Infrastructure Lead (Onprem)

JOB PURPOSE
• Lead the design, operation, and continuous improvement of the company's on-premise infrastructure (data center/colocation) as the primary platform, complemented by cloud services (AWS) for selected workloads.
• Ensure high availability, security, performance, and cost-efficiency of on-prem systems, while keeping a consistent architecture and operating model with the cloud footprint (approx. 70% on-prem / 30% cloud effort).
• Lead the Infra team (3-4 engineers) and coordinate with internal teams and vendors to ensure reliable infrastructure operations end-to-end.
KEY RESPONSIBILITIES
A. Infrastructure Architecture & Capacity Planning
• Design and own the on-premise infrastructure architecture (data center/colocation: compute, storage, network, security, virtualization); standardize dev, staging, and production environments.
• Lead capacity planning for on-prem hardware and the cloud footprint, based on user growth, tenant/station count, and workload trends; build a 12-24 month hardware/cloud investment roadmap, including procurement and vendor/colocation management.
• Design High Availability and Disaster Recovery (multi-site, active-active or active-standby; cloud as DR/backup site where appropriate); define RPO/RTO per service tier and run periodic DR drills.
• Decide, workload by workload, what runs on-prem vs. cloud, based on cost, performance, compliance, and Vietnam data-residency requirements.
B. Platform Operations, CI/CD & Container Orchestration
• Lead Kubernetes operations primarily on on-prem clusters (self-managed K8s) using Helm, with autoscaling/self-healing; support multi-tenant architecture for platform products (e.g. Service Station Portal). Support managed K8s (EKS/GKE) where used.
• Build and standardize CI/CD (Jenkins/GitLab CI/ArgoCD) and automation/IaC (Ansible, Terraform, Helm) so releases to on-prem and cloud are safe, fast, and consistent.
• Operate the data and middleware layer (PostgreSQL/MySQL clusters, Redis, Kafka/RabbitMQ, Elasticsearch/OpenSearch, Ceph/MinIO object storage) and real-time infrastructure (VoIP/SIP, WebRTC, WebSocket) where applicable; ensure performance during peak periods.
• Manage server, virtualization (VMware/Hyper-V/Proxmox), storage, and network lifecycle: provisioning, patching, firmware, hardware replacement, and backup.
C. Observability, Security & Cost Efficiency
• Build and maintain observability (Prometheus, Grafana, ELK/Loki; CloudWatch for cloud) across on-prem and cloud; define and enforce SLIs/SLOs/SLAs, and lead incident response and blameless RCA.
• Enforce network/firewall security, least-privilege access (RBAC/IAM), VPN, and secret management across both environments; integrate security monitoring into reliability workflows.
• Apply cost-aware capacity planning on-prem (hardware utilization, power/colocation cost) and basic FinOps practices on cloud (rightsizing, autoscaling); balance reliability vs. cost trade-offs across the hybrid estate.
D. Team Leadership & Collaboration
• Manage, mentor, and develop the Infra team (3-4 engineers); own the infrastructure technical roadmap, with on-prem as the main focus.
• Collaborate with Backend, QA, and Security teams to standardize release, rollback, and versioning processes; report infrastructure status, incidents, and cost to the CTO/Management regularly.