返回
AVIATION SECURITY COMPANY LIMITED (AVSECO) logo

AVIATION SECURITY COMPANY LIMITED (AVSECO)

Assistant Manager (IT Infrastructure)

3/F, HKIA Tower 2, 15 Cheong Tat Road, Hong Kong International Airport, Lantau, Hong Kong

The Aviation Security Company Ltd. is a subsidiary of the Airport Authority, Hong Kong and committed to providing the highest standards of aviation security at the Hong Kong International Airport.

Qualified candidates are invited to apply for the following position:

Assistant Manager (IT Infrastructure)

Responsibilities

IT operation and Governance

  • Report to Manager, IT Infrastructure; oversee daily infrastructure operations across on-premises, hybrid and cloud environments;

  • Set priorities for the maintenance, design and development of LAN/WAN, Internet, wireless, firewall/VPN, compute, storage and virtualization platforms;

  • Review and control changes to network, server and platform operations in line with IT standards best practice;

  • Develop and update IT Policies, Standards and Procedures, including container, cloud and AI workloads;

  • Define and track key operational metrics (SLA, availability, capacity, patching, backup, MTTR, and cost); and

  • Maintain logs, runbooks, architecture diagrams and operational documentation.

Infrastructure Platform and Automation

  • Lead the container platform design, establishment and operation of enterprise container platforms: Kubernetes, Docker and private registries. K8S/RKE2 and rancher management skills preferred;

  • Lead cloud governance and platform integration with Azure landing zone to cybersecurity or ISO compliance standards;

  • Define platform standards for cluster architecture, ingress, networking, storage, certificates, secrets, RBAC and multi-tenancy;

  • Establish CI/CD, GitOps and Infrastructure-as-Code pipelines for reliable deployment;

  • Build observability and lifecycle processes: upgrades, patching, vulnerability scanning and capacity planning; and

  • Lead IT automation initiatives to streamline service and platform operations.

AI Architecture and Infrastructure

  • Define and establish architecture and infrastructure for enterprise AI workloads: GPU compute, high-performance networking and storage, and data pipelines;

  • Support deployment of LLM/RAG solutions, vector databases, MLOps tooling and cloud AI services;

  • Access AI use cases, sizing, cost, security and compliance with business and data teams; implement robust AI governance and access controls; and

  • Evaluate on-premises versus cloud options for AI; plan capacity, power/cooling requirements, and cost optimization.

Resilience and Security

  • Manage infrastructure design, upgrades, patch delivery and service recovery processes;

  • Establish contingency, backup and DR plans (including immutable backups and DR testing) to meet RTO/RPO objectives;

  • Embed security-by-design approach in partnership with the security team: zero trust, identity management, network segmentation, hardening and vulnerability remediation; and

  • Administer server rooms, network devices, cabling, storage, server platforms and end-user devices.

Vendor Management and Procurement

  • Laison with procurement to address technical requirements, tender preparation and evaluation, negotiation and award;

  • Negotiate pricing, licensing, SLAs, support contracts, and renewals; assess TCO, lifecycle and vendor lock-in risks;

  • Manage vendor performance through services reviews, KPIs and escalation processes; and

  • Plan budget and resources; collaborate with users on project proposals and lead end-to-end implementation.

 
Requirements

Qualifications and Experience

  • University Degree in Computer Science, Information Technology, Engineering or equivalent;

  • Minimum 10 years of relevant IT infrastructure experience, with at least 3 years in a leadership role in overseeing network, server and platform operations;

  • Proven production-level experience with Kubernetes and Docker;

  • Exposure to AI infrastructure (GPU, LLM/RAG, cloud AI platforms) is a strong advantage;

  • Demonstrated outstanding project management skills; and

  • Demonstrated vendor management and procurement experience: RFQ, tender evaluation, contract negotiation, and cost justification.

Technical Knowledge

  • Network and Security: FortiGate firewall, WAF, H3C switching, routing, SD-WAN, VPN, wireless infrastructure, DNS/DHCP, and TCP/IP;

  • Servers and Storage: Windows Server, Linux (RHEL/Ubuntu), Active Directory/Entra ID, Microsoft 365/Exchange, and Huawei or Lenovo SAN/NAS solutions;

  • Virtualization and HCI: Nutanix, VMware, Sangfor HCI and VDI;

  • Resilience: Backup and DR (Commvault, Veeam), immutable backups, RTO/RPO planning and DR testing;

  • Container and Cloud: Kubernetes ingress, CNI, CSI storage, RBAC, certificates and secrets; Helm, Argo CD, Terraform, Ansible; Azure/AWS/GCP; PowerShell, Python, and Bash;

  • Observability: Prometheus, Grafana, and ELK; and

  • AI Infrastructure: GPU compute, LLM/RAG deployment, vector databases, MLOps, Azure Copilot, Azure AI Foundry, and AI security and governance.

Management and Soft Skills

  • Strong verbal and written communication skills to different stakeholders;

  • Excellent stakeholder management skills to explain complex technical concepts and translate them into business value;

  • Strong service and project management, vendor negotiation and change management skills;

  • Critical thinking and problem-solving skills and making effective decisions;

  • Self-motivated, show adaptability and resiliency, able to work under pressure; and

  • Excellent English and Cantonese; Putonghua is a definite asset.

  
Closing Date : 17 November 2026

 
Job level 中層
Work Exp. 10年
Education
Location 赤鱲角
Employment type 全職
Benefits 5-day week, Flexible working hours, Medical plan, Year-end bonus
Industry 資訊科技
Job function 資訊科技 - 資訊科技管理, 資訊科技 - 網絡 / 系統管理
Published On 2026年11月11日
電郵給朋友分享