Infrastructure Manager

Job Description Infrastructure Manager (M365, Azure & Infra Security)

Role overview

The Infrastructure Manager owns MyPulse's Microsoft 365 tenant, Azure estate and infrastructure security end to end. The role keeps a regulated fintech lending platform available, secure and audit-ready, and leads the Infrastructure function within ICT.

Item

Purpose of the role: run a secure, resilient, cost-efficient Microsoft cloud environment that meets ISO 27001 and RBI expectations and turn security policy into working controls.

Key responsibilities

Microsoft 365

• Own the M365 tenant: Exchange Online, SharePoint, OneDrive and Teams, including governance, lifecycle and retention.
• Run Entra ID identity: user lifecycle, groups, Conditional Access, MFA, PIM and access reviews.
• Manage devices with Intune: enrolment, compliance policies, configuration profiles, app protection and patching.
• Build and govern Power Automate flows to automate IT and business processes, including connector policies, DLP for the Power Platform and environment management.
• Manage external collaboration, guest access and tenant-to-tenant integration for acquisitions.
• Own Microsoft licensing: strong knowledge of M365 E3/E5, Business Premium, Entra ID P1/P2, add-ons and Azure consumption models; plan renewals, true-ups and right-sizing so spend matches actual use.

Azure infrastructure

• Design and operate the Azure estate on a Landing Zone model: management groups, subscriptions, policy and RBAC.
• Run compute, networking, storage and PaaS services (VNets, NSGs, Application Gateway/WAF, App Service, AKS, Azure SQL, Key Vault).
• Deliver infrastructure as code (Bicep or Terraform) and CI/CD pipelines using Azure DevOps (Repos, Pipelines, Boards), with peer-reviewed changes.
• Own backup, disaster recovery and business continuity, including tested RTO/RPO and regular DR drills.
• Monitor with Azure Monitor, Log Analytics and KQL; own alerting, capacity and performance.
• Run FinOps: cost visibility, tagging, reservations and right-sizing.

Infrastructure security

• Run Microsoft Defender XDR (Endpoint, Office 365, Identity, Cloud Apps) and Defender for Cloud.
• Operate Microsoft Sentinel with the SOC: data connectors, analytics rules, playbooks and incident response.
• Enforce Zero Trust: least privilege, just-in-time admin access, secure baselines (CIS, Microsoft Secure Score).
• Manage SSE/SWG/CASB controls (e.g. Netskope) and email security.
• Run vulnerability management, patching SLAs, and remediation from VAPT findings.
• Build security gates into infrastructure change, in line with the SSDLC.

Governance, risk and compliance

• Own infrastructure controls for ISO 27001 (ISMS) and support certification and surveillance audits.
• Meet RBI requirements for IT governance, cyber security and outsourcing as they apply to lending.
• Maintain policies, standards, runbooks, asset register and the risk register for infrastructure.
• Produce audit evidence, KPIs and monthly reports for the Head of ICT and the board.

Operations and leadership

• Lead, hire and develop the infrastructure team; set on-call and escalation.
• Run ITIL processes: incident, problem, change and service request, with SLAs.
• Manage vendors, Microsoft partners and MSPs, including contracts and performance.
• Plan the roadmap and budget for infrastructure and security tooling.

Qualifications and skills

Must have

• Bachelors degree in computer science, IT or Engineering, or equivalent experience.
• 10+ years in IT infrastructure, with 5+ years hands-on in Azure and Microsoft 365 at enterprise scale.
• 4+ years leading engineers, including hiring, performance management and on-call.
• Deep Entra ID knowledge: Conditional Access, PIM, hybrid identity, app registrations and SSO.
• Hands-on Intune, Defender XDR, Defender for Cloud and Purview.
• Azure networking and security: hub-spoke, private endpoints, firewalls, WAF, Key Vault.
• Infrastructure as code (Bicep or Terraform), CI/CD with Azure DevOps, and scripting in PowerShell (incl. Microsoft Graph) and KQL.
• Working experience of ISO 27001 controls and audits.

Good to have

• Experience in BFSI, NBFC or fintech, with exposure to RBI cyber security and IT governance directions.
• Microsoft Sentinel engineering and SOC collaboration.
• SSE/CASB tools such as Netskope or Zscaler.
• M&A tenant integration or migration (e.g. Slack to Teams, cross-tenant).
• Exposure to SOC 2, PCI DSS or the DPDP Act, 2023.