IT Infrastructure and Information Security Manager at Weekday in Bengaluru

Job description

This role is for one of Weekday’s clients Min Experience: 7+ years Location: Bengaluru, Karnataka, India JobType: full-time We are looking for an experienced IT Infrastructure and Information Security Manager to lead and manage enterprise IT infrastructure, information security, cloud platforms, networking, storage, backup, disaster recovery, and IT operations. The ideal candidate will have strong hands-on expertise in Windows Server administration, Active Directory, Microsoft 365, endpoint security, firewall management, network security, and hybrid infrastructure environments. The role involves ensuring the availability, security, scalability, resilience, and operational efficiency of business-critical IT systems across on-premises, cloud, and hybrid environments. The candidate should be capable of independently managing enterprise infrastructure, implementing security controls, maintaining audit readiness, driving infrastructure improvements, and ensuring business continuity. Requirements Key Responsibilities 1. IT Infrastructure and Systems Administration Manage enterprise IT infrastructure, including Windows Server 2012/2016/2019/2022, Wintel environments, and Active Directory. Administer Forest and Domain Management, DNS, DHCP, DFS, Group Policy, WSUS, PKI, IAS/NPS, and File and Print Services. Perform server administration, operating system management, patch management, server migrations, cloning, capacity planning, health checks, and lifecycle management. Ensure infrastructure availability, performance, redundancy, and operational resilience. 2. Microsoft 365 and Identity Management Administer the Microsoft 365 ecosystem, including Exchange Online, Intune, Entra ID, Defender, Purview, Teams, SharePoint Online, OneDrive, and Windows Autopilot. Manage user administration, access management, license management, Role-Based Access Control (RBAC), MFA, Conditional Access, SSO, and Identity Governance. Implement and maintain identity and access security policies. Use PowerShell for automation and administrative activities. 3. Endpoint and Information Security Manage endpoint security, compliance, device control, application control, BitLocker encryption, EDR, XDR, antivirus, and threat protection. Implement Attack Surface Reduction (ASR), vulnerability management, endpoint hardening, and security baselines. Administer and secure Windows, macOS, Android, and iOS devices using Microsoft Intune, JAMF Pro, Apple Business Manager, MDM/MAM, and endpoint compliance policies. Manage cybersecurity solutions, including Microsoft Defender for Endpoint, Sophos Endpoint Security, McAfee ePO, endpoint protection platforms, email security gateways, and DLP solutions. Coordinate vulnerability assessments, VAPT remediation, and security hardening initiatives. 4. Network and Firewall Management Design, implement, and support enterprise network infrastructure, including LAN, WAN, WLAN, MPLS, SD-WAN, routing, switching, TCP/IP, VLANs, NAT, wireless networks, and network segmentation. Manage Layer 2 and Layer 3 networking, including STP, RSTP, VTP, EtherChannel, Inter-VLAN Routing, routing protocols, high availability, and redundancy. Configure and maintain routers, switches, access points, firewalls, and network security appliances. Administer Sophos Firewalls, security policies, SSL VPN, IPSec VPN, Site-to-Site VPN, IPS, IDS, NAT rules, application control, and web filtering. 5. Cloud, Storage, and Backup Management Manage cloud environments across Microsoft Azure, AWS, and GCP, including compute, networking, storage, identity, governance, and security controls. Administer NAS, SAN, RAID, storage replication, cloud storage, and capacity planning. Manage full, incremental, differential, image-level, VM-level, and cloud backups. Implement and maintain Disaster Recovery (DR) and Business Continuity Planning (BCP) processes. Ensure data protection, backup integrity, recovery readiness, and business continuity. 6. Virtualisation and Infrastructure Mo