Senior IT & Infrastructure Engineer

Senior IT & Infrastructure Engineer

Sankar Group | Chennai, India | Full-Time | 5–8 Years Experience

About the Role

We are seeking an experienced and self-driven Senior IT & Infrastructure Engineer to own and lead our end-to-end IT operations. This is a senior individual-contributor role requiring deep technical expertise across infrastructure, networking, security, endpoint management, and physical security systems. You will drive process improvements, and ensure the stability, security, and scalability of our IT environment as the organization grows.

Key Responsibilities

IT Asset Management

• Own the full lifecycle of IT assets from procurement to decommissioning; maintain a centralized asset management system
• Track hardware and software licenses across all locations; conduct quarterly and annual physical audits
• Manage vendor relationships for hardware procurement, AMCs, and warranty claims

Windows & Endpoint Management

• Administer Windows 10/11 enterprise environments at scale (250+ endpoints)
• Manage Active Directory and Azure AD: user accounts, OUs, group policies, and security baselines
• Deploy and manage endpoints using Microsoft Intune / SCCM; build standard OS images (WDS/MDT)
• Enforce endpoint security: BitLocker, USB restrictions, application whitelisting; drive patch compliance to 95%+

Network Infrastructure

• Design, configure, and manage enterprise LAN/WAN: managed switches (Cisco, HP Aruba, Juniper or equivalent), VLANs, STP, inter-VLAN routing
• Manage L2/L3 switching, static and dynamic routing (OSPF, BGP basics), and enterprise Wi-Fi with RADIUS authentication
• Monitor network health (PRTG, SolarWinds, Zabbix); manage ISP links with failover; maintain network documentation and IPAM

Firewall & Network Security

• Configure and manage next-generation firewalls (Fortinet, Sophos, Palo Alto, Cisco ASA or similar)
• Maintain firewall rule sets, NAT policies, and security zones on least-privilege principles
• Manage site-to-site and remote-access VPNs; implement IPS/IDS, web filtering, and SSL inspection
• Monitor firewall logs and SIEM alerts; investigate and respond to threats; conduct regular rule audits

Endpoint Security

• Deploy and manage EDR/antivirus solutions (CrowdStrike, Microsoft Defender for Endpoint, Sophos Intercept X or similar)
• Manage DLP policies; respond to endpoint security incidents: isolate, investigate, remediate, document

Microsoft 365 Administration & Email Backup

• Administer the M365 tenant: Exchange Online, SharePoint, Teams, OneDrive
• Configure and maintain email backup solutions (Veeam, Barracuda, AvePoint or similar) with defined RPO/RTO; validate restores through recovery drills
• Manage OneDrive sync policies, Conditional Access, MFA, and identity governance

Biometric Access Control & CCTV

• Manage biometric attendance and door access-control systems (ZKTeco, HID, Honeywell, Suprema or similar), including user onboarding/offboarding and HR integrations
• Manage end-to-end CCTV infrastructure: IP cameras, NVRs/DVRs, storage retention, remote monitoring, and incident footage retrieval

IT Operations & Governance

• Maintain IT documentation: SOPs, network diagrams, runbooks, and change logs
• Own the IT helpdesk process; define SLAs and ensure timely ticket resolution
• Lead IT onboarding for new employees; define and enforce IT policies
• Drive internal and external IT audits; participate in disaster recovery planning and testing

Required Skills & Experience

• 5–8 years in IT infrastructure, systems administration, or network engineering, with a track record of operating independently
• Proven experience administering Windows enterprise environments at scale (200+ endpoints)
• Strong hands-on expertise with Active Directory, Azure AD, Conditional Access, and MFA
• Experience with MDM/UEM platforms (Intune, SCCM or equivalent), including OS imaging
• Deep networking knowledge: VLANs, L2/L3 switching, OSPF/BGP basics, enterprise Wi-Fi
• Hands-on next-generation firewall management, including VPNs, NAT, and IPS/IDS
• M365 administration and backup experience with defined RPO/RTO
• Working knowledge of EDR/antivirus and DLP solutions
• Practical experience with biometric access-control and CCTV systems
• Solid grounding in IT asset management, governance, vendor/AMC management, DR planning, and audit readiness

Certifications (Preferred)

Microsoft MD-102 / AZ-104 / MS-102 • CCNA or CompTIA Network+ • Fortinet NSE or Sophos Certified Engineer (a plus)

What We Offer

Competitive salary benchmarked to market • Opportunity to own and shape IT infrastructure in a growing organization • Exposure to enterprise-grade tools and multi-cloud environments • Health insurance, leave benefits, and standard perks

Join our team and be part of a company that's driving innovation and excellence in the automotive component manufacturing sector. If you're ready to take on this exciting challenge, we want to hear from you!

Sankar Sealing Systems Pvt Ltd is an equal opportunity employer and values diversity in the workplace. We encourage candidates from all backgrounds to apply.