Group Senior Infrastructure Engineer

JOB PURPOSE

The Group Senior Infrastructure Engineer is a senior technical lead who owns the design, automation, security, and operational health of infrastructure across Ports and Terminals products hosted on Microsoft Azure, on-premises, and hybrid environments. Working in a hybrid Engineering and Operations model, the engineer builds platforms and remains accountable for their availability and continuous improvement in production. They partner with Solutions Architect, Development, Database, Security, and DevOps teams to keep platforms scalable, resilient, secure, cost-efficient, and aligned with enterprise architecture. The engineer drives automation and standardization across the estate using tools such as Terraform, Ansible, PowerShell, and Python, establishes golden images and reference architectures, and systematically reduces manual work. They are responsible for security baselines, patching and vulnerability remediation, least-privilege access, and audit readiness, working closely with the Security team. The engineer owns the lifecycle of compute, storage, networking, virtualization, containers, identity, monitoring, backup, and disaster recovery across a multi-site terminal estate. They translate business continuity needs into RTO and RPO targets, design failover strategies, lead DR testing, and document architectural trade-offs with the stakeholders who depend on them.

The role will strategically carry significant operational leadership. The engineer leads major incident response and complex troubleshooting across SLA-tiered priorities and drives root-cause analysis to permanent fixes. They put proactive monitoring and capacity planning in place.

KEY ACCOUNTABILITIES

Technical Leadership and Collaboration

• Design, deploy, and support scalable hybrid-cloud infrastructure across Cloud and on-premises environments, covering compute, storage, virtualization, operating systems, networking, identity, connectivity, and platform services.

• Take strategical decisions across Infrastructure platform and setup practices.

• Partner with Application, Database, Security, DevOps, Service Management, regional, and business teams to deliver infrastructure solutions and resolve complex service issues.

• Provide technical guidance, peer reviews, knowledge transfer, and mentoring to infrastructure engineers and support teams.

• Engage vendors and service providers for design validation, support escalation, product evaluation, implementation, and lifecycle planning.

Infrastructure Architecture and Engineering

• Produce high-level and low-level designs, implementation plans, operational runbooks, standards, and support documentation for new and existing infrastructure services.

• Assess technical requirements, dependencies, capacity, resilience, security, supportability, and total cost before recommending infrastructure solutions.

Cloud, Virtualization, Operating Systems, and Platforms

• Administer Azure services including Virtual Machines, Virtual Networks, subnets, Network Security Groups, load balancing, private connectivity, identity services, monitoring, backup, and automation.

• Engineer and support VMware ESXi, vCenter, vSphere, Windows Server, Linux, Active Directory, and Microsoft 365 infrastructure services.

• Deploy and support container platforms and workloads using Docker, Podman, and Kubernetes, with appropriate availability, observability, capacity, and security controls.

Network and Infrastructure Security

• Design and deploy enterprise networking, including TCP/IP, routing, switching, DNS, DHCP, VLANs, VPNs, load balancing, segmentation, Wi-Fi, and secure cloud connectivity.

• Implement and maintain firewalls, remote access, IDS/IPS, micro-segmentation, identity and access, secret management, hardening, vulnerability-remediation, and zero-trust controls.

• Ensure infrastructure changes comply with approved security, architecture, change management, audit, and governance requirements.

Automation and Operational Excellence

• Automate infrastructure provisioning, configuration, compliance, and operational activities using Infrastructure as Code, Azure CLI, PowerShell, Bash, Python, and approved CI/CD tooling.

• Drive standardization, reusable templates, self-service capabilities, configuration consistency, and reduction of manual operational effort.

• Implement effective monitoring, alerting, logging, capacity management, performance optimization, asset management, and service-health reporting.

Reliability, Incident Management, and Recovery

• Provide senior technical leadership during critical incidents, coordinate cross-functional troubleshooting, restore services within agreed priorities, and communicate clear technical status and risk.

• Lead root-cause analysis and post-incident reviews, identify corrective and preventive actions, and ensure actions are tracked through closure.

• Design, maintain, and test backup, restore, high-availability, disaster recovery, and business-continuity capabilities against approved service requirements.

JOB CONTEXT

This role operates across cloud and on-premises infrastructure in a hybrid environment, sitting at the intersection of cloud platforms, infrastructure operations, information security, applications, and databases. It balances day-to-day service reliability and incident resolution with longer-term work on automation, standardization, security hardening, capacity, resilience, and cloud modernization.

Success contributes to stable infrastructure services, lower operational and security risk, improved efficiency, and dependable recovery capabilities. The role supports cross-functional teams running complex, distributed systems for diverse customers with varying technical needs and service level expectations, and requires moving between urgent operational demands, such as incident response and customer escalations, and strategic initiatives that improve how the estate is auto