IT Infrastructure and Information Security Manager

This role is for one of Weekday’s clients

Min Experience: 7+ years
Location: Bengaluru, Karnataka, India
JobType: full-time

We are looking for an experienced IT Infrastructure and Information Security Manager to lead and manage enterprise IT infrastructure, information security, cloud platforms, networking, storage, backup, disaster recovery, and IT operations.

The ideal candidate will have strong hands-on expertise in Windows Server administration, Active Directory, Microsoft 365, endpoint security, firewall management, network security, and hybrid infrastructure environments. The role involves ensuring the availability, security, scalability, resilience, and operational efficiency of business-critical IT systems across on-premises, cloud, and hybrid environments.

The candidate should be capable of independently managing enterprise infrastructure, implementing security controls, maintaining audit readiness, driving infrastructure improvements, and ensuring business continuity.

Key Responsibilities

1. IT Infrastructure and Systems Administration

• Manage enterprise IT infrastructure, including Windows Server 2012/2016/2019/2022, Wintel environments, and Active Directory.
• Administer Forest and Domain Management, DNS, DHCP, DFS, Group Policy, WSUS, PKI, IAS/NPS, and File and Print Services.
• Perform server administration, operating system management, patch management, server migrations, cloning, capacity planning, health checks, and lifecycle management.
• Ensure infrastructure availability, performance, redundancy, and operational resilience.

2. Microsoft 365 and Identity Management

• Administer the Microsoft 365 ecosystem, including Exchange Online, Intune, Entra ID, Defender, Purview, Teams, SharePoint Online, OneDrive, and Windows Autopilot.
• Manage user administration, access management, license management, Role-Based Access Control (RBAC), MFA, Conditional Access, SSO, and Identity Governance.
• Implement and maintain identity and access security policies.
• Use PowerShell for automation and administrative activities.

3. Endpoint and Information Security

• Manage endpoint security, compliance, device control, application control, BitLocker encryption, EDR, XDR, antivirus, and threat protection.
• Implement Attack Surface Reduction (ASR), vulnerability management, endpoint hardening, and security baselines.
• Administer and secure Windows, macOS, Android, and iOS devices using Microsoft Intune, JAMF Pro, Apple Business Manager, MDM/MAM, and endpoint compliance policies.
• Manage cybersecurity solutions, including Microsoft Defender for Endpoint, Sophos Endpoint Security, McAfee ePO, endpoint protection platforms, email security gateways, and DLP solutions.
• Coordinate vulnerability assessments, VAPT remediation, and security hardening initiatives.

4. Network and Firewall Management

• Design, implement, and support enterprise network infrastructure, including LAN, WAN, WLAN, MPLS, SD-WAN, routing, switching, TCP/IP, VLANs, NAT, wireless networks, and network segmentation.
• Manage Layer 2 and Layer 3 networking, including STP, RSTP, VTP, EtherChannel, Inter-VLAN Routing, routing protocols, high availability, and redundancy.
• Configure and maintain routers, switches, access points, firewalls, and network security appliances.
• Administer Sophos Firewalls, security policies, SSL VPN, IPSec VPN, Site-to-Site VPN, IPS, IDS, NAT rules, application control, and web filtering.

5. Cloud, Storage, and Backup Management

• Manage cloud environments across Microsoft Azure, AWS, and GCP, including compute, networking, storage, identity, governance, and security controls.
• Administer NAS, SAN, RAID, storage replication, cloud storage, and capacity planning.
• Manage full, incremental, differential, image-level, VM-level, and cloud backups.
• Implement and maintain Disaster Recovery (DR) and Business Continuity Planning (BCP) processes.
• Ensure data protection, backup integrity, recovery readiness, and business continuity.

6. Virtualisation and Infrastructure Monitoring

• Manage VMware and Microsoft Hyper-V environments, including VM provisioning, migrations, cloning, snapshots, HA clusters, and resource optimisation.
• Monitor enterprise infrastructure using PRTG, ManageEngine OpManager, Action1, Altris Patch Management, McAfee ePO, Azure Monitor, and security monitoring platforms.
• Perform preventive maintenance, Root Cause Analysis (RCA), patch compliance, firmware upgrades, and security updates.
• Implement high availability, failover mechanisms, infrastructure redundancy, and operational resilience.

7. Security, Compliance, and Audit Management

• Configure and support FTP, SFTP, FTPS, SSL certificates, SPF, DKIM, and DMARC.
• Support internal and external audits, security assessments, and audit readiness activities.
• Maintain infrastructure documentation, SOPs, risk assessments, and remediation plans.
• Ensure compliance with information security policies and operational standards.
• Drive continuous improvements in infrastructure security and risk management.

8. Vendor and IT Operations Management

• Manage vendors, OEMs, ISPs, software licensing, renewals, and procurement coordination.
• Support budget planning, cost optimisation, SLA governance, and technology evaluations.
• Coordinate with internal stakeholders and external partners to ensure reliable IT service delivery.
• Identify opportunities to improve infrastructure performance, security, and operational efficiency.

Must-Have Skills

• Active Directory Administration
• Microsoft 365 Administration
• Firewall Management
• Windows Server and Wintel Infrastructure
• Enterprise IT Infrastructure Management
• Information Security

Good-to-Have Skills

• Server Configuration and Administration
• Patch Management
• Network Security
• Endpoint Security (EDR/XDR)
• Cloud Infrastructure (Azure, AWS, GCP)
• Backup and Disaster Recovery
• Virtualisation (VMware, Hyper-V)
• Security Compliance and Audit Management

Technical Skills

• Infrastructure and Systems: Windows Server, Wintel, Active Directory, Forest and Domain Management, DNS, DHCP, DFS, WSUS, PKI, IAS/NPS, File and Print Services.
• Microsoft Technologies: Microsoft 365, Exchange Online, Intune, Entra ID, Defender Suite, Purview, SharePoint Online, Teams, OneDrive, Autopilot, PowerShell.
• Endpoint Security: Microsoft Defender for Endpoint, EDR, XDR, Endpoint Compliance, Device Control, ASR Rules, BitLocker, Endpoint Hardening, Application Control, Vulnerability Management, Sophos Endpoint Security, McAfee ePO.
• Networking: TCP/IP, Routing and Switching, VLANs, VTP, STP, RSTP, EtherChannel, MPLS, SD-WAN, NAT, Wireless Networks, Routing Protocols.
• Firewall and VPN: Sophos Firewall, SSL VPN, IPSec VPN, Site-to-Site VPN, IPS, IDS, Web Filtering, Application Control.
• Cloud Platforms: Microsoft Azure, AWS, GCP.
• Storage and Backup: NAS, SAN, RAID, Backup and Recovery, Disaster Recovery, Business Continuity Planning.
• Virtualisation: VMware vSphere, Microsoft Hyper-V.
• Monitoring and Patch Management: PRTG, ManageEngine OpManager, Action1, Altris, McAfee ePO, Azure Monitor.
• Security and Compliance: DLP, Email Security Gateway, VAPT, Security Hardening, Vulnerability Assessment, Risk Management, Audit Support.