Senior Engineer – IT Infrastructure, Security & Digital Workplace
Description
The Senior Engineer – IT Infrastructure, Security & Digital Workplace builds and runs BEC’s technology foundation from the ground up. The role designs and operates the office and site networks, administers the Microsoft 365 tenant and all user accounts, manages end-user devices and the software licence portfolio, and establishes the company’s cyber security and IT policy framework. Acts as the single point of contact for day-to-day IT services for all BEC employees during the FEED phase, and as owner of the corporate website following handover from the appointed third-party developer. Prepares the IT infrastructure roadmap, design basis and budget required to scale from a single office into a multi-location network — Jakarta office, Bengalon site office, construction camp, jetty and eventually the plant — as the project moves into the EPCC phase. This is a founding position in the BEC IT function and is expected to grow into leadership of the IT team in the subsequent project phases.
Key Accountabilities:
- Design, procure and operate the office network: LAN, Wi-Fi, firewall, redundant internet, VPN and basic network segmentation.
- Prepare the IT infrastructure roadmap, design basis and CAPEX/OPEX budget for the site office, camp and plant in the EPCC phase, and provide IT and telecommunication requirements as input to the FEED/EPCC documentation.
- Administer the Microsoft 365 and Entra ID tenant: user accounts, mailboxes, groups, SharePoint, Teams, OneDrive, multi-factor authentication and access policies.
- Manage the software licence portfolio — Microsoft, antivirus, engineering and collaboration tools — covering inventory, entitlement, renewal, cost optimisation and licence compliance.
- Manage end-user devices and IT assets: standardisation, imaging, patching, encryption, mobile device management and the asset register.
- Draft, obtain approval for and enforce the core IT policy set, including acceptable use, access control and password, data classification, backup and retention, software licensing, remote working, incident response and change management.
- Operate baseline cyber security controls: endpoint protection, email security, verified backups, logging and monitoring, vulnerability management and user awareness training, aligned to recognised standards and the Personal Data Protection Law.
- Take over the corporate website from the appointed third-party developer, including domain, DNS, hosting, CMS, source code, documentation and intellectual property rights; thereafter maintain content, security, backup and uptime together with Corporate Communications.
- Provide day-to-day user support, IT onboarding and offboarding, and maintain a simple ticketing and documentation system.
Requirements
- Bachelor’s degree in Informatics, Information Systems, Electrical or Telecommunication Engineering, or a relevant discipline.
- ≥ 6 years of proven experience in IT infrastructure, network and security, including at least 2 years as the primary accountable owner of the function.
- Demonstrated experience establishing IT services from scratch, or delivering a new office or site end-to-end from design and procurement through to operations.
- Strong Microsoft 365 and Entra ID administration at tenant-administrator level.
- Strong networking capability: routing and switching, VLAN, firewall, VPN, enterprise Wi-Fi and end-to-end troubleshooting.
- Practical information security knowledge: endpoint protection, backup and recovery, hardening, vulnerability management and incident response.
- Preferred having experience in the energy, mining, petrochemical, EPC or industrial estate sector, and in setting up IT for large construction projects.
- Relevant certification is an advantage, such as Microsoft 365/Azure Administrator, CCNA/CCNP, firewall vendor certification, Security+, CISSP/CISM, ISO/IEC 27001 or ITIL.
- Experience managing a corporate website and digital agency vendors.
- Able to prepare policies, standard operating procedures and technical documentation without errors, in both Bahasa Indonesia and English.
- Able to build a business case and budget and to present technical options to management in non-technical terms.
- Strong ownership and initiative in an unstructured environment; leadership potential to build and lead the IT team in the following project phases.
- Remains organised, prioritises work and interacts professionally with users, management and vendors.
- Willing to work on a 1-year contract basis.
- Willing to be based in Jakarta and mobilized to the Bengalon site office, East Kalimantan.