Senior System & Infrastructure

KEY RESPONSIBILITIES The role carries the senior scope of the System & Infrastructure family — owning architecture, security, complex development, cloud/vendor management, and escalation. 2.1 ERPNext / Frappe Development & Cloud Administration (core) ▸ Design and maintain DocTypes, child tables, custom pages, and Workspaces across all group entities. ▸ Develop and maintain the custom nsty Frappe app and modules — POS, Project Board, NastyTrace, Barcode, and related functions — including hooks, patches, and regression tests. ▸ Write and maintain server-side and client-side scripts for new features and improvements. ▸ Configure e-Invoice integration (certificates, PIN, API client/secret, BRN, TIN, sandbox vs production, tokens) and S3 attachment storage. ▸ Set up and maintain Auto Repeat automation for recurring documents (e.g. scheduled invoices with auto-incrementing references). ▸ Own Frappe Cloud operations: bench deploy, server/bench/site management, server upgrades, log browser, SQL Playground, and DB Analyzer. ▸ Tune application and database performance; lead root-cause analysis of complex ERP issues (e.g. HTTP 417, optimistic-locking collisions, multi-currency reconciliation). ▸ Own the relationship and escalations with Frappe Cloud support. 2.2 GitHub & Source-Control Governance ▸ Define repository and organisation structure, access tiers, and per-company folder organisation. ▸ Set branching conventions, manage protected branches, and approve merges. ▸ Decide which external repositories to fork into the organisation to fit company/department needs. 2.3 Microsoft 365, Azure & Identity (Governance) ▸ Administer Microsoft 365 at tenant level — email domains, license assignment, distribution lists, shared mailboxes, security groups, and org chart. ▸ Govern Azure, Entra (Microsoft Git user management, 2FA/Authenticator policy), Purview, Power Platform, Security, Search & Intelligence, and Viva Engage. ▸ Own Microsoft Fabric tenant governance and capacity (operated with the Business Intelligence & Backend team for data content). ▸ Provision Power BI licensing (dashboard-level access / RLS owned by the Business Intelligence & Backend team). 2.4 Cloud, VPS & Network Architecture ▸ Provision and manage VPS / cloud platforms — Railway, Dokploy, Hostinger — including Docker, reverse proxies, and managed databases. ▸ Design server infrastructure; allocate and configure switches and routers; design network monitoring. ▸ Resolve complex and escalated network and infrastructure incidents. 2.5 Domain & DNS Management ▸ Register, renew, and transfer company domains via GoDaddy and Exabyte. ▸ Manage Cloudflare DNS pointing/mapping to server IPs and control user access to each domain. ▸ Manage SSL/TLS certificates and renewals for internal and public-facing services. 2.6 Application & Web/Mobile Development ▸ Lead the architecture, build, deployment, and infrastructure of company apps: HandaPOS, Superset apps, NastyTrace, Project Board, Restaurant RSVP, HR (clock-in/out, leave, contacts), and the ClickUp dashboard. ▸ Own the application shell — UI, authentication, hosting, deployment, and integrations — coordinating the data/reporting layer with the Business Intelligence & Backend team. ▸ Build and maintain API integrations between internal systems (ERPNext, traceability, POS, e-commerce — Shopify / SiteGiant — and other third-party platforms). ▸ Implement and maintain CI/CD pipelines for safe, consistent deployment. 2.7 AI Tooling, Integration & Automation ▸ Manage subscription strategy for Claude, ChatGPT/Codex, and Tasklet across the department. ▸ Configure and govern connectors, skills, Cowork, MCP servers, and Microsoft Cloud extensions. ▸ Build agent-based and automation workflows (n8n, scripts) for routing, monitoring, and escalation. 2.8 Security, Software & Credential Governance ▸ Own overall security across hardware, software, and infrastructure. ▸ Govern 1Password — SSH keys, OTP, password-sharing policy, and sensitive credentials; define the sharing policy. ▸ Administer respond.io and ClickUp at admin level. ▸ Design the SharePoint Forms intake system and SLAs for IT user requests. 2.9 Documentation, Standards & Mentoring ▸ Document all customisations, configurations, and known issues in the internal knowledge base. ▸ Set engineering standards and mentor the Junior System & Infrastructure team; act as technical escalation point.