Kerja Sepenuh Masa, Senior System - Infrastructure di NSTY Holding Federal Territory - Maukerja

Company Description NSTY Holding is a dynamic Malaysian holding company powering several fast-growing consumer brands across food and beverage, fragrance, fashion, and fast-moving consumer goods. Under one roof, team members gain exposure to multiple industries, from manufacturing operations to brand headquarters. The organization emphasizes real ownership, rapid execution, and opportunities to build new solutions rather than simply maintain existing ones. NSTY Holding invests in structured career frameworks, transparent pay bands, and performance systems designed to enable long-term growth.

Role Description The role carries the senior scope of the System & Infrastructure family — owning architecture, security, complex development, cloud/vendor management, and escalation.

2.1 ERPNext / Frappe Development & Cloud Administration (core)

 Design and maintain DocTypes, child tables, custom pages, and Workspaces across all group entities.

 Develop and maintain the custom nsty Frappe app and modules — POS, Project Board, NastyTrace, Barcode, and related functions — including hooks, patches, and regression tests.

 Write and maintain server-side and client-side scripts for new features and improvements.

 Configure e-Invoice integration (certificates, PIN, API client/secret, BRN, TIN, sandbox vs production, tokens) and S3 attachment storage.

 Set up and maintain Auto Repeat automation for recurring documents (e.g. scheduled invoices with auto-incrementing references).

 Own Frappe Cloud operations: bench deploy, server/bench/site management, server upgrades, log browser, SQL Playground, and DB Analyzer.

 Tune application and database performance; lead root-cause analysis of complex ERP issues (e.g. HTTP 417, optimistic-locking collisions, multi-currency reconciliation).

 Own the relationship and escalations with Frappe Cloud support.

2.2 GitHub & Source-Control Governance

 Define repository and organisation structure, access tiers, and per-company folder organisation.

 Set branching conventions, manage protected branches, and approve merges.

 Decide which external repositories to fork into the organisation to fit company/department needs.

2.3 Microsoft 365, Azure & Identity (Governance)

 Administer Microsoft 365 at tenant level — email domains, license assignment, distribution lists, shared mailboxes, security groups, and org chart.

 Govern Azure, Entra (Microsoft Git user management, 2FA/Authenticator policy), Purview, Power Platform, Security, Search & Intelligence, and Viva Engage.

 Own Microsoft Fabric tenant governance and capacity (operated with the Business Intelligence & Backend team for data content).

 Provision Power BI licensing (dashboard-level access / RLS owned by the Business Intelligence & Backend team).

2.4 Cloud, VPS & Network Architecture

 Provision and manage VPS / cloud platforms — Railway, Dokploy, Hostinger — including Docker, reverse proxies, and managed databases.

 Design server infrastructure; allocate and configure switches and routers; design network monitoring.

 Resolve complex and escalated network and infrastructure incidents.

2.5 Domain & DNS Management

 Register, renew, and transfer company domains via GoDaddy and Exabyte.

 Manage Cloudflare DNS pointing/mapping to server IPs and control user access to each domain.

 Manage SSL/TLS certificates and renewals for internal and public-facing services.

2.6 Application & Web/Mobile Development

 Lead the architecture, build, deployment, and infrastructure of company apps: HandaPOS, Superset apps, NastyTrace, Project Board, Restaurant RSVP, HR (clock-in/out, leave, contacts), and the ClickUp dashboard.

 Own the application shell — UI, authentication, hosting, deployment, and integrations — coordinating the data/reporting layer with the Business Intelligence & Backend team.

 Build and maintain API integrations between internal systems (ERPNext, traceability, POS, e-commerce — Shopify / SiteGiant — and other third-party platforms).

 Implement and maintain CI/CD pipelines for safe, consistent deployment.

2.7 AI Tooling, Integration & Automation

 Manage subscription strategy for Claude, ChatGPT/Codex, and Tasklet across the department.

 Configure and govern connectors, skills, Cowork, MCP servers, and Microsoft Cloud extensions.

 Build agent-based and automation workflows (n8n, scripts) for routing, monitoring, and escalation.

2.8 Security, Software & Credential Governance

 Own overall security across hardware, software, and infrastructure.

 Govern 1Password — SSH keys, OTP, password-sharing policy, and sensitive credentials; define the sharing policy.

 Administer ************* and ClickUp at admin level.

 Design the SharePoint Forms intake system and SLAs for IT user requests.

2.9 Documentation, Standards & Mentoring

 Document all customisations, configurations, and known issues in the internal knowledge base.

 Set engineering standards and mentor the Junior System & Infrastructure team; act as technical escalation point.

Qualifications

     Bachelor’s Degree in Information Technology, Computer Science, Software Engineering, or a related discipline.

     Minimum 4–6 years’ experience in IT system administration, software development, or system integration, with strong ERPNext / Frappe experience.

     Proven full-stack development, API integration, and Microsoft 365 / Azure AD (Entra) administration.

     Hands-on experience with cloud / VPS, Docker, CI/CD, DNS, and network infrastructure.

     Proficient in English and Bahasa Malaysia; able to lead and mentor technical staff.

Preferred Qualifications

     Experience supporting multi-entity / multi-company organisations.

     Experience with Frappe Cloud operations and database optimisation.

     Familiarity with AI tooling, MCP, and automation frameworks.

     Relevant cloud, networking, Microsoft 365, or security certifications.