, Virtualization & Data Center OwnershipVirtualization: Architect, maintain, and tune a virtualized data center comprising dozens of physical and virtual servers across Hyper-V (Windows Server Datacenter) and KVM (Linux).

   Directory Services & Storage: Administer Active Directory, Group Policy (GPO), company-wide file shares and permissions. Oversee enterprise storage arrays (Pure Storage SAN/NAS).

   Backup & DR: Own business continuity and disaster recovery strategies (using Bareos, Azure Backup, or similar), including automated backup monitoring, routine restore testing and detailed DR runbooks.

   Automation & Maintenance: Streamline server, network, and access management using Ansible and Bash scripts. Maintain core internal tooling (GitLab EE, Passbolt). Patch and lifecycle-manage legacy systems with zero to minimal production downtime.

2. 2. Network Infrastructure & CybersecurityNetwork Operations: Design, optimize, and manage LAN, subnets, VLANs, routing, and secure VPNs across manufacturing plant and office locations.

   Traffic & Security Analysis: Monitor and analyze network traffic (Wireshark, NetFlow) across plant subnets to detect anomalies and optimize throughput.

   Vulnerability Management: Perform vulnerability scans, fix security gaps, enforce firewall policies and collaborate directly with the client's in‑house cybersecurity specialist.

3. 3. Remote Physical Operations & Vendor DirectionHardware & Cabling Specifications: Define hardware configurations (servers, workstations, network switches, IP camera systems) and draft precise step‑by‑step setup guides for on‑site staff.

   Structured Cabling & Surveillance: Design Ethernet/fiber cabling alterations, evaluate vendor proposals and verify completed installations. Plan and configure IP surveillance systems (NVR/VMS) and their dedicated subnets.

   Remote Hands Orchestration: Utilize out‑of‑band management tools (iDRAC, iLO, IPMI) to troubleshoot,recover and provision bare‑metal systems remotely.

4. 4. Strategic Advising & Emerging Tech PilotsInfrastructure Consulting: Evaluate and advise executive leadership on architecture decisions, such as on‑premises vs. cloud models for document management.

   Platform Innovation: Pilot next‑generation infrastructure platforms, including on‑premises Kubernetes clusters and locally hosted AI/LLM models (e.g., for automated code generation).

   Documentation & Asset Management: Maintain thorough technical documentation, including network topologies, system architecture diagrams, asset inventories and credential/access management records.

Experience

Experience: 10+ years in systems, network engineering and infrastructure administration within complex on‑premises or hybrid environment setups.

Remote Leadership: Proven track record of managing physical data centers and network infrastructure remotely,including directing on‑site remote hands and third‑party vendors.

Virtualization: Solid hands‑on expertise with Hyper-V and KVM (or Red Hat Virtualization / oVirt).

OS & Directory Services: Senior‑level administration of Windows Server (Active Directory, Group Policy, file permissions) and enterprise Linux distributions.

Networking & Security: Deep knowledge of network design (VLANs, subnets, routing, VPNs), firewall policies and traffic/vulnerability analysis.

Storage & DR: Proficiency with enterprise SAN/NAS hardware (Pure Storage or similar) and backup/DR tooling (Bareos/Bacula, Azure Backup, or Commvault).

Automation: Practical experience automating system configuration and deployment with Ansible and shell scripts.

Hardware & Out-of-Band Management: Strong background using iDRAC, iLO, or IPMI for out-of-band recovery, with sufficient hardware knowledge to specify physical rack equipment, structured cabling and power requirements.

Communication: Exceptional written English skills and strong documentation habits to support asynchronous, cross-border workflows.

Nice to Have

• Network Hardware: Experience with Juniper s