We are seeking a highly skilled Senior Infrastructure & Security Lead based in the Philippines to architect, secure, and manage a robust production environment for an established Swiss client. Acting as both a hands-on Solutions Architect and a Team Lead, you will spearhead a high-value infrastructure modernization program delivered entirely via remote delivery.
Qualifications:
1. Proven hands-on architecture experience with Linux-based, self-hosted web infrastructure at SME/mid-market scale
2. Identity & access management depth — SSO/IAM implementation experience, hardware key integration, and security architecture
3. Infrastructure-as-Code and automation fluency (Terraform or equivalent, API-driven provisioning, CI/CD basics)
4. Monitoring, backup, and incident-response operational experience (Zabbix or equivalent, backup architecture, risk assessment/DR planning)
5. Windows endpoint management and desktop administration experience (Intune/MDM, patch management, Windows login/hardware key integration)
6. Remote client delivery experience and team leadership, with strong written/spoken English
Responsibilities:
1. Architect, scale, and maintain production-grade, self-hosted web infrastructure using virtualization and container orchestration (Docker/Kubernetes).
2. Design and optimize clustering, failover mechanisms, and load balancing on-premise or via European-style hosting providers (outside of traditional hyperscalers).
3. Drive automation across all environments using Terraform (or equivalent tools) and API-driven provisioning to ensure maintenance is treated as real engineering.
4. Own the end-to-end design and implementation of a coherent identity layer, tying together endpoint logins, password managers, and SSO.
5. Design, document, and execute robust backup architectures and emergency DR plans, translating uptime objectives into measurable SLA tiers.
6. Act as the primary technical point of contact for the Swiss client, independently leading client calls, presenting technical milestones, and providing proactive status reporting.