job description
we are seeking a seasoned senior infrastructure engineer with 10+ years of experience to own and modernize the hybrid and on-premises infrastructure for a leading u.s. livestock equipment and manufacturing company. In this role, you will act as the principal infrastructure lead: driving data center operations, network engineering, security, and storage architecture.

job description
we are seeking a seasoned senior infrastructure engineer with 10+ years of experience to own and modernize the hybrid and on-premises infrastructure for a leading u.s. livestock equipment and manufacturing company. In this role, you will act as the principal infrastructure lead: driving data center operations, network engineering, security, and storage architecture.
because physical hardware resides at the client’s manufacturing facilities, you will orchestrate on-site execution remotely by specifying hardware configurations, writing step-by-step runbooks, and directing local it staff and vendors. Additionally, you will partner with business leadership to advise on core it decisions and pilot forward-looking initiatives, including on-premises kubernetes deployment and self-hosted ai models.
on-call: periodic on-call availability for major outage resolution and critical maintenance windows.
language: strong written and spoken english proficiency for asynchronous and real-time collaboration.
key responsibilities

- systems, virtualization & data center ownership

virtualization: architect, maintain, and tune a virtualized data center comprising dozens of physical and virtual servers across hyper-v (windows server datacenter) and kvm (linux).
directory services & storage: administer active directory, group policy (gpo), company-wide file shares and permissions. Oversee enterprise storage arrays (pure storage san/nas).
backup & dr: own business continuity and disaster recovery strategies (using bareos, azure backup, or similar), including automated backup monitoring, routine restore testing and detailed dr runbooks.
automation & maintenance: streamline server, network, and access management using ansible and bash scripts. Maintain core internal tooling (gitlab ee, passbolt). Patch and lifecycle-manage legacy systems with zero to minimal production downtime.
network infrastructure & cybersecurity
network operations: design, optimize, and manage lan, subnets, vlans,



routing, and secure vpns across manufacturing plant and office locations.
traffic & security analysis: monitor and analyze network traffic (wireshark, netflow) across plant subnets to detect anomalies and optimize throughput.
vulnerability management: perform vulnerability scans, fix security gaps, enforce firewall policies and collaborate directly with the client's in-house cybersecurity specialist.
remote physical operations & vendor direction
hardware & cabling specifications: define hardware configurations (servers, workstations, network switches, ip camera systems) and draft precise step-by-step setup guides for on-site staff.
structured cabling & surveillance: design ethernet/fiber cabling alterations, evaluate vendor proposals and verify completed installations. Plan and configure ip surveillance systems (nvr/vms) and their dedicated subnets.
remote hands orchestration: utilize out-of-band management tools (idrac, ilo, ipmi) to troubleshoot,recover and provision bare-metal systems remotely.
strategic advising & emerging tech pilots
infrastructure consulting: evaluate and advise executive leadership on architecture decisions, such as on-premises vs. cloud models for document management.
platform innovation: pilot next-generation infrastructure platforms, including on-premises kubernetes clusters and locally hosted ai/llm models (e.g., for automated code generation).
documentation & asset management: maintain thorough technical documentation, including network topologies, system architecture diagrams, asset inventories and credential/access management records.
qualifications
experience: 10+ years in systems, network engineering and infrastructure administration within complex on-premises or hybrid environment setups.
remote leadership: proven track record of managing physical data centers and network infrastructure remotely,including directing on-site remote hands and third-party vendors.
virtualization:



solid hands-on expertise with hyper-v and kvm (or red hat virtualization / ovirt).
os & directory services: senior-level administration of windows server (active directory, group policy, file permissions) and enterprise linux distributions.
networking & security: deep knowledge of network design (vlans, subnets, routing, vpns), firewall policies and traffic/vulnerability analysis.
storage & dr: proficiency with enterprise san/nas hardware (pure storage or similar) and backup/dr tooling (bareos/bacula, azure backup, or commvault).
automation: practical experience automating system configuration and deployment with ansible and shell scripts.
hardware & out-of-band management: strong background using idrac, ilo, or ipmi for out-of-band recovery, with sufficient hardware knowledge to specify physical rack equipment, structured cabling and power requirements.
communication: exceptional written english skills and strong documentation habits to support asynchronous, cross-border workflows.
nice to have
network hardware: experience with juniper switching and palo alto or pfsense firewalls.
surveillance systems: hands-on setup and management of enterprise ip surveillance camera systems (nvr/vms).
containerization & ai: familiarity with on-premises kubernetes deployments and self-hosted ai/llm models.
applications & databases: experience supporting erp systems (e.g., microsoft dynamics ax), cad software platforms (autocad, bricscad) or database administration (sql server, postgresql, mysql).
document management: knowledge of sharepoint or equivalent on-premises document management systems.
domain context: prior experience in manufacturing, industrial or plant it operational environments.
additional information
location:
guadalajara,
jalisco, mexico (hybrid)
benefits and perks
perks you enjoy at kms mexico
mexican law benefits
15 days of pto (in year zero, from the first year onwards it is 3 days per year).
5 days' leave for the death of immediate family members, negotiable.
major medical expenses insurance with coverage for immediate dependents (spouse and children).
annual performance bonus (≈10% of annualized salary).
annual salary adjustment.
employee referral bonus.
paid certifications / courses
coursera license.
5% savings fund.
5% grocery vouchers. #j-18808-ljbffr

📌 Senior infrastructure engineer (México)
🏢 KMS Technology
📍 México