CX is a product engineering services company and has launched many successful products for its clients since its inception. Many of these products have been running since 2013. We're looking for Head of IT Infrastructure owns the stability, security, scalability, and cost-effectiveness of all core technology services for Codelogicx. You will lead a small team of engineers and vendors to design, implement, and operate our on-prem and cloud-connected networks, servers, storage, identity platforms, and perimeter security (firewalls, VPN, IPS). Your mission is to deliver “five-nines” availability, strong cyber-resilience, and a friction-free user experience that enables every business function to perform at its best.
Requirements
Key Responsibilities
• Architecture, health, and lifecycle management of Active Directory, Azure AD, group policy, conditional access, SSO, MFA, Joiner-Mover-Leaver processes, audit readiness, role-based access reviews.
• Enterprise-class firewalls, routers, switches, load balancers, site-to-site VPNs, SD-WAN, and Internet Leased Lines (ILL). Network segmentation, QoS, and continuous monitoring (NetFlow, SNMP, syslog, NMS).
• Windows/Linux server estate (on-prem and IaaS), virtualization (VMware/Hyper-V), storage, backup, DR/BCP. Collaboration with DevOps/SaaS teams to enforce landing-zone standards and secure connectivity.
EDR/XDR platform (e.g., CrowdStrike, Microsoft Defender, SentinelOne)—policy tuning, threat-hunting, incident response. Mobile Device Management (Intune, Workspace ONE, Jamf) for laptops, phones, and BYOD; device compliance & encryption enforcement.
• Patch, vulnerability, and endpoint protection strategy. Firewall ruleset hygiene, IPS/IDS tuning, zero-trust and least-privilege principles. Support for ISO 27001, SOC 2, GDPR, HIPAA, or similar frameworks. Own ISO 27001 controls (A.5–A.18), evidence collection, internal audits, and external surveillance & recertification audits. Map controls to SOC 2 / GDPR / HIPAA where relevant. Drive vulnerability management, patch cadence, zero-trust micro-segmentation. Maintain SIEM/SOAR integrations.
• 3-year infrastructure roadmap, budget planning, vendor selection & contract negotiation. KPIs/SLAs, capacity planning, license compliance, documentation, and policy enforcement.
• Mentor a team of network/system admins (3-6 FTE) plus MSP partners. Escalation point for P1 incidents; manage major incident bridge, RCA, post-mortems. User-centric mindset—drive automation and self-service to reduce MTTR and service tickets.
Required Qualifications
· Education: Bachelor’s degree in Computer Science, Information Systems, or related field (or equivalent experience).
· Experience: 10+ years in enterprise infrastructure roles, including 3+ years managing teams and multi-site networks for ~300 users.
· Technical depth in:
o Active Directory, Azure AD/Entra ID, GPO, LDAP, DNS, DHCP.
o Next-gen firewalls (Palo Alto, Fortinet, Cisco ASA/Firepower, etc.).
o Endpoint security platforms (CrowdStrike, Defender, SentinelOne, Falcon Insight, etc.).
o MDM/UEM suites (Intune, Workspace ONE, Jamf, or similar).
o Routing & switching (OSPF/BGP, VLANs, spanning-tree, PoE, wireless controllers).
o WAN technologies—ILL, MPLS, SD-WAN—and ISP/vendor management.
o Virtualization (VMware ESXi/VCF or Hyper-V) and Windows/Linux server administration.
o Backup/restore and DR replication (Veeam, Zerto, or similar).
o Scripting/automation (PowerShell, Python, Ansible) and infrastructure-as-code concepts.
o Audit leadership for ISO 27001; familiarity with SOC 2 Type II reporting.
· Certifications (any of): CCNP/CCIE, PCNSE/NSE 7+, Microsoft Entra ID or Azure Architect, VMware VCP-DCV, ISO 27001 Lead Auditor/Lead Implementer, CISSP/CISM, ITIL v4.
Preferred/Bonus Skills
· Experience integrating on-prem AD with Microsoft 365, Intune, and conditional access.
· Familiarity with zero-trust network architecture and micro-segmentation projects.
· Exposure to SIEM/SOAR platforms (Splunk, Sentinel) and incident response playbooks.
· Track record of cost optimization (cloud egress, telco contracts, license audits).
· ITIL v4 certification and service-management process ownership.
Personal Attributes
· Incident Commander: Calm, decisive, data-driven under pressure.
· Problem-solver: Data-driven, automation-first mindset, relentless focus on root cause.
· Leadership: Empowers and develops technical staff; calmly leads during outages.
· Strategic thinker: Balances immediate fixes with long-term modernization.
· Communicator: Translates tech risks and requirements into business language for executives.
· Strategic Builder: Balances quick wins with long-term modernisation and cost-optimisation.
Benefits
Health insurance.
Hybrid working mode.
Provident Fund.
Parental leave.
Yearly Bonus. Gratuity.
Years of experience: Minimum 5 years
Location: Kolkata
Full time.
Skills Required
- Bachelor's degree in Computer Science, Information Systems, or a related field, or equivalent experience
- 10+ years of experience in enterprise infrastructure roles
- 3+ years of experience managing teams and multi-site networks for approximately 300 users
- Technical expertise in Active Directory, Azure AD/Entra ID, GPO, LDAP, DNS, and DHCP
- Experience with next-generation firewalls such as Palo Alto, Fortinet, or Cisco ASA/Firepower
- Experience with endpoint security platforms such as CrowdStrike, Microsoft Defender, or SentinelOne
- Experience with MDM/UEM suites such as Intune, Workspace ONE, or Jamf
- Experience with routing and switching, including OSPF/BGP, VLANs, spanning-tree, PoE, and wireless controllers
- Experience with WAN technologies including ILL, MPLS, and SD-WAN, plus ISP/vendor management
- Experience with VMware ESXi/VCF or Hyper-V and Windows/Linux server administration
- Experience with backup, restore, and disaster-recovery replication using Veeam, Zerto, or similar tools
- Scripting and automation experience with PowerShell, Python, or Ansible, plus infrastructure-as-code concepts
- Leadership experience for ISO 27001 audits and familiarity with SOC 2 Type II reporting
- At least one of CCNP/CCIE, PCNSE/NSE 7+, Microsoft Entra ID or Azure Architect, VMware VCP-DCV, ISO 27001 Lead Auditor/Lead Implementer, CISSP/CISM, or ITIL v4 certifications
- Experience integrating on-premises Active Directory with Microsoft 365, Intune, and conditional access
- Familiarity with zero-trust network architecture and micro-segmentation projects
- Exposure to SIEM/SOAR platforms such as Splunk or Microsoft Sentinel and incident-response playbooks
- Track record of infrastructure cost optimization, including cloud egress, telecommunications contracts, or license audits
- ITIL v4 certification and service-management process ownership
What We Do
Codelogicx is a technology services and product engineering firm working with fast paced startups, medium sized businesses, and Enterprises. Technology development drive world’s progress, software development drives technology. Codelogicx as a driver of software development understand the critical role it plays in shaping the future of the world. At Codelogicx our mission is to help every startup entrepreneur to succeed and get their product to global recognition. We also partner with enterprises to help them with their engineering challenges through innovating software engineering solutions. Codelogicx has deep technical expertise in Digital transformation, Cloud, Mobile, Web, Product engineering, Machine Learning and Blockchain and has been an evangelist of open-source technologies. As a progressive company Codelogicx is constantly innovating on processes and culture and has embraced hybrid work culture to reduce travel and carbon emission and support both employees and environment. Codelogicx is privately held and has presence in US, Saudi Arabia and India
