Manager - Infrastructure & Engineering

Employment Type: Full-time
Location: Township, Lahore – Onsite
Working Hours: 7:00 PM – 4:00 AM PKT, aligned with US Central Time (CST/CDT as applicable)
Function: Information Technology

The Manager - Infrastructure & Engineering leads the enterprise infrastructure architecture and engineering governance across on-premises, cloud, hybrid, physical, and virtual environments. This hands-on leadership role oversees Systems and Network teams, ensuring infrastructure resilience, lifecycle management, backup and recovery, and adherence to technical standards. The role demands technical oversight to guarantee that infrastructure is secure, documented, recoverable, vendor-supported, and aligned with business needs.

Key Responsibilities
- Own and manage enterprise infrastructure architecture, including systems, networks, cloud/on-premises platforms, virtualization, storage, and core infrastructure services.
- Provide technical leadership to Systems and Network Leads by setting priorities, engineering standards, KPIs, escalation thresholds, and ensuring delivery accountability.
- Maintain and update current-state and target-state architecture, technical roadmaps, diagrams, dependencies, and recovery documentation.
- Review infrastructure designs and changes for resilience, scalability, supportability, recoverability, security, and business impact.
- Govern infrastructure lifecycle elements such as hardware, operating systems, firmware, licensing, warranty, vendor support, capacity, EOL/EOS exposure, and technical debt.
- Drive standardization and automation to minimize manual configuration risks and enhance repeatability and auditability.
- Oversee governance of LAN/WAN/WLAN, routing, switching, internet/ISP connectivity, site-to-site connectivity, Active Directory, DNS/DHCP, Windows/Linux servers, file services, virtualization, and storage.
- Coordinate with NOC for availability and performance monitoring, and with SOC/Infrastructure Security for logging, vulnerability remediation, hardening, and security reviews.

Backup, Restore, and Disaster Recovery
- Own backup and recovery governance, including coverage, schedules, retention, encryption, offsite/immutable protection, and failed-job escalation.
- Establish restore-testing schedules and recovery tiers based on business criticality and RPO/RTO requirements.
- Ensure critical systems are periodically restored and validated; backup success alone does not guarantee recovery assurance.
- Maintain disaster recovery standards, runbooks, recovery procedures, exercise evidence, and corrective actions for identified gaps.
- Escalate significant recovery exceptions and require formal risk acceptance and written authorization when applicable.

Change and Engineering Governance
- Define build, configuration, firmware, operating system, network, and infrastructure engineering standards.
- Ensure all Standard, Normal, and Emergency changes adhere to approved testing, rollback, approval, and evidence requirements.
- Support the three-function approval gate involving Security/SecOps, Engineering/Build, and IT Operations/Run for material changes.
- Promote non-destructive changes, documented rollback plans, pre-implementation validation, and post-implementation reviews.

Vendor and Technology Management
- Evaluate infrastructure technologies for architecture fit, resilience, security, supportability, integration, and lifecycle risk.
- Support vendor selection, risk assessments, renewals, support escalations, and technical due diligence.
- Ensure critical platforms have clear ownership, custodianship, support contacts, documentation, and lifecycle plans.

Role Interfaces and Boundaries
- SOC retains SIEM operations, security monitoring, detection, triage, threat analysis, and incident response.
- NOC manages infrastructure/network monitoring, availability, performance, operational alerting, and escalation.
- Infrastructure Security defines and validates technical security controls; Infrastructure & Engineering implements approved changes and remediation.
- The role maintains segregation of duties and does not assume SOC or NOC ownership.

Key Performance Indicators
- Infrastructure availability and recurring incident trends.
- Backup success rates, failed-job remediation, restore-test completion, and success rates.
- Achievement of RPO/RTO targets and disaster recovery readiness.
- Compliance with infrastructure patching, configuration, and EOL/EOS remediation.
- Change success, capacity management, technical debt reduction, documentation quality, and vendor support status.

Required Qualifications
- Bachelor’s degree in Information Technology, Computer Science, Engineering, or related field; equivalent experience considered.
- Extensive experience in enterprise infrastructure engineering, architecture, and technical leadership across distributed environments.
- Hands-on expertise in systems, networking, virtualization, storage, backup/recovery, cloud or hybrid infrastructure, and enterprise connectivity.
- Proven experience in resilient infrastructure design, restore testing, disaster recovery, automation, configuration management, monitoring, capacity planning, and lifecycle management.
- Strong knowledge of ITIL practices, change management, risk management, least privilege principles, segregation of duties, and regulated environment requirements.
- Experience in healthcare, financial, or similarly regulated/high-availability sectors is preferred.

Preferred Certifications and Governance
Relevant certifications such as Microsoft Azure, AWS, Cisco, Fortinet, VMware, Veeam, ITIL, or architecture/infrastructure credentials are advantageous. The role supports ITIL practices, ISO 27001 controls, HIPAA Security Rule compliance, enterprise change management, access control, business continuity, and risk management. It enforces least privilege, minimum necessary access, segregation of duties, formal risk acceptance, and maintains comprehensive audit trails.

Work Location: In-person