Job description for Cloud & Network Infrastructure at MixWork Pte. Ltd.
Role Summary
Own Metro's site network infrastructure, cloud identity platform, and Business Continuity Management (BCM) programme. This role is the primary owner of network design and VLAN architecture across Metro's retail and office sites, Azure Active Directory (Entra ID) and Microsoft 365 administration, and the end-to-end BCM and Disaster Recovery (DR) lifecycle — from plan development through to testing and continuous improvement. The Cloud & Infrastructure Engineer works closely with the Cybersecurity & Compliance Analyst on network security, with the IT Project & Delivery Manager and Singapore IT Infrastructure & Support on new store infrastructure delivery, and with the Data team on cloud infrastructure setup and backup alignment. Thid role also owns Metro's multiple cloud infrastructure, DevOps pipelines, and ensuring all cloud-hosted systems are secure, performant, cost-optimised, and reliably deployed.
Key Responsibilities
Site Network Infrastructure
• Own Metro's network design and VLAN architecture across all retail store and HQ sites — reviewing the current topology, identifying gaps, and recommending changes to strengthen segmentation and resilience.
• Maintain network documentation including topology diagrams, VLAN registers, IP address management, and configuration standards.
• Coordinate with Singapore IT Infrastructure & Support for physical network implementation; provide configuration specifications and validate completed work against design.
• Work with the Cybersecurity & Compliance Analyst to ensure network segmentation and security policies are aligned, and implement infrastructure-layer changes arising from security reviews.
• Support new store infrastructure delivery: scope network requirements, prepare site configuration specifications, and coordinate rollout with the IT Project & Delivery Manager and Singapore IT Infrastructure & Support.
Cloud Identity & Microsoft 365
• Administer Metro's Azure Active Directory (Entra ID) tenant — user and group lifecycle, Conditional Access policies, role-based access control, and identity governance.
• Manage Microsoft 365 services: Exchange Online, SharePoint, Teams, Intune device management, and licence administration across all entities.
• Maintain Azure infrastructure supporting Microsoft workloads: Virtual Networks, NSGs, VPN gateways, Key Vault, App Service, and Azure SQL — ensuring configurations are secure and documented.
• Build and maintain CI/CD pipelines in Azure DevOps for Metro application workloads including Power Platform solution releases and D365 hotfix deployments.
BCM & Disaster Recovery
• Own Metro's BCM programme end-to-end — maintain the BCM policy, business impact assessments, recovery time objectives, and the IT Disaster Recovery plan.
• Plan, schedule, and execute DR tests at least annually; document test outcomes, gaps identified, and remediation actions.
• Manage backup infrastructure across on-premise and cloud environments; validate backup jobs, monitor restore readiness, and coordinate with the Data team on cloud data backup alignment.
• Coordinate with Singapore IT Infrastructure & Support on physical infrastructure elements of the DR plan, including hardware failover and site recovery procedures.
Multi-Cloud Infrastructure
• Support the Data team on AWS infrastructure setup where cloud networking, VPC configuration, or IAM design requires infrastructure input.
• Provide infrastructure-layer awareness as Metro's multi-cloud footprint (AWS for data and AI, Azure for enterprise workloads) evolves — ensuring consistent security controls and network design principles across platforms.
