IT基础设施工程师/运维工程师
主要工作职责/Maine job responsibilities：
1. 网络与基础设施管理
Network and Infrastructure Management
监督制造工厂与办公场所IT系统的运营、维护及故障排除，包括：
Oversee the operation, maintenance, and troubleshooting of IT systems across manufacturing facilities and office buildings, including:
网络设备：局域网/广域网（LAN/WAN）、交换机、路由器及无线接入点。
Networking: LAN/WAN, switches, routers, and wireless access points.
服务器：物理/虚拟服务器配置、性能调优与安全加固。
Servers: Physical/virtual server configurations, performance tuning, and security hardening.
安防系统：闭路电视监控系统、门禁管理系统及停车场闸机系统（如海康威视解决方案）。
Security and Access Systems: CCTV surveillance systems, door access controls, and parking gate management systems (e.g., HikVision solution).
确保关键系统24/7持续运行，支持生产流程与办公业务。
Ensure 24/7 uptime of critical systems to support manufacturing processes and office operations.
2. 网络规划与实施
Network Planning and Implementation
为办公室与生产站点设计、实施并管理局域网（LAN），确保性能与可扩展性最优。
Design, implement, and manage local area networks (LAN) for offices and production sites, ensuring optimal performance and scalability.
维护总部与远程设施的统一网络，优先保障安全连接与带宽优化。
Maintain a unified network linking headquarters with remote facilities, prioritizing secure connectivity, and bandwidth optimization.
与外部供应商合作部署SD-WAN或MPLS解决方案，实现跨站点无缝通信。
Collaborate with external vendors to deploy SD-WAN solutions or MPLS for seamless inter-site communication.
3. 安全基础设施与风险管控
Security Infrastructure and Risk Mitigation
部署并管理FortiGate防火墙、VPN及网页过滤方案，执行安全策略并监控流量。
Deploy and manage FortiGate firewalls, VPNs, and web filtering solutions to enforce security policies and monitor traffic.
实施终端管理工具（如Intune），确保设备合规性、补丁管理与恶意软件防护。
Implement endpoint management tools (e.g., Intune) to ensure device compliance, patch management, and malware protection.
建立灾难恢复（DR）与数据安全框架，包括备份（如Veeam）、加密及合规认证（如ISO 27001）。
Establish disaster recovery (DR) and data security frameworks, including backups (e.g., Veeam), encryption, and compliance with regulations (e.g. ISO 27001).
4. VMware虚拟化运维
VMware Virtualization Administration
设计、部署与维护VMware vSphere/ESXi环境，包括vCenter与高可用性（HA）配置。
Design, deploy, and maintain VMware vSphere/ESXi environments, including vCenter and High Availability (HA) configurations.
管理虚拟机（VM）配置、资源分配（CPU、内存、存储）及性能监控。
Manage virtual machine (VM) provisioning, resource allocation (CPU, memory, storage), and performance monitoring.
5. Active Directory及核心服务管理
Active Directory and Core Service Management
管理Microsoft Active Directory（AD），包括域控制器、组策略对象（GPO）、DNS与DHCP服务。
Administer Microsoft Active Directory (AD), including domain controllers, Group Policy Objects (GPOs), DNS, and DHCP services.
配置并维护邮件代理服务（如SMTP网关）。
Configure and maintain email proxy services (e.g., SMTP gateways).
实施身份与访问管理（IAM）方案，例如多因素认证（MFA）与单点登录（SSO）。
Implement identity and access management (IAM) solutions, such as multi-factor authentication (MFA) and single sign-on (SSO).
6. 文档编制与培训
Documentation & Training
维护网络拓扑图、系统配置、访问控制及操作流程的完整文档。
Maintain comprehensive documentation for network diagrams, system configurations, access controls, and operational procedures.
为员工制定IT政策、网络安全***实践及系统使用的培训计划，降低人为操作风险。
Develop training programs for staff on IT policies, cybersecurity best practices, and system usage to minimize human error risks.
7. 项目执行与临时任务
Project Execution and Ad-Hoc Tasks
主导或支持跨部门IT项目（如制造执行系统MES实施、ERP升级、智能设施计划）。
Lead or support cross-functional IT projects (e.g., MES implement in manufacturing, ERP upgrades, smart facility initiatives).
处理领导层的临时需求，如新技术可行性研究或紧急基础设施升级。
Address ad-hoc requests from leadership, such as feasibility studies for new technologies or urgent infrastructure upgrades.
8.上司安排的其他工作；

职位要求/Requirements：
1. Bachelor degree or above; good command of English；
计算机科学与技术/网络工程或相关专业大学本科以上学历; 良好的英语;
2. 至少5年以上计算机网络及服务器运维经验。
5 years or above of working experience in IT operations.
3. 具备网络、VMware虚拟化、SAN存储、DNS、DHCP、Active Directory及Windows/Linux服务器操作系统、海康威视产品的实际操作经验。
Proficient in networking, VMware virtualization, SAN storage, DNS, DHCP, Active Directory, Windows/Linux server OS, and HikVision products.
4. 具备坚实的分析和问题解决能力，能够独立进行需求分析。
Strong analytical and troubleshooting skills with the ability to conduct independent requirements analysis.
5. 数据库管理与高可用技术
Database Management and High Availability
6. 对维护以下（MS SQL、MySQL）之一的数据库有良好理解，并熟悉其高可用技术。
Solid understanding of database administration (MS SQL or MySQL) and familiarity with high-availability (HA) technologies.
7. 备份策略与工具运用
Backup Strategy and Tool Proficiency
8. 熟悉备份策略的制定及备份工具（如Veeam）的使用。
Strong knowledge of backup strategy formulation and hands-on experience with tools like Veeam.
9. 具备较强的钻研新知识、新技术的能力。
Strong aptitude for learning and mastering emerging technologies.
10. 与团队同事和最终用户保持良好沟通。
Maintain good communication with team members and end-users.
11. 熟悉企业内部安全控制的功能和技术要求。
In-depth knowledge of enterprise security controls (both functional and technical aspects).
12. 能在压力下按时完成工作。
Ability to deliver high-quality work under tight deadlines.
13. 网络相关证书、Linux相关证书、ITIL相关证书优先
Others: Computer network related certificate (e.g. CCNP/HCIP), Linux-related certificate (e.g. RHCE), ITIL related certificate are preferred