IT Infrastructure & Compliance Engineer

Role Overview :

As an IT Infrastructure & Compliance Engineer, you will serve as the backbone of our technical operations, ensuring that our internal and client-facing infrastructure remains robust, secure, and fully compliant with international standards.

Key Responsibilities :

• Design, implement, and maintain scalable IT infrastructure, ensuring high availability, security, and performance across production and development environments.
• Administer and optimize VMware vSphere/ESXi environments and other virtualization platforms to support mission-critical workloads.
• Manage and harden Linux servers (RHEL, CentOS, Ubuntu) and Windows environments following industry best practices and CIS Benchmarks.
• Administer Active Directory, Group Policy, DNS, DHCP, LDAP, and Microsoft Entra ID (Azure AD).
• Manage Identity and Access Management (IAM), including user provisioning, RBAC, MFA, SSO, Conditional Access, and Privileged Access Management (PAM).
• Implement and manage SIEM, EDR, and XDR platforms such as Wazuh, Microsoft Sentinel, Microsoft Defender, CrowdStrike, SentinelOne, Sophos, or equivalent solutions.
• Conduct threat detection, incident response, root cause analysis, vulnerability assessments, and remediation activities.
• Develop and maintain Zero Trust security controls and enterprise security policies.
• Lead compliance initiatives and maintain adherence to SOC 2 Type II, ISO 27001, HIPAA, PCI-DSS, GDPR, CCPA, NIST Cybersecurity Framework, CIS Benchmarks, and CMMI Level 5 requirements.
• Participate in internal and external audits, maintain audit evidence, and coordinate remediation activities.
• Conduct periodic access reviews, security assessments, and risk management exercises.
• Develop, test, and maintain Disaster Recovery (DR) and Business Continuity (BCP) plans to meet organizational RPO and RTO objectives.
• Configure and maintain enterprise backup and recovery solutions.
• Manage Microsoft 365 services, including Exchange Online, SharePoint Online, Teams, OneDrive, and Intune.
• Administer Google Workspace environments and user lifecycle management.
• Manage endpoint devices across Windows, Linux, and macOS environments using Intune, Jamf, Kandji, Apple Business Manager, or equivalent MDM solutions.
• Secure and administer cloud environments across Microsoft Azure, AWS, and Google Cloud Platform (GCP), including IAM, monitoring, storage, backup, and infrastructure hardening.
• Collaborate with engineering, DevOps, and development teams to integrate security best practices into the Software Development Lifecycle (SDLC).
• Create and maintain technical documentation, SOPs, infrastructure diagrams, security standards, and compliance policies.
• Provide Level 2 and Level 3 support for infrastructure, cloud, and security-related incidents.

Required Skills & Experience:

• 8 - 12 years of hands-on experience in IT infrastructure, security, and compliance roles.
• Strong expertise in VMware vSphere/ESXi, virtualization technologies, and enterprise infrastructure management.
• Extensive experience administering Linux environments (RHEL, CentOS, Ubuntu) and Windows Server ecosystems.
• Hands-on experience with Active Directory, Azure AD (Microsoft Entra ID), DNS, DHCP, Group Policy, LDAP, and Identity Management solutions.
• Strong knowledge of IAM, RBAC, MFA, SSO, Conditional Access, and Privileged Access Management (PAM).
• Proven experience implementing and managing SIEM, EDR, and XDR platforms, including Wazuh, Microsoft Sentinel, Microsoft Defender, CrowdStrike, SentinelOne, or equivalent technologies.
• Demonstrated expertise in vulnerability management, threat detection, incident response, and security operations.
• Deep understanding of SOC 2 Type II, ISO 27001, HIPAA, PCI-DSS, GDPR, CCPA, NIST Cybersecurity Framework, CIS Benchmarks, and CMMI Level 5 requirements.
• Experience leading internal and external audits, compliance assessments, and remediation programs.
• Hands-on experience with Microsoft Azure, AWS, and/or Google Cloud Platform (GCP).
• Strong understanding of Disaster Recovery, Business Continuity Planning, and enterprise backup strategies.
• Excellent analytical, troubleshooting, and problem-solving abilities in high-pressure environments.
• Strong communication and stakeholder management skills, including the ability to lead discussions with auditors, customers, and executive leadership.
• Ability to work effectively in an on-site environment in Ahmedabad.