IT Infrastructure Engineer L3

IT Infrastructure Engineer L3

Company: Decimal Point Analytics

Location: Ahmedabad - GIFT City (WTC)

Department: Technical IT Infrastructure & Operations

Experience: Minimum 8+ Years

Shift: Candidates must be willing to work in rotational shifts, including night shifts.

About the Role

We are looking for a highly experienced, hands-on L3 IT Infrastructure Engineer to take complete ownership of the IT infrastructure and technology operations at our site. This role requires a strong all-round technical professional with in-depth expertise in infrastructure management, enterprise networking, cloud platforms, cybersecurity, server administration, and end-user computing.

You will be the sole IT infrastructure point of contact responsible for the site, ensuring smooth day-to-day operations, high system availability, network reliability, security compliance, and timely resolution of technical issues. You will independently manage critical incidents, perform root cause analysis, coordinate with internal teams and external vendors, and drive infrastructure improvements with minimal supervision.

In addition to technical responsibilities, you will own vendor coordination, procurement activities, IT budgeting, cost optimization, commercial negotiations, asset lifecycle management, and infrastructure planning. You will work closely with IT leadership, business stakeholders, service providers, and vendors to ensure that IT services remain reliable, secure, scalable, and cost-effective.

The ideal candidate is a self-driven infrastructure professional who can operate independently, make sound technical decisions, take ownership of complex problems, and manage the complete IT environment at the site.

Key Responsibilities

1. Site IT Infrastructure Ownership

• Take end-to-end ownership of all IT infrastructure and technology operations at the assigned site.
• Act as the primary and sole on-site IT infrastructure resource, independently managing daily operations, troubleshooting, incident resolution, and service continuity.
• Ensure the availability, reliability, performance, and security of all IT systems, networks, servers, endpoints, and business-critical services.
• Manage L1/L2/L3 technical issues, perform advanced troubleshooting, and drive critical incidents through resolution.
• Coordinate with central IT, information security, application teams, management, and external service providers whenever required.
• Establish and maintain operational procedures, escalation matrices, disaster recovery processes, and business continuity plans.
• Identify recurring issues, perform root cause analysis, and implement permanent corrective and preventive measures.
• Plan and execute infrastructure changes, upgrades, maintenance activities, and technology refresh initiatives with minimal business disruption.
• Maintain site readiness for audits, business continuity exercises, client visits, and critical business operations.

2. Enterprise Networking & Connectivity

• Manage, configure, troubleshoot, and maintain enterprise network infrastructure, including LAN, WAN, Wi-Fi, VLANs, routers, switches, firewalls, and VPN connectivity.
• Demonstrate strong knowledge of TCP/IP, subnetting, routing, switching, DNS, DHCP, NAT, network segmentation, and network access controls.
• Administer and troubleshoot enterprise firewalls, security policies, access rules, site-to-site VPNs, and remote-access VPNs.
• Monitor network performance, bandwidth utilization, connectivity, latency, packet loss, and availability to identify and resolve network bottlenecks.
• Manage internet connectivity, leased lines, dedicated circuits, ISP links, and redundant connectivity wherever available.
• Coordinate with ISPs, telecom operators, and network service providers for outages, circuit provisioning, SLA compliance, and service restoration.
• Support network architecture changes, capacity planning, Wi-Fi coverage optimization, and infrastructure expansion.
• Maintain accurate network diagrams, IP addressing plans, VLAN documentation, firewall rule records, and configuration backups.
• Perform network troubleshooting using appropriate diagnostic tools and packet analysis utilities.

3. Cloud Infrastructure & Hybrid Environment

• Manage and support cloud infrastructure across AWS and/or Microsoft Azure, including virtual machines, compute resources, storage, networking, and identity access.
• Administer cloud networking components such as VPCs/VNets, subnets, routing tables, security groups, network security groups, VPN gateways, and connectivity between on-premises and cloud environments.
• Support hybrid infrastructure environments integrating on-premises systems, data centres, cloud resources, and remote users.
• Monitor cloud resource availability, utilization, performance, and service health.
• Manage cloud access, IAM roles, permissions, security configurations, and least-privilege access practices.
• Support backup, recovery, snapshots, disaster recovery, and business continuity for cloud workloads.
• Monitor cloud expenditure, identify idle or underutilized resources, and implement cost optimization measures.
• Coordinate with cloud service providers and managed service partners on escalations, service requests, and technical improvements.
• Assist with cloud migration, infrastructure modernization, capacity planning, and deployment activities.
• Maintain cloud configuration documentation, operational procedures, and recovery plans.

4. Servers, Virtualization & Storage

• Administer and maintain Windows Server and Linux environments, including system performance, services, patching, and troubleshooting.
• Manage virtualization platforms such as VMware vSphere, Microsoft Hyper-V, or equivalent technologies.
• Monitor virtual machines, host resources, storage capacity, and resource utilization.
• Administer Active Directory, Group Policy, DNS, DHCP, file servers, print services, and related infrastructure services.
• Manage shared storage, NAS/SAN environments, storage capacity, permissions, and availability wherever applicable.
• Implement and monitor backup solutions, verify backup completion, and conduct periodic restoration and recovery tests.
• Support server upgrades, hardware replacements, operating system lifecycle management, and infrastructure refresh activities.
• Investigate recurring performance issues, service failures, and capacity constraints, and implement appropriate corrective actions.

5. Microsoft 365, Identity & End-User Computing

• Manage Microsoft 365 services, including Exchange Online, Teams, SharePoint, OneDrive, and related administration activities.
• Administer user identities, distribution groups, access permissions, mailbox configurations, and licensing.
• Support identity and access management using Active Directory, Microsoft Entra ID, and relevant authentication mechanisms.
• Manage endpoint configuration, operating system deployment, device compliance, patching, antivirus, and endpoint security policies.
• Support endpoint management platforms such as Microsoft Intune, Microsoft Configuration Manager, or equivalent solutions.
• Troubleshoot complex laptop, desktop, application, email, printing, VPN, authentication, and productivity issues.
• Ensure secure onboarding, role changes, offboarding, access revocation, and IT asset recovery.
• Establish standard endpoint configurations and proactively reduce recurring user support incidents.

6. Information Security, Compliance & Risk Management

• Implement and maintain infrastructure security controls in accordance with company policies, client requirements, and applicable standards.
• Coordinate vulnerability remediation, patch management, endpoint protection, firewall reviews, access reviews, and security hardening activities.
• Monitor security alerts, investigate infrastructure-related incidents, and coordinate incident response with the appropriate security teams.
• Support ISO 27001, internal audits, client audits, risk assessments, and compliance evidence collection, where applicable.
• Maintain access records, configuration backups, asset registers, software inventories, and audit-ready documentation.
• Ensure privileged access is controlled, credentials are handled securely, and access is granted according to approved business requirements.
• Identify infrastructure risks and recommend practical mitigation measures to IT leadership.

7. Vendor Management, Coordination & SLA Governance

• Act as the primary technical point of contact for IT infrastructure vendors, OEMs, ISPs, telecom operators, cloud service providers, and managed service partners.
• Coordinate hardware repairs, equipment replacement, AMC renewals, support contracts, installations, upgrades, and preventive maintenance.
• Track vendor commitments, service requests, incident escalations, response times, resolution timelines, and contractual SLAs.
• Follow up proactively with vendors until issues are resolved and services are restored.
• Evaluate vendor technical proposals, service capabilities, support models, warranty coverage, and commercial terms.
• Review vendor performance and recommend corrective actions, alternative service providers, or contract improvements when necessary.
• Validate delivered services and supplied hardware against purchase orders, agreed specifications, contractual terms, and invoices.
• Maintain vendor contacts, escalation matrices, contract documents, warranties, AMC details, and renewal schedules.

8. IT Budgeting, Procurement & Commercial Negotiation

• Prepare and manage site-level IT infrastructure budgets covering hardware, software, networking, cloud services, connectivity, support contracts, and maintenance.
• Forecast annual and periodic IT expenditure based on infrastructure requirements, asset lifecycle, business growth, and operational risks.
• Obtain and evaluate quotations from multiple vendors to ensure technical suitability and competitive pricing.
• Lead or support commercial negotiations for hardware purchases, software licenses, cloud services, AMC renewals, internet connectivity, and IT support contracts.
• Negotiate pricing, discounts, payment terms, warranties, delivery timelines, service credits, support commitments, and contract renewal conditions.
• Identify cost-saving opportunities through vendor consolidation, license optimization, cloud cost management, standardization, and lifecycle planning.
• Track actual expenditure against approved budgets, maintain procurement records, and highlight budget variances.
• Raise purchase requisitions, coordinate purchase orders, verify deliveries, and ensure invoices align with approved quotations and contractual terms.
• Work with finance, procurement, administration, and management teams to secure timely approvals and maintain procurement compliance.
• Provide cost comparisons, commercial recommendations, and technical justification for infrastructure investments.

9. IT Asset & Lifecycle Management

• Maintain an accurate and up-to-date IT asset register covering laptops, desktops, servers, networking equipment, peripherals, software licenses, and other IT assets.
• Track asset allocation, ownership, serial numbers, warranty details, purchase dates, lifecycle status, and location.
• Manage asset procurement, deployment, inventory verification, repair, replacement, disposal, and secure data erasure.
• Coordinate employee onboarding and offboarding, ensuring timely asset handover, retrieval, and access revocation.
• Track warranty and AMC expirations and initiate renewals or replacements in advance.
• Reconcile physical inventory against asset records and procurement documentation.

10. Monitoring, Incident Management & Service Delivery

• Monitor infrastructure availability, system health, connectivity, backups, storage, and critical services through appropriate monitoring tools.
• Manage incidents, service requests, changes, and problem records through ITSM platforms such as ServiceNow, Freshservice, Jira Service Management, or equivalent tools.
• Ensure incidents are prioritized appropriately and resolved within defined SLAs.
• Lead technical investigations for major incidents, document root causes, and track corrective and preventive actions.
• Prepare incident reports, recurring issue analysis, infrastructure health reports, and management updates.
• Define and maintain SOPs, troubleshooting guides, escalation processes, operational checklists, and technical documentation.
• Proactively identify risks, capacity constraints, and operational gaps before they affect business users.

11. Infrastructure Planning & Continuous Improvement

• Assess existing infrastructure and recommend improvements in availability, performance, security, scalability, and operational efficiency.
• Develop infrastructure roadmaps covering network upgrades, server refreshes, cloud adoption, security improvements, and capacity requirements.
• Evaluate new technologies and solutions based on technical requirements, business benefits, operational risk, and total cost of ownership.
• Support technology implementations, migrations, office expansions, new infrastructure deployments, and business continuity initiatives.
• Standardize configurations, automate repetitive tasks using PowerShell, Bash, or other suitable tools, and improve operational efficiency.
• Keep technical documentation, architecture diagrams, configuration records, and recovery procedures current.

Required Skills & Experience

• Minimum 8+ years of hands-on experience in IT infrastructure, systems administration, enterprise networking, and technical support, with demonstrated L3 troubleshooting capability.
• Proven experience independently managing IT infrastructure operations for an office, site, branch, or similar business environment.
• Strong expertise in Windows Server, Active Directory, Group Policy, DNS, DHCP, Microsoft 365, and identity management.
• Strong networking fundamentals and practical experience with LAN/WAN, VLANs, routing, switching, firewalls, VPNs, Wi-Fi, and ISP connectivity.
• Hands-on exposure to AWS and/or Microsoft Azure, including cloud compute, storage, networking, security, access management, and monitoring.
• Experience with virtualization, server management, storage, backup, recovery, and disaster recovery procedures.
• Working knowledge of endpoint security, antivirus/EDR, patch management, vulnerability remediation, and infrastructure hardening.
• Experience with ITSM, incident management, change management, SLA tracking, and root cause analysis.
• Demonstrated vendor coordination, procurement, quotation evaluation, contract management, and commercial negotiation skills.
• Practical experience preparing or monitoring IT budgets, controlling operational expenses, and identifying cost optimization opportunities.
• Familiarity with asset management, software licensing, warranty and AMC tracking, audit documentation, and compliance requirements.
• Good troubleshooting methodology, technical documentation skills, and the ability to manage critical issues independently.
• Strong communication, stakeholder management, prioritization, and decision-making skills.
• Willingness to support planned maintenance outside standard working hours and respond to critical infrastructure incidents as required.

Good to Have

• Certifications such as CCNA, CCNP, Microsoft Azure Administrator Associate (AZ-104), Microsoft 365 certifications, AWS Certified Solutions Architect Associate, AWS Certified CloudOps Engineer Associate, or equivalent.
• Experience with enterprise firewall platforms such as Fortinet, Cisco, Palo Alto, or equivalent.
• Experience with monitoring tools such as PRTG, Zabbix, SolarWinds, or equivalent.
• Exposure to Microsoft Intune, Microsoft Entra ID, endpoint detection and response, and device compliance management.
• Knowledge of PowerShell, Bash, automation, and infrastructure scripting.
• Experience supporting ISO 27001, SOC 2, client security assessments, or other relevant audit requirements.
• Experience managing IT operations for a financial services, analytics, consulting, or other business-critical environment.

Education

B.E./B.Tech in Computer Science, Information Technology, Electronics, or a related discipline; B.Sc. IT, BCA, MCA, or an equivalent qualification with substantial relevant infrastructure experience.

Key Expectations for This Role

• Complete site ownership: The engineer will be the sole on-site IT infrastructure resource and will be accountable for the day-to-day health and continuity of site IT operations.
• Independent technical execution: Ability to resolve complex infrastructure, server, network, cloud, and endpoint issues without constant supervision.
• End-to-end accountability: Ownership of incidents, vendor escalations, procurement follow-ups, asset management, documentation, and infrastructure maintenance.
• Commercial ownership: Ability to evaluate proposals, negotiate with vendors, monitor expenditure, and recommend cost-effective solutions.
• Proactive problem-solving: Focus on preventing recurring incidents, reducing downtime, improving security, and ensuring business continuity.
• Stakeholder communication: Clear communication with employees, IT leadership, finance, procurement, security, and external service providers.
• Service reliability: Ensure infrastructure tasks, maintenance activities, support requests, and security requirements are handled within agreed timelines.

Why Join Us?

This role offers the opportunity to take ownership of a complete site IT environment while working across enterprise infrastructure, cloud technologies, networking, cybersecurity, vendor management, and IT financial operations.

You will have the independence to make technical decisions, improve infrastructure reliability, drive cost optimization, and contribute to broader IT strategy while supporting a business-critical environment.