主要工作職責/Maine job responsibilities： 1. 網絡與基礎設施管理 Network and Infrastructure Management 監督制造工廠與辦公場所IT系統的運營、維護及故障排除，包括： Oversee the operation, maintenance, and troubleshooting of IT systems across manufacturing facilities and office buildings, including: 網絡設備：局域網/廣域網（LAN/WAN）、交換機、路由器及無線接入點。 Networking: LAN/WAN, switches, routers, and wireless access points. 服務器：物理/虛擬服務器配置、性能調優與安全加固。 Servers: Physical/virtual server configurations, performance tuning, and security hardening. 安防系統：閉路電視監控系統、門禁管理系統及停車場閘機系統（如?？低暯鉀Q方案）。 Security and Access Systems: CCTV surveillance systems, door access controls, and parking gate management systems (e.g., HikVision solution). 確保關鍵系統24/7持續運行，支持生產流程與辦公業務。 Ensure 24/7 uptime of critical systems to support manufacturing processes and office operations. 2. 網絡規劃與實施 Network Planning and Implementation 為辦公室與生產站點設計、實施并管理局域網（LAN），確保性能與可擴展性最優。 Design, implement, and manage local area networks (LAN) for offices and production sites, ensuring optimal performance and scalability. 維護總部與遠程設施的統一網絡，優先保障安全連接與帶寬優化。 Maintain a unified network linking headquarters with remote facilities, prioritizing secure connectivity, and bandwidth optimization. 與外部供應商合作部署SD-WAN或MPLS解決方案，實現跨站點無縫通信。 Collaborate with external vendors to deploy SD-WAN solutions or MPLS for seamless inter-site communication. 3. 安全基礎設施與風險管控 Security Infrastructure and Risk Mitigation 部署并管理FortiGate防火墻、VPN及網頁過濾方案，執行安全策略并監控流量。 Deploy and manage FortiGate firewalls, VPNs, and web filtering solutions to enforce security policies and monitor traffic. 實施終端管理工具（如Intune），確保設備合規性、補丁管理與惡意軟件防護。 Implement endpoint management tools (e.g., Intune) to ensure device compliance, patch management, and malware protection. 建立災難恢復（DR）與數據安全框架，包括備份（如Veeam）、加密及合規認證（如ISO 27001）。 Establish disaster recovery (DR) and data security frameworks, including backups (e.g., Veeam), encryption, and compliance with regulations (e.g. ISO 27001). 4. VMware虛擬化運維 VMware Virtualization Administration 設計、部署與維護VMware vSphere/ESXi環境，包括vCenter與高可用性（HA）配置。 Design, deploy, and maintain VMware vSphere/ESXi environments, including vCenter and High Availability (HA) configurations. 管理虛擬機（VM）配置、資源分配（CPU、內存、存儲）及性能監控。 Manage virtual machine (VM) provisioning, resource allocation (CPU, memory, storage), and performance monitoring. 5. Active Directory及核心服務管理 Active Directory and Core Service Management 管理Microsoft Active Directory（AD），包括域控制器、組策略對象（GPO）、DNS與DHCP服務。 Administer Microsoft Active Directory (AD), including domain controllers, Group Policy Objects (GPOs), DNS, and DHCP services. 配置并維護郵件代理服務（如SMTP網關）。 Configure and maintain email proxy services (e.g., SMTP gateways). 實施身份與訪問管理（IAM）方案，例如多因素認證（MFA）與單點登錄（SSO）。 Implement identity and access management (IAM) solutions, such as multi-factor authentication (MFA) and single sign-on (SSO). 6. 文檔編制與培訓 Documentation & Training 維護網絡拓撲圖、系統配置、訪問控制及操作流程的完整文檔。 Maintain comprehensive documentation for network diagrams, system configurations, access controls, and operational procedures. 為員工制定IT政策、網絡安全最佳實踐及系統使用的培訓計劃，降低人為操作風險。 Develop training programs for staff on IT policies, cybersecurity best practices, and system usage to minimize human error risks. 7. 項目執行與臨時任務 Project Execution and Ad-Hoc Tasks 主導或支持跨部門IT項目（如制造執行系統MES實施、ERP升級、智能設施計劃）。 Lead or support cross-functional IT projects (e.g., MES implement in manufacturing, ERP upgrades, smart facility initiatives). 處理領導層的臨時需求，如新技術可行性研究或緊急基礎設施升級。