Kerja Sepenuh Masa, L2 Infrastructure - Compliance Engineer, Malaysia di Stampede Solution - VOLARE® Federal Territory - Maukerja

Stampede Solution is a leading technology solutions provider specialising in the Accounts Receivable Management and Recovery industry in Malaysia. We develop innovative software solutions that help businesses streamline operations, improve efficiency and manage their recovery processes effectively.

About the Role

We are looking for an experienced L2 Infra & Compliance Engineer to oversee our IT infrastructure operations while ensuring the security, resilience and regulatory compliance of our technology environment. This role combines hands-on infrastructure and systems administration with information security, risk management and compliance responsibilities. Working closely with Engineering, Operations, management and external stakeholders, you will play an important role in strengthening our infrastructure, managing operational risks and maintaining a secure and compliant technology environment.

Key Responsibilities

Infrastructure & Operations

• Manage and maintain client and internal IT infrastructure across cloud, on-premises and hybrid environments, ensuring system availability, reliability and performance.
• Administer Linux servers, virtualisation platforms, cloud services, storage, databases and container environments, including infrastructure deployment and configuration.
• Configure, monitor and troubleshoot network infrastructure, including DNS, DHCP, routing, VLANs, VPNs, firewalls and load balancers.
• Oversee infrastructure projects, system upgrades, application deployments, backup, restoration, high availability and disaster recovery, including UAT, go-live and DR testing.
• Monitor infrastructure performance, handle escalated incidents, conduct root cause analysis and implement corrective actions.
• Maintain technical documentation and operational runbooks, while providing technical guidance to junior engineers.

Security Controls & Technical Assurance

• Implement and monitor security controls across infrastructure, cloud, networks, databases and applications in accordance with established security baselines and compliance requirements.
• Conduct periodic access reviews and validate security configurations, including system hardening, firewall rules, network segmentation, encryption and cloud security settings.
• Monitor security activities covering access management, change management, logging, patching, backup and vulnerability management.
• Coordinate vulnerability assessments and penetration testing remediation, ensuring identified weaknesses are addressed and corrective actions are verified.
• Assess security implications of infrastructure changes and system deployments, working with Engineering and Operations teams to maintain a secure technology environment.
• Support security incident investigations, including evidence preservation, root cause analysis and corrective action implementation.

Risk, Governance & Compliance

• Manage and maintain the organisation's ISO/IEC 27001:2022 and PCI DSS v4.0.1 compliance programmes, ensuring continuous compliance and audit readiness.
• Conduct IT risk assessments, maintain risk registers and oversee risk treatment plans, corrective actions and compliance gaps.
• Develop, review and maintain ISMS documentation, including security policies, procedures, Statement of Applicability and other governance records.
• Assess security and compliance implications of new systems, infrastructure changes, client requirements and third-party services.
• Coordinate vendor and third-party security assessments, review supplier security documentation and monitor compliance obligations
• Support secure development lifecycle (SDLC) governance, security awareness initiatives and continuous improvement of information security practices.

Audit, Client & Operational Support

• Coordinate internal and external audits, including audit planning, evidence preparation, control testing, auditor engagement and closure of audit findings.
• Liaise with external auditors, Qualified Security Assessors (QSAs), certification bodies and client security teams on compliance and information security matters.
• Support client security assessments, vendor risk assessments, security questionnaires and security-related RFP/RFI responses.
• Maintain audit-ready records, including infrastructure documentation, IT asset registers, compliance evidence and internal approval records.
• Support client infrastructure projects, production incidents and operational requirements, ensuring clear communication and timely resolution.
• Provide technical and compliance-related support to internal stakeholders and contribute to continuous improvements across infrastructure and security operations.

Requirements

• 3–5 years of relevant experience in infrastructure engineering, systems administration, cloud engineering, IT compliance or information security.
• Strong foundation in Linux system administration, preferably RHEL-based distributions, with hands-on experience in command-line operations, system configuration and troubleshooting.
• Practical experience with at least one major cloud platform: AWS, Microsoft Azure or Google Cloud.
• Working knowledge of virtualisation technologies such as Proxmox VE, VMware, Hyper-V or KVM.
• Working knowledge of database administration, particularly MySQL, including backup, restoration, replication and basic SQL operations.
• Experience participating in internal or external audits, certification assessments, security reviews or compliance-related activities.
• Good written and verbal communication skills, with the ability to engage technical teams, auditors, clients and other stakeholders.
• Degree or Diploma in Computer Science, Information Technology, Information Security, Engineering or a related field, or equivalent practical experience.

Added Advantage

• Professional certifications such as RHCSA, RHCE, AWS Solutions Architect/SysOps, Azure Administrator, CKA, CCNA, ISO/IEC 27001 Lead Implementer/Lead Auditor, PCI DSS ISA, CISA, CISM, CISSP or CompTIA Security+.
• Exposure to other security and compliance frameworks such as SOC 2, ISO 22301, ISO/IEC 27017, ISO/IEC 27018, NIST Cybersecurity Framework, CIS Controls, Bank Negara Malaysia RMiT or the Malaysian Personal Data Protection Act (PDPA).
• Experience working with GRC or compliance management platforms, vulnerability management tools and security monitoring solutions.
• Familiarity with telephony and VoIP environments, including Asterisk, SIP trunking, call recording and contact-centre technologies.
• Experience with infrastructure automation and monitoring tools such as Terraform, Ansible, Zabbix, Prometheus, Grafana, CloudWatch or Azure Monitor.

Working Arrangements

• Based at our Kuala Lumpur office, Vertical, Bangsar South, on standard office hours.
• Participation in an on-call rotation covering production incidents and scheduled infrastructure maintenance outside normal working hours.
• Occasional after-hours and weekend work may be required for infrastructure cutovers, disaster recovery exercises, audits, assessments and compliance deadlines.
• Occasional onsite visits to data centres and client premises may be required, including infrastructure maintenance, technical assessments and physical security walkthroughs.