The Role
Own and manage the organization’s complete IT infrastructure, including networks, firewalls, AWS, Microsoft 365, endpoints, hosting, identity, and security controls. Administer cloud and web environments, ensure monitoring, backups, patching, disaster recovery, compliance, and high availability. Lead incident and change management, asset and vendor administration, documentation, and automation using PowerShell, AWS services, and Python. Support application integrations, licensing, procurement, and infrastructure optimization independently.
Summary Generated by Built In
Senior Network & Infrastructure Engineer
Summary
We are seeking a versatile and proactive Network Engineer to serve as the sole owner of our organization's comprehensive IT infrastructure. This pivotal role encompasses the end-to-end management of our network architecture, firewall security, cloud environment, Microsoft 365 ecosystem, web hosting, endpoint protection, and daily IT operations. Ideal for a professional with a broad skill set rather than a narrow specialization, the successful candidate will demonstrate the ability to independently build, secure, and optimize complex environments. The role demands a self-starter who can automate routine tasks, resolve issues efficiently, and ensure high availability with minimal oversight within a mid-sized engineering services firm.
Experience: 5-10 years
Location: Pune
Responsibilities
Core Infrastructure & Security Management
- Oversee FortiGate firewall configurations, VPN connectivity, internet access policies, and security rule sets.
- Liaise with Internet Service Providers, telecommunications firms, and external network vendors to ensure seamless connectivity.
- Administer the full AWS landscape, including EC2 instances, S3 storage, VPC networking, RDS/Aurora databases, and IAM Identity Center governance.
- Implement robust monitoring strategies for infrastructure health, automated backups, patch management, capacity planning, and disaster recovery protocols.
- Manage the Microsoft 365 suite, covering Exchange Online, Entra ID, Intune, Teams, and SharePoint, while overseeing user lifecycle management, license allocation, and access controls.
- Enforce endpoint security standards using Microsoft Defender and Trellix EDR/XDR, ensuring device compliance, Group Policy adherence, and Windows hardening.
- Handle the complete IT asset lifecycle, from onboarding and offboarding procedures to equipment management.
- Coordinate IT incident response, change management, service requests, and the maintenance of technical documentation.
- Manage vendor relationships, including contract negotiations, renewals, licensing, and support coordination.
Advanced Cloud & Web Operations
- Configure and maintain Cloudflare services, including DNS management, CDN optimization, SSL/TLS certificates, and Web Application Firewall (WAF) rules.
- Administer domain registration, DNS records, and SSL certificates across Cloudflare, AWS Route 53, and HostGator.
- Manage HostGator/cPanel hosting environments, including websites, email systems, FTP/SFTP access, and backup procedures.
- Configure Single Sign-On (SSO), OAuth flows, application registrations, and enterprise app integrations within Entra ID.
- Collaborate with development teams to support Teams integrations, adaptive cards, and approval workflows.
Compliance, Finance & Automation
- Maintain email security protocols, anti-phishing measures, Data Loss Prevention (DLP) strategies, and vulnerability remediation efforts.
- Assist in security assessments, system hardening, and adherence to regulatory compliance standards.
- Collaborate with Finance and Procurement departments to process purchase orders, invoices, vendor payments, and license renewals.
- Drive process improvement and automation initiatives using PowerShell, AWS Lambda, and basic Python scripting.
- Ensure accurate record-keeping for IT assets, network diagrams, and operational documentation.
Requirements
Technical Expertise
- Network & Security: Proficiency with FortiGate firewalls, VPNs, Cloudflare (DNS, CDN, WAF, SSL), DNS routing, and proxy configurations.
- Cloud Computing: Deep experience with AWS services including EC2, S3, VPC, RDS/Aurora, IAM, Route 53, Lambda, EventBridge, and SSM.
- Microsoft 365: Strong administration skills for Exchange Online, Entra ID (SSO/OAuth), Intune, Teams, SharePoint, and CSP licensing models.
- Endpoint Security: Expertise in Microsoft Defender, Trellix EDR/XDR, Group Policy, Windows hardening, and DLP implementation.
- Server & Hosting: Competence in managing Windows Server, Active Directory, IIS, SQL Server, MySQL, and HostGator/cPanel environments.
- Automation: Advanced PowerShell scripting capabilities, familiarity with AWS Lambda/EventBridge, and basic Python programming skills.
- Applications & Integration: Knowledge of REST APIs, SSO/OAuth protocols, Teams application development, and web application infrastructure.
- IT Operations: Experience in asset management, licensing administration, vendor management, and incident/change management frameworks.
Professional Attributes
- Demonstrated history of managing a full-spectrum IT environment in a live corporate setting, rather than isolated components.
- Exceptional troubleshooting abilities spanning network, DNS, SSL, cloud, and application layers.
- A security-first mindset with the ability to implement least-privilege principles and compliance controls effectively.
- Self-motivated professional capable of planning, documenting, and executing complex changes independently.
- Strong communication skills for interacting with vendors, finance teams, and non-technical stakeholders.
- Relevant certifications such as AWS Solutions Architect, AWS SysOps, Fortinet NSE, Microsoft MS-102, or AZ-104 are highly desirable.
Key Performance Objectives
- Ensure maximum uptime and high availability for network, cloud, hosting, and Microsoft 365 services.
- Maintain secure and compliant endpoints, servers, identities, and public-facing applications.
- Reduce the frequency of recurring incidents through proactive monitoring, automation, and thorough root-cause analysis.
- Optimize infrastructure and licensing expenditures through strategic cost management and timely renewals.
Skills Required
- 5-10 years of experience managing full-spectrum IT infrastructure in a corporate environment
- Proficiency with FortiGate firewalls, VPNs, Cloudflare, DNS, CDN, WAF, SSL, and proxy configurations
- Deep experience with AWS EC2, S3, VPC, RDS/Aurora, IAM, Route 53, Lambda, EventBridge, and Systems Manager
- Strong administration skills with Exchange Online, Entra ID, Intune, Teams, SharePoint, and CSP licensing
- Expertise with Microsoft Defender, Trellix EDR/XDR, Group Policy, Windows hardening, and DLP
- Experience managing Windows Server, Active Directory, IIS, SQL Server, MySQL, and HostGator/cPanel
- Advanced PowerShell scripting skills, familiarity with AWS Lambda/EventBridge, and basic Python programming
- Knowledge of REST APIs, SSO/OAuth protocols, Teams application development, and web application infrastructure
- Experience with asset management, licensing administration, vendor management, and incident/change management
- Strong troubleshooting abilities across network, DNS, SSL, cloud, and application layers
- Ability to implement least-privilege principles, security controls, and compliance measures
- Strong communication skills with vendors, finance teams, and non-technical stakeholders
- AWS Solutions Architect, AWS SysOps, Fortinet NSE, Microsoft MS-102, or AZ-104 certification
Am I A Good Fit?
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.
Success! Refresh the page to see how your skills align with this role.
The Company
What We Do
2COMS is an India-based recruitment and manpower consultancy that helps organizations meet workforce needs through leadership hiring, general and IT staffing, apprenticeship management, international recruitment, gig workforce solutions, payroll and compliance, and HR technology. The company serves employers across industries while connecting job seekers with domestic and global opportunities through technology-enabled, end-to-end workforce and talent-management services.
