Manager, IT Infrastructure (Network & Cloud)

Responsibilities

• Designs, implements, and operates the global WAN/SD-WAN, LAN, wireless, and structured cable plant, including routing, switching, and network segmentation.
• Configures, maintains, and audits firewalls, VPN, and remote access, including zero trust and multi-factor authentication integration.
• Builds and operates the on-premises virtualization platform, Windows Server and Linux environments, and core directory, identity, and name resolution services.
• Provisions and maintains SAN/NAS storage, and directs physical work in server rooms and data centre facilities, including cabling, power, cooling, and secure decommissioning.
• Designs, builds, secures, and operates Microsoft Azure infrastructure and administers the Microsoft 365 tenant, including hybrid identity and hybrid connectivity to on-premises environments.
• Applies hardening baselines and secure configuration standards, and manages privileged access, secrets, and certificates across network, compute, and cloud workloads.
• Plans and executes patch cycles, triages vulnerability scan output and vendor advisories, and remediates within change control.
• Administers enterprise backup and replication platforms, designs retention and immutability schedules, and performs and evidences scheduled restore testing.
• Maintains disaster recovery and business continuity plans, runbooks, and failover procedures, and plans and executes DR exercises with the business.
• Participates in security incident response, including containment, evidence preservation, remediation, and post-incident hardening.
• Administers infrastructure monitoring, alerting, and log management across network, compute, storage, and cloud, and produces availability, capacity, and performance trend reporting.
• Directs and holds accountable managed service providers, system integrators, and security partners engaged to deliver or support infrastructure services.
• Raises and documents changes for approval, communicates impact and maintenance windows, and maintains infrastructure diagrams, standards, runbooks, and configuration records.
• Automates repetitive build, configuration, patching, and reporting tasks to reduce manual effort and configuration drift across the estate.
• Acts as senior escalation point and technical mentor for complex infrastructure incidents, and leads root cause analysis and permanent corrective action for major outages.
• Provides guidance, coaching, and knowledge transfer to IT Technical Specialists and site IT staff, and consults on regional office and site infrastructure initiatives.
• Provides evidence and technical input for internal and external audits, accreditation, and regulatory information security assessments.
• Monitors cloud consumption and infrastructure spend, identifies rightsizing and optimization opportunities, and manages licence, support, and maintenance renewals.
• Understands the importance of HSE, reports hazards and incidents, completes assigned training, and participates in workplace inspections and audits.

Education & Experience

Skills

• Must have exceptional interpersonal and communication skills, including the ability to explain technical matters to non-technical stakeholders.
• Strong project, time management, and leadership skills, with the ability to manage operational demand and project commitments concurrently.
• Demonstrated experience applying hardening standards, managing privileged access, and executing patch and vulnerability remediation across network and compute infrastructure.
• Demonstrated experience designing, executing, and evidencing backup, restore, and disaster recovery testing against defined recovery objectives.
• Working proficiency in scripting and automation, with exposure to infrastructure as code.
• Position requirements demand initiative, creativity, integrity, and technical excellence.
• Desire to learn and become familiar with new technologies, and ability to assimilate knowledge quickly and effectively.
• Certifications considered an asset: Cisco CCNA/CCNP or equivalent (Fortinet NSE, Palo Alto PCNSA/PCNSE, Juniper JNCIA/JNCIS, Aruba ACSA/ACSP); Microsoft AZ-104; AZ-800/801 (or consolidated AZ-802); AZ-500 (or SC-500); MS-102; VMware VCP-VVF/VCF; CompTIA Network+, Server+, or Security+; ITIL Foundation; Veeam VMCE.
• This is a hybrid position requiring regular in-person attendance and punctuality in accordance with Company policies. Additionally, the ability to interact well with other employees and work overtime, as necessary, is required.
• The typical hiring range for this position is $116,230 - $152,555, however, based on a variety of considerations (such as education, licenses, certifications and/or experience,) CSA Group reserves the right to flexibility outside of the stated range.