Hiring || Senior Network & Infrastructure Engineer
Summary
Sole owner of a mid-sized engineering services firm's IT infrastructure in Pune: managing FortiGate firewalls, AWS cloud (EC2, S3, VPC, RDS), Microsoft 365/Entra ID, Cloudflare and cPanel hosting, and endpoint security, plus IT operations, vendor management, and automation via PowerShell, Lambda, and Python. Requires 5-10 years' experience.
Senior Network & Infrastructure Engineer
Responsibilities
- Oversee FortiGate firewall configurations, VPN connectivity, internet access policies, and security rule sets.
- Liaise with Internet Service Providers, telecommunications firms, and external network vendors to ensure seamless connectivity.
- Administer the full AWS landscape, including EC2 instances, S3 storage, VPC networking, RDS/Aurora databases, and IAM Identity Center governance.
- Implement robust monitoring strategies for infrastructure health, automated backups, patch management, capacity planning, and disaster recovery protocols.
- Manage the Microsoft 365 suite, covering Exchange Online, Entra ID, Intune, Teams, and SharePoint, while overseeing user lifecycle management, license allocation, and access controls.
- Enforce endpoint security standards using Microsoft Defender and Trellix EDR/XDR, ensuring device compliance, Group Policy adherence, and Windows hardening.
- Handle the complete IT asset lifecycle, from onboarding and offboarding procedures to equipment management.
- Coordinate IT incident response, change management, service requests, and the maintenance of technical documentation.
- Manage vendor relationships, including contract negotiations, renewals, licensing, and support coordination.
- Configure and maintain Cloudflare services, including DNS management, CDN optimization, SSL/TLS certificates, and Web Application Firewall (WAF) rules.
- Administer domain registration, DNS records, and SSL certificates across Cloudflare, AWS Route 53, and HostGator.
- Manage HostGator/cPanel hosting environments, including websites, email systems, FTP/SFTP access, and backup procedures.
- Configure Single Sign-On (SSO), OAuth flows, application registrations, and enterprise app integrations within Entra ID.
- Collaborate with development teams to support Teams integrations, adaptive cards, and approval workflows.
- Maintain email security protocols, anti-phishing measures, Data Loss Prevention (DLP) strategies, and vulnerability remediation efforts.
- Assist in security assessments, system hardening, and adherence to regulatory compliance standards.
- Collaborate with Finance and Procurement departments to process purchase orders, invoices, vendor payments, and license renewals.
- Drive process improvement and automation initiatives using PowerShell, AWS Lambda, and basic Python scripting.
- Ensure accurate record-keeping for IT assets, network diagrams, and operational documentation.
Requirements
- Network & Security: Proficiency with FortiGate firewalls, VPNs, Cloudflare (DNS, CDN, WAF, SSL), DNS routing, and proxy configurations.
- Cloud Computing: Deep experience with AWS services including EC2, S3, VPC, RDS/Aurora, IAM, Route 53, Lambda, EventBridge, and SSM.
- Microsoft 365: Strong administration skills for Exchange Online, Entra ID (SSO/OAuth), Intune, Teams, SharePoint, and CSP licensing models.
- Endpoint Security: Expertise in Microsoft Defender, Trellix EDR/XDR, Group Policy, Windows hardening, and DLP implementation.
- Server & Hosting: Competence in managing Windows Server, Active Directory, IIS, SQL Server, MySQL, and HostGator/cPanel environments.
- Automation: Advanced PowerShell scripting capabilities, familiarity with AWS Lambda/EventBridge, and basic Python programming skills.
- Applications & Integration: Knowledge of REST APIs, SSO/OAuth protocols, Teams application development, and web application infrastructure.
- IT Operations: Experience in asset management, licensing administration, vendor management, and incident/change management frameworks.
- Demonstrated history of managing a full-spectrum IT environment in a live corporate setting, rather than isolated components.
- Exceptional troubleshooting abilities spanning network, DNS, SSL, cloud, and application layers.
- A security-first mindset with the ability to implement least-privilege principles and compliance controls effectively.
- Self-motivated professional capable of planning, documenting, and executing complex changes independently.
- Strong communication skills for interacting with vendors, finance teams, and non-technical stakeholders.
- Relevant certifications such as AWS Solutions Architect, AWS SysOps, Fortinet NSE, Microsoft MS-102, or AZ-104 are highly desirable.
Key Performance Objectives
- Ensure maximum uptime and high availability for network, cloud, hosting, and Microsoft 365 services.
- Maintain secure and compliant endpoints, servers, identities, and public-facing applications.
- Reduce the frequency of recurring incidents through proactive monitoring, automation, and thorough root-cause analysis.
- Optimize infrastructure and licensing expenditures through strategic cost management and timely renewals.
Skills
- Active Directory
- API
- Aurora
- Automation
- AWS
- Cloud
- Cloudflare
- DLP
- DNS
- EC2
- EDR
- Entra ID
- Eventbridge
- Firewall
- Fortinet
- IAM
- Iis
- Intune
- Lambda
- Microsoft Defender
- Microsoft Exchange
- MySQL
- Networking
- OAuth
- PowerShell
- Process Improvement
- Python
- RDS
- Regulatory Compliance
- REST
- Root Cause Analysis
- S3
- SFTP
- SharePoint
- SQL
- SQL Server
- SSL
- SSO
- TLS
- Vendor Management
- VPC
- VPN
- WAF
- Windows Server
- XDR