Position Summary: As the Group IT Infrastructure Manager, you will be the global owner of IT infrastructure, responsible for ensuring the availability, security, scalability, and cost efficiency of our hybrid cloud and on-premises environments.
You will define and lead our infrastructure strategy across four core domains: Cloud & Dev Ops, Network & Connectivity, Identity & Directory, and Security & Compliance.
In this role, you will advocate for automation, implement zero-trust principles, and foster a Dev Ops culture.
By bridging technical leadership with strategic planning and operational excellence, you will ensure our infrastructure supports business growth and performance objectives.
Key Responsibilities:1.
Cloud & Dev Ops Leadership− Design, optimize, and manage a secure, scalable hybrid cloud environment that integrates Alibaba Cloud and Microsoft Azure with on-premises infrastructure.− Implement and enforce Infrastructure-as-Code (Ia C) using Terraform and Git Ops workflows while governing compliance through Alibaba Cloud Config and Azure Policy.− Lead the containerization strategy utilizing Alibaba Cloud ACK (Kubernetes).2.
Global Network & Connectivity− Design, monitor, and optimize the global SD-WAN fabric, encompassing BGP/OSPF routing, VPN/Express Route, Qo S policies, and WAN acceleration.− Conduct regular performance and cost reviews to ensure optimal network efficiency and expenditure.3.
Identity & Directory Services− Architect and manage the global Microsoft Active Directory/Azure AD ecosystem, ensuring high availability, security, and seamless integration with cloud Paa S and Saa S services.− Oversee synchronization (Azure AD Connect), authentication (SSO, MFA, PTA), and access policies (Conditional Access, PIM, device compliance).− Automate domain controller lifecycle management and enforce tiered/admin models (JEA).4.
Security, Compliance & Resilience− Own the group's security posture: implement and maintain zero-trust architecture, cloud/on-prem firewalls, WAF, SIEM, and secrets management.− Ensure compliance with CIS benchmarks; coordinate penetration testing and lead remediation efforts.− Guarantee ≥99.99% uptime for business-critical systems across cloud and on-premises platforms.5.
Monitoring, Observability & Fin Ops− Deploy and manage unified monitoring using Cloud Monitor, SLS, Prometheus, and Grafana.− Drive cost optimization via right-sizing, use of Spot/Preemptible instances, and monthly cost reporting (Quick BI, Azure Cost Management).6.
Capacity Planning & Roadmap− Forecast infrastructure growth and translate into compute, storage, and caching requirements.− Publish and maintain a forward-looking infrastructure roadmap aligned with business KPIs and budget.7.
Team & Vendor Leadership− Lead and mentor a globally distributed infrastructure team; define KPIs and conduct post-incident reviews.− Manage vendor relationships, contracts, and SLAs with key partners (Alibaba Cloud, Microsoft, etc.).
Must-Have Skills & Experience· Technical Expertise− Expert-level knowledge of Microsoft Active Directory / Azure AD: architecture, troubleshooting, DNS, DHCP, GPO, FSMO, sites/subnets, and AD-integrated services.− Advanced Power Shell scripting for automation and administration of AD/Azure AD.− Hands-on experience with Alibaba Cloud: ECS, RDS and Polar DB, ACK, Data Works, and networking products.− Proven Azure proficiency: VMs, Blob Storage, Cost Management, Azure Policy, and identity services.− Strong scripting/automation skills in Python, Bash, or Power Shell.− Networking mastery: TCP/IP, BGP, VPN, Express Route, SD-WAN, Qo S, and WAN acceleration.− Cybersecurity foundation: zero-trust models, CIS benchmarks, KMS/Key Vault, and secrets management.− Experience with ITIL/ITSM frameworks and tools.· Leadership & Experience− Minimum 8 years in enterprise infrastructure management, with at least 3 years in a cloud-first, multi-region environment.− Demonstrated success in leading geographically and culturally diverse infrastructure teams.− Proven ability to manage budgets, vendor relationships, and strategic infrastructure roadmaps.
