3/F, HKIA Tower 2, 15 Cheong Tat Road, Hong Kong International Airport, Lantau, Hong Kong
The Aviation Security Company Ltd. is a subsidiary of the Airport Authority, Hong Kong and committed to providing the highest standards of aviation security at the Hong Kong International Airport.
Qualified candidates are invited to apply for the following position:
Responsibilities
IT operation and Governance
Report to Manager, IT Infrastructure; oversee daily infrastructure operations across on-premises, hybrid and cloud environments;
Set priorities for the maintenance, design and development of LAN/WAN, Internet, wireless, firewall/VPN, compute, storage and virtualization platforms;
Review and control changes to network, server and platform operations in line with IT standards best practice;
Develop and update IT Policies, Standards and Procedures, including container, cloud and AI workloads;
Define and track key operational metrics (SLA, availability, capacity, patching, backup, MTTR, and cost); and
Maintain logs, runbooks, architecture diagrams and operational documentation.
Infrastructure Platform and Automation
Lead the container platform design, establishment and operation of enterprise container platforms: Kubernetes, Docker and private registries. K8S/RKE2 and rancher management skills preferred;
Lead cloud governance and platform integration with Azure landing zone to cybersecurity or ISO compliance standards;
Define platform standards for cluster architecture, ingress, networking, storage, certificates, secrets, RBAC and multi-tenancy;
Establish CI/CD, GitOps and Infrastructure-as-Code pipelines for reliable deployment;
Build observability and lifecycle processes: upgrades, patching, vulnerability scanning and capacity planning; and
Lead IT automation initiatives to streamline service and platform operations.
AI Architecture and Infrastructure
Define and establish architecture and infrastructure for enterprise AI workloads: GPU compute, high-performance networking and storage, and data pipelines;
Support deployment of LLM/RAG solutions, vector databases, MLOps tooling and cloud AI services;
Access AI use cases, sizing, cost, security and compliance with business and data teams; implement robust AI governance and access controls; and
Evaluate on-premises versus cloud options for AI; plan capacity, power/cooling requirements, and cost optimization.
Resilience and Security
Manage infrastructure design, upgrades, patch delivery and service recovery processes;
Establish contingency, backup and DR plans (including immutable backups and DR testing) to meet RTO/RPO objectives;
Embed security-by-design approach in partnership with the security team: zero trust, identity management, network segmentation, hardening and vulnerability remediation; and
Administer server rooms, network devices, cabling, storage, server platforms and end-user devices.
Vendor Management and Procurement
Laison with procurement to address technical requirements, tender preparation and evaluation, negotiation and award;
Negotiate pricing, licensing, SLAs, support contracts, and renewals; assess TCO, lifecycle and vendor lock-in risks;
Manage vendor performance through services reviews, KPIs and escalation processes; and
Plan budget and resources; collaborate with users on project proposals and lead end-to-end implementation.
Requirements
Qualifications and Experience
University Degree in Computer Science, Information Technology, Engineering or equivalent;
Minimum 10 years of relevant IT infrastructure experience, with at least 3 years in a leadership role in overseeing network, server and platform operations;
Proven production-level experience with Kubernetes and Docker;
Exposure to AI infrastructure (GPU, LLM/RAG, cloud AI platforms) is a strong advantage;
Demonstrated outstanding project management skills; and
Demonstrated vendor management and procurement experience: RFQ, tender evaluation, contract negotiation, and cost justification.
Technical Knowledge
Network and Security: FortiGate firewall, WAF, H3C switching, routing, SD-WAN, VPN, wireless infrastructure, DNS/DHCP, and TCP/IP;
Servers and Storage: Windows Server, Linux (RHEL/Ubuntu), Active Directory/Entra ID, Microsoft 365/Exchange, and Huawei or Lenovo SAN/NAS solutions;
Virtualization and HCI: Nutanix, VMware, Sangfor HCI and VDI;
Resilience: Backup and DR (Commvault, Veeam), immutable backups, RTO/RPO planning and DR testing;
Container and Cloud: Kubernetes ingress, CNI, CSI storage, RBAC, certificates and secrets; Helm, Argo CD, Terraform, Ansible; Azure/AWS/GCP; PowerShell, Python, and Bash;
Observability: Prometheus, Grafana, and ELK; and
AI Infrastructure: GPU compute, LLM/RAG deployment, vector databases, MLOps, Azure Copilot, Azure AI Foundry, and AI security and governance.
Management and Soft Skills
Strong verbal and written communication skills to different stakeholders;
Excellent stakeholder management skills to explain complex technical concepts and translate them into business value;
Strong service and project management, vendor negotiation and change management skills;
Critical thinking and problem-solving skills and making effective decisions;
Self-motivated, show adaptability and resiliency, able to work under pressure; and
Excellent English and Cantonese; Putonghua is a definite asset.
Closing Date : 17 November 2026
| Job level | Middle |
|---|---|
| Work Exp. | 10 Years |
| Education | |
| Location | Chek Lap Kok |
| Employment type | Full Time |
| Benefits | 5-day week, Flexible working hours, Medical plan, Year-end bonus |
| Industry | Information Technology |
| Job function | Information Technology - IT Management, Information Technology - Network / System Admin |
| Published On | 11 Nov 2026 |

