​

Infrastructure Architecture & Governance

• Assess current server, virtualization, storage, identity, and application platform architecture and produce a target-state roadmap.
• Define and maintain system standards: build templates, naming conventions, IP/DNS standards for servers, patching baselines, backup standards, and logging standards.
• Approve system changes that affect regulated (GxP/GMP) services, ensuring documented impact assessment and rollback plans.
• Ensure new technologies align with QCIL architecture and security guidelines before deployment.

Cybersecurity for Servers, Identity & Platforms

• Own server hardening standards (Windows/Linux) and ensure alignment to recognized baselines and QCIL policies.
• Lead vulnerability management for servers and core platforms: scan review, risk triage, remediation planning, and verification.
• Administer and tune endpoint/server security tooling (EDR/AV policies for servers), and ensure critical servers are onboarded to SIEM/log monitoring.

Implement privileged access controls

• Partner with the Network Engineer to ensure IT/OT segmentation is enforced for systems
• Support incident response for system-side events.

Virtualization (VMware) & Platform Engineering

• Own VMware design and lifecycle management.
• Define VM templates, resource sizing standards, snapshot governance, and host patching schedules with controlled maintenance windows.
• Design backup and recovery procedures for VMware hosts and critical VMs based on best practices.
• Core Enterprise Systems (Microsoft 365, SAP, LIMS, TrackWise)
• Lead infrastructure readiness for core platforms.
• Coordinate vendor and internal technical teams during upgrades, changes, and troubleshooting of enterprise systems.
• Define and maintain application dependency maps and connectivity matrices (ports/protocols) for regulated applications.

Backup, Disaster Recovery & Business Continuity

• Own backup strategy and recovery assurance for servers, VMs, and databases: retention, encryption, monitoring, and restore testing.
• Design, implement, supervise, and test QCIL’s Disaster Recovery Plan for systems.
• Ensure DR documentation and evidence is audit-ready for GxP/GMP requirements.

Compliance, Audit & Documentation

• Lead technical remediation of audit findings related to systems, access controls, patching, backups, logging, and security configuration.
• Maintain architecture diagrams, as-built documentation, SOPs/runbooks, and system inventories.
• Prepare monthly operational reporting: platform health, risks, vulnerability posture, backup/DR status, and improvement roadmap.

Key Performance Indicators (KPIs)

• Platform availability (uptime) for critical services (AD/DNS, virtualization, core apps).
• Backup success rate and restore test success rate for critical systems.
• Vulnerability remediation SLA compliance (critical/high findings).
• Audit findings closed within agreed timelines with evidence.
• Mean time to resolve (MTTR) for system incidents and reduction of recurring issues.