IT Infrastructure & Security Specialist

About the role

We are looking for an IT Infrastructure & Security Specialist to support, secure, and maintain the Group’s IT infrastructure, networks, cloud services, and cybersecurity applications. The role works closely with the IT Infrastructure & Technology Manager, internal teams, SOC/CISO functions, and external service providers to ensure reliable operations and effective security controls.

Key responsibilities

• Design, configure, and install network devices such as routers, switches, firewalls, and VPNs.
• Manage physical and logical LAN and WAN layouts.
• Monitor system performance, troubleshoot issues, and ensure service level compliance.
• Perform regular maintenance, upgrades, and patch management for hardware and software.
• Conduct capacity planning and support IP telephony/voice communication systems.
• Provide Tier 2/3 support for network and infrastructure incidents.
• Assist in design, implementation, and management of on‑premises servers, storage, networks, and cloud services.
• Implement and maintain network security measures, firewall rules, access controls, and security policies.
• Monitor security alerts, coordinate vulnerability assessments, and support incident response with SOC and CISO teams.
• Configure and manage firewalls, switches, and routers to maintain security and efficiency.
• Collaborate with vendors and cross‑functional teams to address infrastructure needs.
• Document configurations, processes, and procedures; stay updated on industry best practices.

Required profile

• Proven experience designing, configuring, and installing routers, switches, firewalls, and VPN solutions.
• Hands‑on experience with LAN/WAN architecture and capacity planning.
• Background in providing Tier 2/3 network support and troubleshooting.
• Experience working with SOC/CISO functions on security monitoring and incident response.
• Ability to collaborate with internal teams, vendors, and service providers.

Required skills

• Network device configuration (routers, switches, firewalls, VPNs)
• LAN and WAN design and management
• IP telephony and voice communication systems
• Server and storage administration (on‑premises)
• Cloud services management
• Firewall rule creation and access control implementation
• Security policy enforcement and monitoring
• Vulnerability assessment and patch management
• Multi‑factor authentication (MFA) and privileged access management
• Endpoint detection and response (EDR) / antivirus solutions
• Logging, infrastructure hardening, and capacity planning