IT Network and Infrastructure Engineer

Astreya; Philippines; Remote; PHP 1,200,000 - 2,300,000; Full time

Job summary

Astreya is seeking a highly technical Senior IT Infrastructure professional to join remote teams. Expect in-depth work with Windows Server, Azure VMs, VMware, storage, patch management, and Active Directory, coordinating with cross-functional teams while driving independent, complex initiatives.

Responsibilities include designing and deploying scalable infrastructure, documenting everything, and leading server migrations.

Qualifications

• Bachelor's degree and 8+ years IT experience or equivalent.
• Certifications in Azure, Windows Server, VMware, or Cisco are a strong plus.
• Advanced Windows Server administration with Active Directory expertise.
• Proficiency in virtualization and cloud infrastructure management (VMware, Azure).
• Experience with Azure resource management, load balancers, and app registrations.
• Strong IAM skills, SSO setup with Entra ID.
• Deep PKI/SSL lifecycle management across enterprise scope.
• Network admin experience in Cisco environments.
• Storage management fundamentals.
• Experience planning and executing server migrations.
• Scripting in PowerShell and Python to automate tasks.
• Structured ticketing and strict change control processes.
• Excellent written and verbal communication.

Responsibilities

• Provide Level III escalation support for complex issues.
• Document solutions and create repeatable processes for L1/L2 teams.
• Design, scope, and deploy new infrastructure, incl. migrations.
• Manage and optimize VMware clusters for reliability and performance.
• Administer Azure resources, configure load balancers, manage app registrations.
• Configure and maintain SSO with Microsoft Entra ID.
• Own SSL/TLS PKI lifecycle, provisioning and renewal across environments.
• Oversee patch management practices (Ivanti a plus).
• Drive automation and scripting to reduce manual work.
• Other duties as required.

Skills

Active Directory

Windows Server

VMware

Azure

Entra ID

PKI

PowerShell

Python

Change control

Communication

Education

B.S./B.A. in IT

Tools

Ivanti

Cisco IOS

Job description

We are seeking a highly technical individual to join one of our client's remote infrastructure teams. Working knowledge of a variety of computing technologies—including Windows Server, Azure VMs, VMware, storage systems, patch management, backup systems, and Active Directory—is strictly required. This role demands the ability to coordinate effectively with cross-functional teams while possessing the drive to work independently on complex technical initiatives.

Scope of Work

• Design and Implement: Architect, document, and deploy shared computing systems that support core organizational functions and guarantee high availability.
• Documentation: Create, evaluate, and maintain comprehensive technical documentation for all infrastructure systems and standard operating procedures.
• Strategic Planning: Gain organizational commitment for infrastructure systems and server deployment plans. Evaluate and select all shared computing technologies required to achieve organizational goals.

Key Roles and Responsibilities

• Provide Level III escalation support for complex technical issues and problems.
• Document technical solutions and build repeatable processes for Level I & II engineers to follow.
• Scope, design, and deploy new infrastructure systems, including executing complex server migrations.
• Manage and optimize VMware clusters to ensure resilient and high-performing virtualization environments.
• Administer general Azure resources, specifically configuring load balancers and managing enterprise application registrations.
• Configure, deploy, and maintain Single Sign-On (SSO) integrations utilizing Microsoft Entra ID.
• Enterprise Certificate Management: Own the end-to-end lifecycle for all SSL/TLS certificates, including provisioning, deployment, proactive renewal tracking, and troubleshooting across physical servers, load balancers, and cloud environments.
• Administer enterprise patch management routines to ensure system security and compliance (Ivanti experience is a strong plus).
• Drive continuous process improvement through heavy emphasis on automation and scripting.
• Other duties as required. This list is not meant to be a comprehensive inventory of all responsibilities assigned to this position.

Required Qualifications & Skills

• Bachelor’s degree (B.S./B.A.) from a four-year college or university and 8+ years of related IT experience; or an equivalent combination of education and training.
• Relevant industry certifications (e.g., Microsoft Azure, Windows Server, VMware, or Cisco) are a strong plus.
• Advanced Microsoft Windows Server administration skills, including deep expertise in Active Directory.
• Advanced hands-on experience with virtualization and cloud infrastructure, specifically managing VMware clusters and Azure VMs.
• Proven experience with general Azure resource management, including deploying load balancers and handling application registrations.
• Strong proficiency in identity and access management, specifically configuring and troubleshooting SSO with Microsoft Entra ID.
• Deep understanding of Public Key Infrastructure (PKI) and extensive hands-on experience managing, deploying, and auditing SSL/TLS certificate lifecycles across an enterprise footprint.
• General network administration experience within a Cisco-based environment.
• Solid foundational knowledge of enterprise storage management.
• Proven track record of planning and executing seamless server migrations.
• Strong automation and scripting experience (e.g., PowerShell, Python) to reduce manual administrative overhead, particularly regarding certificate renewals and deployment.
• Experience working within structured ticketing systems and adhering to strict IT processes, including a strong discipline for change control management.
• Excellent written and verbal communication skills, with the ability to translate complex technical concepts to non-technical stakeholders.