POSITION SUMMARY:

HIAS seeks an IT Infrastructure Engineer whose role involves planning, documentation, and support tasks such as designing and managing infrastructure, overseeing installation and maintenance of hardware and software, developing policies and procedures, and providing technical support. The engineer will also manage physical and virtual servers, monitor their performance and security, and handle backup and restoration jobs. Additionally, the role includes network and communication management, such as planning and supporting LAN/WAN solutions, managing IP addresses, and configuring remote access services. The engineer will also administer M365 and cloud environments, manage email operations and security, and handle vulnerability and patch management. The position will report to the Senior Director of Information Technology and collaborate with the Director of Information Security and Director of Business Systems and Technical Service team.

Note, the salary range for this position is $90,000-110,000.00.

ESSENTIAL FUNCTIONS:

Planning, documentation and support

• Design and manage HIAS infrastructure including capacity planning, license monitoring, and cost management.
• Oversee the installation, configuration, maintenance, and troubleshooting of infrastructure hardware, software, and peripheral devices.
• Develop and maintain policies, standards, procedures and protocols for infrastructure resource administration, appropriate use, and disaster recovery, diagrams, technical and end-user instructions.
• Advise and support the Senior Director of IT in the selection and procurement of infrastructure products and services.
• Liaise with vendors and contractors to receive proper and timely support for contracted services.
• Conducts periodic IT account and operational reviews.
• Provide technical support to other IT personnel and end users, as necessary.
• Participate in incident response efforts as needed.

SERVER Management

• Manage physical and virtual servers, including operating systems configuration, patching and security located in different physical locations and virtualized environments.
• Monitor performance, availability and security of servers and services. Provide statistics and reports as needed. Implement notifications to relevant stakeholders and protocols to respond.
• Configure, monitor, and test backup and restoration jobs for servers, applications, communication equipment and M365 cloud services using a variety of tools.
• Maintain up-to-date asset management records of all infrastructure items, including those located in the virtual clouds, on-premises, headquarter offices, and country offices.
• Deploy and manage anti-malware software and other monitoring tools for servers worldwide.
• Manage IT server rooms in multiple locations ensuring secure access, adequate and continuous power, and appropriate environmental conditions.

Network & communication Management

• Responsible for planning, implementing, and supporting LAN/WAN network solutions at the HIAS headquarters to ensure optimal efficiency, security, and uptime. Provide recommendations and support for appropriate network solutions at HIAS country offices.
• Create and maintain documentation of critical information regarding routers, firewalls, and all other pertinent LAN/WAN infrastructure items, ensuring it is kept up to date.
• Responsible for managing all IP addresses and overseeing the utilization of various network protocols.
• Install, configure, and maintain LAN/WAN hardware and software at the headquarters office as needed, including switches, firewalls, routers, and wireless networks.
• Configure and maintain virtual networks in multiple cloud environments, ensuring their secure interconnection.
• Configure and maintain remote access services including Azure Virtual Desktop and client-to-site VPN.
• Maintain an up-to-date inventory of all headquarters-managed network equipment in the inventory system.
• Configure and manage Internet services across multiple locations.
• Administer private and public DNS and DHCP for headquarter office networks and virtual clouds.
• Manage network printers and scanners shared via print servers and Microsoft Universal Print.
• Manage active and parked domains as well as security certificates used by the organization.

M365 & cloud environment Management

• Administer identity management solutions, including Active Directory and Entra ID.
• Administer Microsoft Exchange Online services.
• Manage HIAS email operations and security, including anti-malware, email filtering, SPF, DKIM, DMARC and other related protocols.
• Manage phishing simulations and employee awareness training programs.
• Administer and maintain accounts, permissions, and access rights for employees, vendors and service accounts to infrastructure systems, services, and equipment.
• Manage and ensure the security of databases and data transferred both internally and externally.

Vulnerability & patch management

• Address system vulnerabilities identified by penetration testing or vulnerability scanning activities.
• Perform patching and configuration changes to remediate vulnerabilities.

QUALIFICATIONS & REQUIREMENTS:

• Bachelor’s degree in an IT related field, or equivalent business experience and security certifications preferred.
• 5-7 years of experience in IT infrastructure management and networks design, implementation and operations in a global organization.
• Certificates or licenses (Azure Administrator Associate, Azure Security Engineer Associate, Microsoft 365 Certified, CCNA, ITIL or others) which support adequate aptitude to design, deploy and operate enterprise solutions.
• Willing to travel, to include internationally.
• Proven hands-on expertise, engineering and implementation of enterprise class technologies, including but not limited to firewalls, switches, routers, VPN, physical and virtual servers, Active Directory, endpoint security solutions, MS 365, Azure cloud, backup solutions and cloud security.
• Demonstrated capacity to excel in a multinational organization.
• Demonstrated capacity to be a self-starter and work remotely with limited reliance on supervision.
• Strong project management capabilities for engineering and deployment of IT/security/network products, as well as the organizational change management skills needed to drive organizational improvements.
• Excellent interpersonal skills required to help identify key relationships and to maintain them.
• Strong oral and written communications skills sufficient for presentation of technical policy and standards development.
• Able to execute projects on time and with high quality.
• Able to quickly identify, develop and maintain critical relationships across multiple departments and geographies.
• Able to lead project planning and execute on time and in budget, reporting and escalating to management as needed.