Infrastructure Engineer

About the team

The IT division at TUMO is responsible for maintaining the technological infrastructure that supports daily operations and learning activities. The team serves students, staff, and centers by managing hardware, networks, systems administration, and technical support.They focus on reliability, security, and operational efficiency to ensure uninterrupted access to digital tools and resources. As an organization that works with student and community data, TUMO is fully committed to GDPR compliance, ensuring that all data is handled, stored, and processed in accordance with international privacy and data protection standards.Maintaining strong data protection practices and safeguarding personal information are key priorities within the IT environment, supporting both operational integrity and the trust of the TUMO community.

About the role

TUMO’s IT division is looking for an Infrastructure Engineer to assist and contribute in the day to day running, stability and hygiene of TUMO’s infrastructure estate, especially in the areas of server & virtualization operations, networking, endpoint management, identity & access, backup and monitoring. The role is of operational importance to TUMO as all activities within the remit of this new role directly underpin the availability of the systems that students, coaches and workshop leaders depend on daily, reinforcing the IT function’s role as a business enabler.

Key Responsibilities

• Administer and maintain on-premises infrastructure, including Linux and Windows servers, Proxmox virtualization, storage, switches, and access points, ensuring system reliability, availability, and scalability.

• Monitor infrastructure performance, respond to alerts, optimize monitoring thresholds, and conduct root cause analysis to prevent recurring incidents.

• Maintain infrastructure security through regular patching, vulnerability remediation, security hardening, and secure network configuration across TUMO sites.

• Manage backup and recovery operations, regularly test restoration procedures, and support IT Disaster Recovery planning and testing.

• Administer user access across Google Workspace, Atlassian Cloud, MDM, and other systems, while managing endpoint enrollment, configuration baselines, and compliance for GNU/Linux, macOS, and Windows devices.

• Act as an escalation point for infrastructure-related issues, providing technical guidance to the Service Desk and IT teams at TUMO International centers.

• Collaborate with other teams on infrastructure and security projects, including Smart Systems initiatives, web domains, PKI/SSL certificates, hosting, and technical assessments of suppliers and equipment.

• Maintain accurate infrastructure documentation, asset and network records, runbooks, and operational procedures.

• Support compliance and certification audits by providing operational evidence and ensuring adherence to relevant security standards.

• Plan and implement infrastructure changes by assessing risks, coordinating with stakeholders, documenting procedures, and preparing rollback plans.

• Report infrastructure performance against agreed parameters, communicate progress and emerging risks to the Lead of Infrastructure and Head of IT & OT Operations, and recommend solutions where needed.

• Take ownership of assigned projects and quarterly OKR deliverables, managing priorities, timelines, and dependencies to meet agreed objectives.

• Improve infrastructure reliability and team productivity through automation, process optimization, and continuous technical improvement.

Requirements

• At least 5 years of experience administering Linux distributions (Debian- and RHEL-based) and Microsoft Windows Server 2022 or later.

• Experience with Proxmox virtualization and familiarity with modern application containerization workflows.

• Experience managing GNU/Linux, macOS, and Windows endpoints, including MDM solutions such as Jamf, Microsoft Intune, or FleetDM.

• Practical knowledge of Google Workspace, Atlassian Cloud, identity and access management, and role- and group-based permissions.

• Strong understanding of networking, including switching, routing, VLANs, DHCP, DNS, Wi-Fi, and firewall administration using solutions such as Ubiquiti, MikroTik, Meraki, Cisco, Fortinet, or Juniper.

• Experience managing storage, backups, recovery procedures, monitoring, and alerting, including regular restore testing.

• Knowledge of infrastructure security, patch management, vulnerability remediation, and security hardening; familiarity with NIST 800-53 and CIS security frameworks.

• Scripting skills in Bash, PowerShell, or Python, with a focus on automating routine tasks and improving operational efficiency.

• Familiarity with Microsoft Azure Cloud Infrastructure.

• Experience with asset and network documentation tools such as Snipe-IT, NetBox, or equivalent, and ticketing systems; Jira and Jira Service Management are preferred.

• Ability to plan, test, communicate, and implement infrastructure changes, including risk assessment and rollback procedures.

• Strong analytical, troubleshooting, and problem-solving skills, with the ability to investigate complex issues, identify root causes, and work independently.

• Strong written and verbal communication skills in English, including the ability to maintain clear technical documentation and explain technical concepts to non-technical colleagues.

• A proactive and collaborative approach, with the ability to support other teams, share technical knowledge, adapt to changing priorities, and maintain high standards of quality and accountability.

Benefits

• Health Insurance and discount on travelers insurance

• Assistance with work permit and opening a bank account if needed

• Extra New Year paid holidays: 3rd, 4th and 5th of January

• 5 days of Personal Leave

• Birthday Leave