Senior Infrastructure Engineer

K&K Global Talent Solutions Inc. is an international recruiting agency providing technical resources in Canada and the USA since 1993. They are seeking a Senior Infrastructure Engineer to design, build, and maintain enterprise network architectures, manage security protocols, and ensure compliance with cybersecurity standards.

Responsibilities:

• Design, build, and maintain enterprise network architectures (LAN/WAN, data center, campus, cloud networking)
• Configure and optimize routing and switching (e.g., BGP, OSPF, EIGRP, VXLAN, EVPN)
• Manage firewalls, IDS/IPS, VPN, and network segmentation policies aligned to Zero Trust principles
• Implement network telemetry, logging, and packet-capture visibility solutions
• Ensure network resiliency, redundancy, and capacity planning across environments
• Maintain cloud network configurations (AWS VPCs, Transit Gateways, Azure VNets, GCP VPCs)
• Perform network performance troubleshooting, service restoration, and RCA documentation
• Manage network device lifecycle: refresh planning, patching, firmware, IOS/NX-OS upgrades
• Architect, deploy, and maintain server infrastructure (Linux, Windows, VMware, Hyper-V)
• Configure and optimize system performance, storage, virtualization, and backups
• Maintain cloud infrastructure services (EC2, RDS, EBS, S3, IAM, Azure AD, GCP equivalents)
• Deploy and manage containers, Kubernetes, orchestration systems
• Implement secure system baselines (CIS, NIST 800-53, DISA STIGs)
• Maintain Active Directory, DNS, DHCP, PKI, SSO, and certificate management
• Support patching, OS hardening, system logging, FIM, vulnerability remediation
• Conduct performance and health monitoring of critical compute resources and services
• Integrate network/sys logs into SIEM platforms following CIM or standardized schema
• Implement network and system controls supporting ISO27001, or NIST RMF compliance
• Support incident response through data collection, log analysis, containment actions, and implementing compensating controls
• Manage access controls, least-privilege enforcement, and identity integrations for infrastructure
• Support audit evidence collection and configuration/state reporting

Requirements:

• Strong knowledge of routing/switching protocols (BGP, OSPF, STP, VXLAN)
• Experience with Cisco (IOS/NX-OS), Palo Alto, Juniper, F5, Fortinet
• Expertise in firewalls, VPNs, network segmentation, IDS/IPS
• Cloud networking (AWS VPCs, PrivateLink, TGW; Azure VNets; GCP VPCs)
• Familiarity with SD-WAN, load balancing, and NAC solutions
• Linux and Windows administration expertise
• Virtualization platforms (VMware ESXi/vCenter, Hyper-V)
• Cloud systems management (AWS EC2/EBS/EFS/RDS; Azure IaaS; GCP Compute)
• Experience with Active Directory, LDAP, DNS, DHCP, PKI, SSO
• Containerization (Docker, Kubernetes, EKS/AKS/GKE)
• Knowledge of NIST 800-53, RMF, CIS benchmarks, DISA STIG hardening
• Experience integrating logs into SIEM platforms (Splunk, QRadar, Elastic)
• Familiarity with IAM, MFA, Zero Trust, segmentation models
• Ability to support SOC incident response activities
• Scripting skills: Python, Bash, PowerShell
• Automation: Ansible, Terraform, CloudFormation, GitLab CI/CD
• Knowledge of monitoring frameworks (Prometheus, Grafana, CloudWatch)
• Proficiency in leveraging Artificial Intelligence (AI) to drive innovation and efficiency within technical domains
• Design, build, and maintain enterprise network architectures (LAN/WAN, data center, campus, cloud networking)
• Configure and optimize routing and switching (e.g., BGP, OSPF, EIGRP, VXLAN, EVPN)
• Manage firewalls, IDS/IPS, VPN, and network segmentation policies aligned to Zero Trust principles
• Implement network telemetry, logging, and packet-capture visibility solutions
• Ensure network resiliency, redundancy, and capacity planning across environments
• Maintain cloud network configurations (AWS VPCs, Transit Gateways, Azure VNets, GCP VPCs)
• Perform network performance troubleshooting, service restoration, and RCA documentation
• Manage network device lifecycle: refresh planning, patching, firmware, IOS/NX-OS upgrades
• Architect, deploy, and maintain server infrastructure (Linux, Windows, VMware, Hyper-V)
• Configure and optimize system performance, storage, virtualization, and backups
• Maintain cloud infrastructure services (EC2, RDS, EBS, S3, IAM, Azure AD, GCP equivalents)
• Deploy and manage containers, Kubernetes, orchestration systems
• Implement secure system baselines (CIS, NIST 800-53, DISA STIGs)
• Maintain Active Directory, DNS, DHCP, PKI, SSO, and certificate management
• Support patching, OS hardening, system logging, FIM, vulnerability remediation
• Conduct performance and health monitoring of critical compute resources and services
• Integrate network/sys logs into SIEM platforms following CIM or standardized schema
• Implement network and system controls supporting ISO27001, or NIST RMF compliance
• Support incident response through data collection, log analysis, containment actions, and implementing compensating controls
• Manage access controls, least-privilege enforcement, and identity integrations for infrastructure
• Support audit evidence collection and configuration/state reporting