IT Engineer

Responsibilities

• Device Management, Hardware & Endpoint Security
• Manage and monitor company laptops and devices through JumpCloud for configuration, compliance, and lifecycle management.
• Perform hardware setup, upgrades, troubleshooting, and repair for laptops, desktops, and peripherals (printers, monitors, docking stations, etc.).
• Maintain an up-to-date hardware asset inventory and ensure proper allocation and tracking.
• Ensure endpoint security by deploying and maintaining antivirus/EDR solutions.
• Identity & Access Management (IAM) Administer JumpCloud SSO and directory services for provisioning and de provisioning users.
• Enforce security policies such as MFA, password policies, and conditional access.
• Troubleshoot authentication and access issues across applications and systems.
• Implement OS updates, patching, and vulnerability remediation.
• Network, Email & Security Operations Configure and maintain secure internet access using Zscaler (ZIA & ZPA) for web security, firewalling, and zero-trust enforcement.
• Administer and support VPN solutions to ensure secure remote access for employees.
• Implement and manage email security solutions (e.g., spam filtering, phishing protection, DMARC/DKIM/SPF policies).
• Monitor security alerts, logs, and user activity to detect and mitigate potential threats.
• Collaborate with security and compliance teams to ensure adherence to ISO 27001, PCI, DSS, and RBI guidelines.
• IT Support & Automation Provide Level 2/3 support for device, hardware, email, network, and access related issues.
• Automate onboarding/offboarding, software deployment, and compliance checks.
• Maintain documentation of IT processes, policies, and system configurations.

Requirements

• Bachelors degree in Information Technology, Computer Science, or equivalent experience.
• 2+ years of experience in IT engineering, system administration, or endpoint/network/email/hardware management.
• Hands-on experience with JumpCloud (Device Management & SSO).
• Strong knowledge of Zscaler (ZIA & ZPA) or equivalent network security platforms.
• Experience managing endpoint protection with EDR solutions (SentinelOne, CrowdStrike, or equivalent).
• Experience with VPN administration for secure remote connectivity.
• Experience with email security solutions (phishing/spam protection, policy enforcement).
• Proficiency with hardware troubleshooting (laptops, desktops, peripherals).
• Proficiency with Windows, macOS, and Linux device management.
• Understanding of IAM, network security, and compliance best practices.
• Preferred Qualifications - Scripting skills (Python, PowerShell, or Bash) for automation.
• Familiarity with AWS and cloud practices.
• Excellent troubleshooting and communication skills