Job description
Role Overview
IT Infrastructure & Security Specialist at Burjline Builders. The role is responsible for supporting, securing, and maintaining the Group's IT infrastructure, networks, cloud services, and cybersecurity applications.
Role Purpose
Support, secure, and maintain the Group's IT infrastructure, networks, cloud services, and cybersecurity applications. Work with the IT Infrastructure & Technology Manager, internal teams, SOC/CISO functions, and service providers to ensure reliable operations, effective security controls, and timely resolution of infrastructure and security issues.
Key Responsibilities
Network Design & Configuration
- Design, configure, and install various network devices including routers, switches, firewalls, and VPNs.
- Handle the physical and logical layout of the network, including Local Area Networks (LANs) and Wide Area Networks (WANs).
- Manage and configure firewalls, switches, and routers to maintain network security and efficiency.
Infrastructure Monitoring & Performance
- Monitor system performance and troubleshoot issues to ensure optimal operation of infrastructure components meeting departmental service levels.
- Monitor security alerts and infrastructure events in coordination with the SOC and investigate assigned alerts.
- Support containment, remediation, escalation, and closure of alerts based on criticality.
Maintenance & Upgrades
- Perform regular maintenance, system upgrades, and patch management to ensure all network hardware and software are up-to-date and functioning properly.
- Conduct capacity planning to ensure the network can handle future growth.
- Assist in planning and executing infrastructure upgrades and migrations with minimal disruption to services.
Voice & Telephony Systems
- Manage and maintain IP telephony and voice communication systems across departments.
Support & Troubleshooting
- Provide Tier 2 or 3 support for network and infrastructure-related issues, diagnosing and resolving problems related to connectivity, performance, and outages.
- Work with other IT teams and end-users to resolve issues.
- Provide comprehensive Level 1, Level 2, and Level 3 support to users, ensuring rapid and professional resolution of complex hardware and software issues.
- Provide technical support and guidance to team members and other departments and projects.
- Manage and troubleshoot network connectivity issues across LAN, WAN, and complex wireless (Wi-Fi) deployments.
- Handle L2/L3 network troubleshooting involving switches, routers, and access points.
Endpoint & Device Management
- Serve as the primary support lead for all personal and mobile devices.
- Set up, configure, and troubleshoot iOS and Android smartphones, tablets, and personal computing devices.
- Assist in the administration and maintenance of Windows Server environments, including Active Directory, Group Policy, DNS, and DHCP.
Smart Systems & Physical Security
- Install, configure, and troubleshoot Smart TVs, media streaming boxes (Apple TV, Android TV), and smart home/office automation systems.
- Support, maintain, and troubleshoot Extra Low Voltage (ELV) infrastructure, including IP CCTV camera systems, access control, and related physical security technology.
Security Implementation & Management
- Implement and maintain network security measures, including firewall rules, access controls, and security policies.
- Monitor for security threats, identify vulnerabilities, and respond to security incidents.
- Work with SOC and CISO team to close any security gaps identified as per the criticality measures.
- Support identity, endpoint, email, network, and cloud security controls, including MFA, VPN access, privileged access, EDR/antivirus, logging, and infrastructure hardening.
- Coordinate vulnerability assessments, patching, secure configuration, access reviews, and remediation evidence to close identified security gaps.
Cybersecurity Operations
- Manage and maintain the Group's cybersecurity applications and services.
- Coordinate with security vendors and managed service providers.
- Monitor service performance.
- Support renewals and upgrades.
- Ensure timely resolution of security-related issues.
Documentation & Compliance
- Maintain documentation for infrastructure configurations, processes, and procedures.
- Maintain security records, incident documentation, configuration baselines, and audit evidence required for compliance reviews and management reporting.
- Maintain accurate IT inventory and document system configurations.
Vendor & Partnership Management
- Collaborate with vendors and cross-functional teams to identify and address infrastructure needs and challenges.
- Liaise with third-party vendors and service providers for specialized equipment repairs.
- Coordinate with technology vendors, security solution providers, and managed service partners.
- Manage support cases and escalations and review service deliverables.
Continuous Improvement
- Stay updated on industry trends and best practices to recommend improvements to infrastructure systems.
Backup & Disaster Recovery
- Monitor backup operations and support restore testing, disaster recovery, and infrastructure resilience.
Qualifications & Experience
- Bachelor's degree in Computer Science, Information Technology, or a related field.
- Minimum of 5 years of experience in supporting infrastructure, including switches, firewalls, and cloud infrastructure security.
- Strong knowledge of LAN/WAN, TCP/IP, DNS, DHCP, VLANs, routing, switching, wireless networks, servers, storage, virtualization, firewalls, VPNs, and high-availability environments.
- Experience with security monitoring, log review, alert triage, incident response support, vulnerability remediation, patch management, and infrastructure hardening.
- Working knowledge of Active Directory, Microsoft 365, Azure, MFA, privileged access, endpoint protection, email security, secure remote access, and cloud security controls.
- Working knowledge of backup monitoring, restore testing, disaster recovery, and infrastructure resilience.
- Experience with infrastructure monitoring, endpoint management, and service management tools such as ManageEngine, SolarWinds, Nagios, or equivalent platforms.
- Ability to support security policies, risk remediation, audits, compliance reviews, and maintenance of accurate technical and security documentation.
- Experience with Avaya or other enterprise voice systems, SIP trunking, IP telephony, and call center environments is preferred.
Skills & Competencies
- Knowledge of security protocols and best practices.
- Basic PowerShell or Python knowledge.
- Strong analytical and Tier 2/3 troubleshooting skills.
- Strong written and verbal communication skills with the ability to work effectively with users, vendors, auditors, SOC, CISO, and technical teams.