Infrastructure and Security Engineer

Job Summary:

The Infrastructure & Security Engineer performs varied and sometimes complex activities across systems, network, and security under general direction. The role manages incidents and requests across a workstream, supports recurring connectivity, endpoint, and security issues, coordinates remediation, and maintains reliable documentation and communication. As part of the pod's mutual-backup model, the role also provides dependable first-line coverage in a designated second domain.

Reporting line: reports to the IT Manager, with a dotted-line reporting relationship to the Head of Security for security operations, incident response, and assurance activities.

Duties & Responsibilities:

· Manage related incidents and service requests across a workstream and help ensure timely closure of recurring support needs.

· Apply structured root cause analysis across related technical issues, document findings, and reduce repeated troubleshooting effort.

· Maintain complete and reliable documentation for recurring issues, operational changes, and common resolutions.

· Handle communication across multiple related requests, manage user expectations, and provide consistent updates during resolution.

· Manage operating system, identity, and access tasks across a set of devices, servers, or user groups with minimal supervision.

· Support software rollout, endpoint protection, and configuration consistency across a related group of users or devices.

· Support recurring connectivity issues across a work area and coordinate with other teams to resolve broader network concerns.

· Manage switching, routing, VLAN, wireless, and LAN tasks across related segments and resolve common configuration issues.

· Handle recurring firewall, VPN, and internet connectivity issues, and manage DNS, DHCP, IP allocation, and NAT changes across a service area.

· Correlate security alerts across related systems, confirm incidents, assess impact, and escalate valid incidents based on severity.

· Coordinate containment and recovery for incidents across related services and contribute to incident reviews.

· Validate vulnerability scan results, perform focused testing, review related modules for secure-coding issues, and coordinate remediation with owners.

· Manage identity and access security tasks across related systems and support data protection, privacy, and audit-readiness activities.

· Support backup checks, link redundancy validation, and recovery coordination for a service area, raising issues promptly.

· Monitor related systems and network or security components and help improve alert handling and operational visibility.

· Provide reliable first-line coverage in a designated second domain when the primary owner is unavailable.

· Follow release and change processes independently for low-risk changes and with support for higher-risk deployments.

· Commit to a realistic workload, deliver according to priority, and escalate blockers, delays, or unresolved issues promptly.

· Actively seek feedback, give useful praise and constructive feedback, and contribute to team documentation and knowledge sharing.

· Perform other functions and acts that may be assigned from time to time as the business requires.

Job Qualifications:

· Bachelor’s degree in Computer Science, Information Technology, Computer Engineering, Electronics and Communications Engineering, or a related field.

· At least one of the following (or equivalent) is required: CompTIA Security+, CompTIA Network+, Cisco Certified Network Associate (CCNA), AWS Certified Cloud Practitioner, or AWS Certified Solutions Architect – Associate.

· Certifications must be kept in active status while in the role.

· Follows a hybrid work setup, combining onsite days at the MegaXcess office with remote work, according to the schedule agreed with the IT Manager.

· Attends onsite when the work calls for it, including hardware and network activities, deployments, audits, and scheduled team sessions.

· Shares the on-call rotation with the team, including weekends and holidays, following the published schedule.

· Works weekend shifts and extended hours when project needs and requirements call for it, such as maintenance windows, incident response, and planned deployments.

· Schedule adjustments, rest day substitution, and compensable time are applied in line with company policy and Philippine labor regulations.

· Maintains a reliable internet connection and a suitable workspace for remote days, using company-issued equipment and approved security controls.

Job Competencies:

1. Systems & Endpoint Administration

· Workstream-level incident and request management

· Operating system administration across devices or servers

· Linux server administration (installation, packages, services, file systems, shell scripting, and log review)

· Windows server and endpoint administration

· Identity and access support across user groups

· Software rollout, endpoint protection, and compliance support

· Server, file services, backup, and monitoring support

1. Cloud Infrastructure (AWS)

· AWS core compute and storage administration (EC2, EBS, S3) within approved scope

· AWS identity and access management (IAM users, roles, policies, and least-privilege practice)

· AWS networking support (VPC, subnets, security groups, route tables, and VPN or Direct Connect awareness)

· AWS monitoring, logging, and alerting for availability and audit needs

· AWS backup, snapshot, and recovery operations for assigned workloads

· Cost, tagging, and configuration hygiene across assigned AWS resources

1. Network Infrastructure & Administration

· Connectivity support across a work area

· Switching, routing, VLAN, and segmentation support

· Wireless and LAN operational support

· Firewall, VPN, and internet connectivity support

· Core network services (DNS, DHCP, NAT) administration

· Hybrid connectivity between on-premises networks and AWS

1. Cybersecurity Operations & Assurance

· Alert correlation and incident analysis across related systems

· Incident handling across services

· Vulnerability validation, focused testing, and secure code review

· Remediation coordination and prioritization

· Identity/access, data protection, and audit-readiness support

· Linux and AWS hardening, patching, and secure configuration baselines

1. Cross-Domain Delivery & Backup Readiness

· Confirms scope and delivery readiness before work starts

· Identifies dependencies across users, devices, systems, and teams

· Owns incident resolution within assigned scope

· Provides reliable first-line coverage in a second domain

· Independently handles low-risk production changes

1. Feedback, Communication, Collaboration

· Seeks and applies feedback

· Gives useful peer feedback

· Shares knowledge frequently

· Demonstrates collaborative teamwork

1. Leadership

· Understands team practices and improvement opportunities

· Seeks mentorship and may mentor teammates at times

· Proposes personal objectives aligned with team goals