IT Infrastructure and Information Security Manager

This role is for one of Weekday’s clients

Salary range: Rs 400000 - Rs 1500000 (ie INR 4 - 15 LPA)

Min Experience: 5+ years

Location: Bengaluru, Karnataka, India

JobType: full-time

We are looking for an experienced IT Infrastructure and Information Security Manager to oversee enterprise IT infrastructure, Microsoft 365 administration, endpoint security, cloud platforms, networking, storage, backup, disaster recovery, and information security operations.

The ideal candidate will have strong technical expertise in managing business-critical IT environments across on-premises, cloud, and hybrid infrastructures. The role requires the ability to ensure infrastructure availability, security, scalability, redundancy, and operational efficiency while maintaining compliance with organisational security standards.

The candidate will be responsible for managing IT infrastructure, implementing cybersecurity controls, strengthening network security, maintaining business continuity, and driving continuous improvements across enterprise IT operations.

Requirements

Key Responsibilities

1. Enterprise IT Infrastructure Management

• Manage Windows Server 2012/2016/2019/2022, Wintel environments, Active Directory, Forest and Domain Management, DNS, DHCP, DFS, Group Policy, WSUS, PKI, IAS/NPS, and File and Print Services.
• Perform server administration, operating system management, patch management, server migrations, cloning, capacity planning, health checks, and lifecycle management.
• Ensure infrastructure availability, performance, scalability, redundancy, and operational resilience.
• Manage infrastructure maintenance and implement preventive measures to minimise downtime.

2. Microsoft 365 and Identity Management

• Administer Microsoft 365 services, including Exchange Online, Intune, Entra ID, Defender, Purview, Teams, SharePoint Online, OneDrive, and Windows Autopilot.
• Manage user administration, access management, licensing, Role-Based Access Control (RBAC), Multi-Factor Authentication (MFA), Conditional Access, Single Sign-On (SSO), and Identity Governance.
• Implement and maintain identity and access management policies.
• Use PowerShell to automate administrative tasks and improve operational efficiency.

3. Endpoint and Information Security

• Manage endpoint security, endpoint compliance, device control, application control, BitLocker encryption, Endpoint Detection and Response (EDR), and Extended Detection and Response (XDR).
• Implement antivirus, threat protection, Attack Surface Reduction (ASR), vulnerability management, endpoint hardening, and security baselines.
• Administer and secure Windows, macOS, Android, and iOS devices using Microsoft Intune, JAMF Pro, Apple Business Manager, MDM/MAM, and endpoint compliance policies.
• Implement and manage cybersecurity solutions, including Microsoft Defender for Endpoint, Sophos Endpoint Security, McAfee ePO, endpoint protection platforms, email security gateways, and Data Loss Prevention (DLP) solutions.
• Coordinate vulnerability assessments, VAPT remediation, security hardening, and endpoint protection initiatives.

4. Network and Firewall Management

• Design, implement, and support enterprise network infrastructure, including LAN, WAN, WLAN, MPLS, SD-WAN, routing, switching, TCP/IP, VLANs, NAT, wireless networks, and network segmentation.
• Configure and manage Layer 2 and Layer 3 networking, including STP, RSTP, VTP, EtherChannel, Inter-VLAN Routing, routing protocols, high availability, and redundancy solutions.
• Manage routers, switches, access points, firewalls, and network security appliances.
• Administer Sophos Firewalls, security policies, SSL VPN, IPSec VPN, Site-to-Site VPN, IPS, IDS, NAT rules, application control, and web filtering.

5. Cloud, Storage, and Backup Management

• Manage Microsoft Azure, AWS, and GCP environments, including compute, networking, storage, identity, governance, and cloud security controls.
• Administer NAS, SAN, RAID, storage replication, cloud storage, and capacity planning.
• Manage full, incremental, differential, image-level, VM-level, and cloud backup operations.
• Implement and maintain Disaster Recovery (DR) and Business Continuity Planning (BCP) processes.
• Ensure data protection, backup integrity, recovery readiness, and business continuity.

6. Virtualisation and Infrastructure Monitoring

• Manage VMware and Microsoft Hyper-V environments, including VM provisioning, migrations, cloning, snapshots, HA clusters, and resource optimisation.
• Monitor enterprise infrastructure using PRTG, ManageEngine OpManager, Action1, Altris Patch Management, McAfee ePO, Azure Monitor, and security monitoring platforms.
• Perform preventive maintenance, Root Cause Analysis (RCA), patch compliance, firmware upgrades, and security updates.
• Ensure infrastructure redundancy, high availability, failover mechanisms, and operational resilience.

7. Security, Compliance, and Audit Management

• Configure and support FTP, SFTP, FTPS, SSL certificates, SPF, DKIM, and DMARC.
• Support internal and external audits, security assessments, and audit readiness activities.
• Maintain technical documentation, SOPs, risk assessments, and remediation plans.
• Ensure compliance with information security policies and infrastructure security standards.
• Identify vulnerabilities and drive corrective actions to strengthen the organisation's security posture.

8. Vendor and IT Operations Management

• Manage vendors, OEMs, ISPs, software licensing, renewals, and procurement coordination.
• Support budget planning, cost optimisation, SLA governance, and technology evaluations.
• Coordinate with internal stakeholders and external service providers to ensure effective IT service delivery.
• Identify opportunities to improve infrastructure performance, security, and operational efficiency.

Must-Have Skills

• Windows Server Administration
• Microsoft 365 Administration
• Firewall Management
• Enterprise IT Infrastructure Management
• Information Security
• Server Configuration and Management

Good-to-Have Skills

• Active Directory Administration
• Networking and Network Security
• Endpoint Security
• Patch Management
• Cloud Infrastructure (Azure, AWS, GCP)
• Backup and Disaster Recovery
• Virtualisation (VMware, Hyper-V)
• Security Compliance and Audit Management

Technical Skills

• Infrastructure and Systems: Windows Server, Wintel, Active Directory, Forest and Domain Management, DNS, DHCP, DFS, WSUS, PKI, IAS/NPS, File and Print Services.
• Microsoft Technologies: Microsoft 365, Exchange Online, Intune, Entra ID, Defender Suite, Purview, SharePoint Online, Teams, OneDrive, Autopilot, PowerShell.
• Endpoint Security: Microsoft Defender for Endpoint, EDR, XDR, Endpoint Compliance, Device Control, ASR Rules, BitLocker, Endpoint Hardening, Application Control, Vulnerability Management, Sophos Endpoint Security, McAfee ePO.
• Networking: TCP/IP, Routing and Switching, VLANs, VTP, STP, RSTP, EtherChannel, MPLS, SD-WAN, NAT, Wireless Networks, Routing Protocols.
• Firewall and VPN: Sophos Firewall, SSL VPN, IPSec VPN, Site-to-Site VPN, IPS, IDS, Web Filtering, Application Control.
• Cloud Platforms: Microsoft Azure, AWS, GCP.
• Storage and Backup: NAS, SAN, RAID, Backup and Recovery, Disaster Recovery, Business Continuity Planning.
• Virtualisation: VMware vSphere, Microsoft Hyper-V.
• Monitoring and Patch Management: PRTG, ManageEngine OpManager, Action1, Altris, McAfee ePO, Azure Monitor.
• Security and Compliance: DLP, Email Security Gateway, VAPT, Security Hardening, Vulnerability Assessment, Risk Management, Audit Support.