Senior Infrastructure Engineer

At KMS Technology, we are dedicated to delivering cutting-edge solutions and services that empower businesses to achieve their goals. Our team is composed of highly skilled professionals who are passionate about technology and innovation. We provide a dynamic and collaborative work environment where you can grow your career and make a significant impact. We are seeking a seasoned Senior Infrastructure Engineer with 10+ years of experience to own and modernize the hybrid and on-premises infrastructure for a leading U.S. livestock equipment and manufacturing company. In this role, you will act as the principal infrastructure lead: driving data center operations, network engineering, security, and storage architecture. Because physical hardware resides at the client’s manufacturing facilities, you will orchestrate on-site execution remotely by specifying hardware configurations, writing step-by-step runbooks, and directing local IT staff and vendors. Additionally, you will partner with business leadership to advise on core IT decisions and pilot forward-looking initiatives, including on-premises Kubernetes deployment and self-hosted AI models. On-Call: Periodic on-call availability for major outage resolution and critical maintenance windows. Language: Strong written and spoken English proficiency for asynchronous and real-time collaboration. Key Responsibilities 1. Systems, Virtualization & Data Center Ownership Virtualization: Architect, maintain, and tune a virtualized data center comprising dozens of physical and virtual servers across Hyper-V (Windows Server Datacenter) and KVM (Linux). Directory Services & Storage: Administer Active Directory, Group Policy (GPO), company-wide file shares and permissions. Oversee enterprise storage arrays (Pure Storage SAN/NAS). Backup & DR: Own business continuity and disaster recovery strategies (using Bareos, Azure Backup, or similar), including automated backup monitoring, routine restore testing and detailed DR runbooks. Automation & Maintenance: Streamline server, network, and access management using Ansible and Bash scripts. Maintain core internal tooling (GitLab EE, Passbolt). Patch and lifecycle-manage legacy systems with zero to minimal production downtime. Network Infrastructure & Cybersecurity Network Operations: Design, optimize, and manage LAN, subnets, VLANs, routing, and secure VPNs across manufacturing plant and office locations. Traffic & Security Analysis: Monitor and analyze network traffic (Wireshark, NetFlow) across plant subnets to detect anomalies and optimize throughput. Vulnerability Management: Perform vulnerability scans, fix security gaps, enforce firewall policies and collaborate directly with the client's in-house cybersecurity specialist. Remote Physical Operations & Vendor Direction Hardware & Cabling Specifications: Define hardware configurations (servers, workstations, network switches, IP camera systems) and draft precise step-by-step setup guides for on-site staff. Structured Cabling & Surveillance: Design Ethernet/fiber cabling alterations, evaluate vendor proposals and verify completed installations. Plan and configure IP surveillance systems (NVR/VMS) and their dedicated subnets. Remote Hands Orchestration: Utilize out-of-band management tools (iDRAC, iLO, IPMI) to troubleshoot,recover and provision bare-metal systems remotely. Strategic Advising & Emerging Tech Pilots Infrastructure Consulting: Evaluate and advise executive leadership on architecture decisions, such as on-premises vs. cloud models for document management. Platform Innovation: Pilot next-generation infrastructure platforms, including on-premises Kubernetes clusters and locally hosted AI/LLM models (e.g., for automated code generation). Documentation & Asset Management: Maintain thorough technical documentation, including network topologies, system architecture diagrams, asset inventories and credential/access management records. Experience: 10+ years in systems, network engineering and infrastructure administration within complex on-premises or hybrid environment setups. Remote Leadership: Proven track record of managing physical data centers and network infrastructure remotely,including directing on-site remote hands and third-party vendors. Virtualization: Solid hands-on expertise with Hyper-V and KVM (or Red Hat Virtualization / oVirt). OS & Directory Services: Senior-level administration of Windows Server (Active Directory, Group Policy, file permissions) and enterprise Linux distributions. Networking & Security: Deep knowledge of network design (VLANs, subnets, routing, VPNs), firewall policies and traffic/vulnerability analysis. Storage & DR: Proficiency with enterprise SAN/NAS hardware (Pure Storage or similar) and backup/DR tooling (Bareos/Bacula, Azure Backup, or Commvault). Automation: Practical experience automating system configuration and deployment with Ansible and shell scripts. Hardware & Out-of-Band Management: Strong background using iDRAC, iLO, or IPMI for out-of-band recovery, with sufficient hardware knowledge to specify physical rack equipment, structured cabling and power requirements. Communication: Exceptional written English skills and strong documentation habits to support asynchronous, cross-border workflows. Nice to Have Network Hardware: Experience with Juniper switching and Palo Alto or pfSense firewalls. Surveillance Systems: Hands-on setup and management of enterprise IP surveillance camera systems (NVR/VMS). Containerization & AI: Familiarity with on-premises Kubernetes deployments and self-hosted AI/LLM models. Applications & Databases: Experience supporting ERP systems (e.g., Microsoft Dynamics AX), CAD software platforms (AutoCAD, BricsCAD) or database administration (SQL Server, PostgreSQL, MySQL). Document Management: Knowledge of SharePoint or equivalent on-premises document management systems. Domain Context: Prior experience in manufacturing, industrial or plant IT operational environments. Location: Guadalajara, Jalisco, Mexico (Hybrid) Benefits and Perks Perks you enjoy at KMS Mexico - Mexican law benefits - 15 days of PTO (in year zero, from the first year onwards it is 3 days per year). - 5 days' leave for the death of immediate family members, negotiable. - Major Medical Expenses Insurance with coverage for immediate dependents (spouse and children). - Annual performance bonus (≈10% of annualized salary). - Annual salary adjustment. - Employee Referral Bonus. - Paid Certifications / Courses - Coursera License. - 5% Savings Fund. - 5% Grocery Vouchers.