Key Responsibilities

Own the build and day-to-day running of client and internal environments across cloud, on-premises and hybrid infrastructure, from design handover through go-live to steady-state support.
Lead the infrastructure side of client projects: build to agreed designs, support UAT, run cutovers, and hand over with as-built documentation and a runbook.
Act as owner or named backup for assigned clients, take your turn as the weekly support duty engineer, and take escalated incidents, including P1s, through to root cause and corrective action.
Work to designs set by the architects and the IT Manager, and say so early when a design will not meet a client’s availability, recovery or security requirements.
Guide the Junior Cloud and Junior Database Engineers: review their changes, answer their questions and turn what you learn into runbooks.

Delivery and Client Support

Run infrastructure workstreams on client projects, from environment build and integration through

UAT and go-live to post-go-live support.

Plan and run change windows and cutovers, including out of hours, with a tested rollback and a clear go or no-go call.
As support duty engineer, take client issues first, fix routine ones from the client runbook, and escalate the rest to the owner with a clear handover.
Keep one current runbook per client: architecture, access routes, contacts, known issues and recovery steps.
Update clients clearly and on time during incidents and changes, and confirm agreed actions in writing.

Cloud Infrastructure and Containers

Build and operate compute, storage, networking and identity services on at least one major cloud platform (AWS, Azure or Google Cloud), to agreed designs and baselines.
Support hybrid setups that link cloud environments to on-premises data centres over VPN or dedicated circuits.
Build and test disaster recovery environments, and run DR drills against agreed RTO and RPO targets.
Deploy and support applications on Docker and Kubernetes or a managed equivalent (EKS, AKS, GKE), and work with CI/CD pipelines through development, staging and production.
Use scripting and infrastructure as code to make builds repeatable, and track cost and utilisation so idle or oversized resources get raised.

Systems, High Availability and Storage

Administer Linux servers (RHEL, Rocky, Ubuntu or equivalent): users and permissions, packages, services, storage, OS and kernel patching, and shell scripting.
Build, run and test high-availability clusters on Linux: Pacemaker and Corosync, DRBD or shared storage, virtual IPs, fencing and failover. A cluster is proven only when you have failed it over under test.
Run replicated and distributed storage such as Ceph, and monitor capacity, health and recovery.
Plan and carry out OS and platform upgrades, including moves off end-of-life releases, with a tested rollback.
Meet backup, restore and retention requirements, and test restores on a schedule.

Virtualisation, Network and Data Centre

Build and run virtualisation clusters on Proxmox VE, VMware or equivalent: hosts, storage, networking, live migration and capacity planning.
Support data centre hardware: server and disk replacement, firmware updates and capacity planning, working with facilities teams and vendors.
Configure and troubleshoot DNS, DHCP, NTP, routing, VLANs, NAT, VPN, load balancers and firewall rules (OPNsense or equivalent), and diagnose faults with tcpdump, ss, mtr, dig and curl.
Maintain monitoring and alerting, and tune alerts so they point at real problems.

Databases and Application Support

Run routine MySQL operations: users and privileges, schema deployment, backup and restore, replication health and basic query troubleshooting.
Deploy and support the web and application tier (Apache, Nginx, PHP-based stacks), and support release deployments and post-release checks with development and QA.

Security and Compliance

Work within our ISO/IEC 27001:2022 and PCI DSS v4.0.1 control environment: access control, change management, logging, patching and vulnerability remediation.
Harden systems to the agreed baselines, and close vulnerability scan and penetration test findings within target timeframes, including by upgrading end-of-life components.
Produce evidence for audits when asked, and tell the Compliance team when a control does not work as documented.

Requirements

3–5 years’ experience in infrastructure, systems or cloud engineering, including ownership of production environments and at least one project taken from build to go-live.
Proficient in Linux administration, ideally on RHEL-family distributions, and comfortable working entirely from the command line. Working experience of at least one virtualisation platform: Proxmox, VMware, Hyper-V or KVM.
Practical experience of at least one high-availability or resilience design (clustering, replication, failover or multi-zone cloud), and able to explain how it fails over and how you tested it.
Hands-on experience with at least one major cloud platform: AWS, Azure or Google Cloud. Certification (AWS Solutions Architect or SysOps, AZ-104, Google ACE) is an advantage, not a substitute for practical experience.
Solid TCP/IP, subnetting, DNS, VLAN, routing, NAT, firewall and VPN knowledge, enough to troubleshoot at packet level.
Routine MySQL administration, including backup, restore and replication basics, and able to read and write SQL.
Scripting in Bash, ideally Python, and working from Git, tickets and change records, with the discipline to test first and know the rollback before you change production.
Clear written English and the confidence to speak to clients: explain a technical problem plainly, write incident updates and keep runbooks usable.
Degree or diploma in Computer Science, Information Technology, Engineering or a related field, or equivalent practical experience.

Advantageous

Telephony and VoIP: Asterisk, Vicidial, SIP trunking, session border controllers and predictive dialler platforms.
Ceph or other software-defined storage, Kubernetes, infrastructure as code (Terraform, CloudFormation or Ansible) and monitoring tooling (Zabbix, Prometheus, Grafana, CloudWatch or Azure Monitor), in production or near-production use.
Certifications such as RHCSA or RHCE, CKA, AWS or Azure associate level and above, or CCNA.
Exposure to regulated environments such as financial services or payments, and to audit work.

Working Arrangements

Based at our Kuala Lumpur office, Vertical Bangsar South, on standard office hours.
Participation in an on-call rotation covering production incidents and scheduled maintenance windows outside office hours, alongside the weekly client support duty.
Occasional onsite work at data centres and client premises, including out-of-hours cutovers and DR drills.

Pay: RM4,000.00 - RM7,000.00 per month

Benefits:

Work Location: In person

Jawatan Kosong Infra di Bangsar South - November 2026

L2 Infrastructure Engineer