Infrastructure Architect, Network & Systems

THE ROLE

This is a senior individual contributor position responsible for the architecture and technical integrity of Atlantic Gate's IT infrastructure. It calls for someone able to operate beyond day-to-day support, setting technical direction and ensuring that platforms are secure, resilient and built to a consistent standard across all sites.

You will own the technical design for the network, systems, cloud and workplace foundations, support the move toward a resilient and well-governed platform, and provide trusted guidance on the most complex incidents, changes and projects.

RESPONSIBILITIES

• Own the design of network, systems, cloud and workplace infrastructure across sites, with security, resilience and operability built in from the start.
• Define, document and enforce infrastructure standards for builds, configuration, monitoring, access, patching and lifecycle management.
• Lead disaster recovery, business continuity and high-availability design, making sure critical services are tested and recoverable.
• Provide deep technical guidance on complex incidents, root cause analysis, major changes and infrastructure projects.
• Support and review designs for firewalls, routing and switching, VPN, SD-WAN, wireless, load balancing, proxy, DNS, DHCP and remote access.
• Support and review designs for Windows and Linux server, directory services, identity, PKI, endpoint management, backup, replication and cloud infrastructure.
• Work with Group technology teams and external providers where shared platforms or outsourced services make sense, while keeping design authority clear.

REQUIRED SKILLS AND EXPERIENCE

• Strong hands-on background in network and systems engineering, moving into or already operating at architecture level.
• Solid knowledge of enterprise networking, including firewalls, routing, switching, VLANs, VPN, SD-WAN, wireless, DNS, DHCP, load balancing and proxy services.
• Strong systems background, including Windows Server, Active Directory, identity, PKI, endpoint management, backup, replication and remote access technologies.
• Experience designing for high availability, disaster recovery, business continuity and secure access in hybrid cloud and on-premises environments.
• Good command of incident, request, change and problem management, including root cause analysis and operational handover.
• Ability to document designs clearly, explain technical trade-offs and guide engineers through implementation.
• Fluent English. Cantonese or Mandarin is an advantage.

DESIRABLE SKILLS AND EXPERIENCE

• Degree in Information Technology, Computer Science, Engineering, Networking or another relevant field.
• Networking, cloud, systems or security certifications such as CCNA, CCNP, Azure, Microsoft, Fortinet, Palo Alto, ITIL or equivalent are valued.
• Experience in a Service Desk, NOC, SOC or enterprise operations environment.
• Exposure to automation, scripting, configuration management, DevOps tooling or infrastructure-as-code practices.
• Experience with Citrix, virtual desktop infrastructure, cloud backup, replication or Linux-based infrastructure is an advantage.
• Experience in a multi-site logistics, shipping or operations-heavy environment is useful.

SUCCESSFUL CANDIDATE

• Technically strong, calm under pressure and able to explain complex designs clearly.
• Quality-focused, security-aware and disciplined about documentation, standards and operational readiness.
• Hands-on enough to troubleshoot deeply, senior enough to set direction and confident enough to challenge weak designs.