IT Field Engineer (Store Network & IoT Infrastructure)

Foto-Zzoom Sdn Bhd; Gombak; On-site; MYR 67,000 - 134,000; Full time

Job summary

Foto-Zzoom Sdn Bhd is seeking a network and IoT Infrastructure Engineer to bring stores online and keep them up. You will rack and cable new stores, configure VLANs, edge routers, and deploy the IoT service container for on-site devices, ensuring all machines report correctly before handover.

The role requires hands-on experience with TCP/IP, VPNs, Docker, and remote management tools, plus willingness to travel to store sites and work behind a rack with a laptop and crimp tool.

Qualifications

• Solid TCP/IP fundamentals and the ability to troubleshoot networks.
• Hands-on configuration of router/firewall, managed switches, and VLANs.
• Comfort with Linux/Windows CLI and SSH into devices.

Responsibilities

• Commission new stores end to end: cabling, router/firewall, VLANs, APs and VPN back to HQ.
• Bring IoT machine layer online: connect Modbus devices, run Docker containers, verify endpoints.
• Diagnose faults to root cause across cable, link, IP, VLAN, route, firewall, service, and app.
• Maintain and harden sites: firmware, configs, labeling, minimal downtime.
• Travel to store sites on short notice and perform physical work.

Skills

TCP/IP fundamentals

Networking

Router/firewall configuration

Managed switches

VLAN configuration

VPN (WireGuard/IPsec)

Docker

Linux CLI

Scripting (Bash/Python)

Remote management tools

Tools

Docker

WireGuard

Intel AMT

MeshCentral

Job description

Every DobiQueen store is a small network site. Behind the machines there is an edge server, a router/firewall, a managed switch, mesh WiFi, CCTV, token dispensers, and washer/dryer controllers talking over Modbus into our platform.

Your job is to bring those sites up and keep them up. When a new store opens, you rack and cable it, configure the switch and VLANs, bring the edge server online, pull and start the container that talks to the machines, and confirm every machine is reporting correctly before the store trades. When an existing store breaks, you work out why — from the cable to the VLAN to the Modbus register — instead of rebooting until it clears.

This is not a desktop support role. PC and terminal work is part of it, but the core of the job is network and IoT infrastructure across physical store sites. You will spend a meaningful part of your week on the road, behind a rack, with a laptop and a crimp tool.

What you'll actually do

Commission new stores end to end — rack layout, structured cabling, router/firewall and managed switch configuration, VLAN segmentation (management / POS & token / IoT machines / CCTV / staff), access point setup, WireGuard tunnel back to HQ, Zabbix agent registered.

Bring the machine layer online — wire and address washer/dryer controllers, verify RS485/Modbus TCP connectivity, pull and run the Docker container for the IoT service, confirm the FastAPI endpoint is reachable and returning correct machine state, and prove each machine reads and writes before handover.

Diagnose faults to root cause — machines become offline, a token terminal drops off, a store loses its tunnel. You isolate it layer by layer (cable → link → IP → VLAN → route → firewall → service → application) and document what it actually was.

Maintain and harden existing sites — firmware, switch configs, IP documentation, rack hygiene, cable labelling, replacing failing routers and APs with minimal store downtime.

Reduce repeat work — when the same fault appears at three stores, you raise it, script around it or propose the permanent fix.

Support endpoints — in-store PCs, terminals and printers, remote support via SSH / RDP / RustDesk / MeshCentral / Intel AMT.

General IT Support – troubleshooting and attending issues regarding HQ Staff Devices (eg: printer/laptop/Wi-fi issues, device onboarding and offboarding)

What we need you to already have

Working TCP/IP fundamentals — you can explain what a subnet mask, gateway, DHCP scope, DNS resolution and a default route actually do, and troubleshoot with ping, tracert/traceroute, ipconfig/ip a, and nslookup/dig.

Hands-on configuration (not just usage) of at least a few of: router/firewall, managed switch, VLANs, wireless access points, VPN.

Comfort at a command line — Windows and at least basic Linux, and SSH into a device.

Physical competence: rack mounting, terminating and testing cable, tracing a run, working safely around power.

The habit of writing down what you found and what you changed.

Willingness to travel to store sites on short notice and do physical work.

Strongly preferred

Any exposure to industrial or IoT device integration — Modbus RTU/TCP, RS485/serial, PLC or machine controllers, sensors, relays.

Basic Docker — you can pull an image, start a container from a compose file, read its logs and check whether its port is listening.

Any scripting to automate a repeated task — Bash, PowerShell, Batch, Python.

Monitoring exposure — Zabbix, PRTG, Nagios, Uptime Kuma or similar.

VPN work — WireGuard, IPsec, site-to-site setups.

Remote management tooling — MeshCentral, Tactical RMM, Intel AMT, RustDesk, TeamViewer.

No degree required. We care about what you have actually built, configured and fixed, bring photos, diagrams, configs or a home lab.