Manager - Infrastructure & Engineering

Employment Type: Full-time
Location: Township, Lahore - Onsite
Working Hours: 7:00 PM - 4:00 AM PKT, aligned with US Central Time (CST/CDT as applicable)
Function: Information Technology

Job Summary
The Manager - Infrastructure & Engineering is responsible for enterprise infrastructure architecture, engineering governance, resilience, lifecycle management, backup and recovery and technical standards across on-premises, cloud, hybrid, physical and virtual environments.

This hands-on leadership role provides technical oversight to Systems and Network teams, reviews designs and changes, defines engineering standards and ensures infrastructure is supportable, recoverable, documented, secure and vendor-supported.

Key Responsibilities

• Own enterprise infrastructure architecture across systems, networks, cloud/on-premises platforms, virtualization, storage and core infrastructure services.
• Provide technical oversight to Systems and Network Leads; establish priorities, engineering standards, KPIs, escalation thresholds and delivery accountability.
• Maintain current-state and target-state architecture, technical roadmaps, diagrams, dependencies and recovery documentation.
• Review material infrastructure designs and changes for resilience, scalability, supportability, recoverability, security and material business impact.
• Govern infrastructure lifecycle including hardware, operating systems, firmware, licensing, warranty, vendor support, capacity, EOL/EOS exposure and technical debt.
• Drive standardization and automation to reduce manual configuration risk and improve repeatability and auditability.
• Maintain governance over LAN/WAN/WLAN, routing, switching, internet/ISP connectivity, site-to-site connectivity, Active Directory, DNS/DHCP, Windows/Linux servers, file services, virtualization and storage.
• Coordinate with NOC for availability and performance monitoring and with SOC/Infrastructure Security for logging, vulnerability remediation, hardening and security review.

Backup, Restore and Disaster Recovery

• Own backup and recovery governance including coverage, schedules, retention, encryption, offsite/immutable protection where required and failed-job escalation.
• Establish restore-testing schedules and recovery tiers based on business criticality and RPO/RTO requirements.
• Ensure critical systems are periodically restored and validated; backup-job success alone does not constitute recovery assurance.
• Maintain disaster recovery standards, runbooks, recovery procedures, exercise evidence and corrective actions for identified gaps.
• Escalate material recovery exceptions and require written authorization and formal risk acceptance where applicable.

Change and Engineering Governance

• Establish build, configuration, firmware, operating system, network and infrastructure engineering standards.
• Ensure Standard, Normal and Emergency changes follow approved testing, rollback, approval and evidence requirements.
• Support the three-function approval gate - Security/SecOps, Engineering/Build and IT Operations/Run - for material changes as applicable.
• Promote non-destructive change, documented rollback plans, pre-implementation validation and post-implementation review.

Vendor and Technology Management

• Evaluate infrastructure technologies for architecture fit, resilience, security, supportability, integration and lifecycle risk.
• Support vendor selection, vendor risk assessment, renewals, support escalations and technical due diligence.
• Ensure critical platforms have defined ownership, custodianship, support contacts, documentation and lifecycle plans.

Role Interfaces and Boundaries

• SOC retains SIEM operations, security monitoring, detection, triage, threat analysis and incident response.
• NOC retains infrastructure/network monitoring, availability, performance, operational alerting and escalation.
• Infrastructure Security defines and validates applicable technical security controls; Infrastructure & Engineering implements and operates approved infrastructure changes and remediation.
• The role maintains segregation of duties and does not assume SOC or NOC departmental ownership.

Key Performance Indicators

• Infrastructure availability and recurring incident trends.
• Backup success, failed-job remediation, restore-test completion and restore-test success rates.
• RPO/RTO achievement and disaster recovery readiness.
• Infrastructure patch/configuration compliance and EOL/EOS remediation progress.
• Change success, capacity, technical debt, documentation and vendor-support status.

Required Qualifications and Experience

• Bachelor's degree in Information Technology, Computer Science, Engineering or a related discipline; equivalent relevant experience may be considered.
• Strong enterprise infrastructure engineering, architecture and technical leadership experience across distributed environments.
• Hands-on expertise in systems, networking, virtualization, storage, backup/recovery, cloud or hybrid infrastructure and enterprise connectivity.
• Demonstrated experience with resilient infrastructure design, restore testing, disaster recovery, automation, configuration management, monitoring, capacity planning and lifecycle management.
• Strong understanding of ITIL practices, change management, risk management, least privilege, segregation of duties and regulated-environment requirements.
• Experience in healthcare, financial or similarly regulated/high-availability environments is preferred.

Preferred Certifications

• Relevant Microsoft Azure, AWS, Cisco, Fortinet, VMware, Veeam, ITIL or architecture/infrastructure certifications.

Governance and Compliance Expectations
Support ITIL practices, ISO 27001 control requirements, HIPAA Security Rule requirements, enterprise change management, access control, business continuity and enterprise risk management. Maintain least privilege, Minimum Necessary where applicable, segregation of duties, written authorization for exceptions, formal risk acceptance where required and sufficient audit trail evidence.

Work Location: In person