Job DescriptionExpected Work Experience: 3 to 6 Years

NJob Summary

nSoftware Engineer with strong focus on technical architecture within Digital Commerce & Experience, responsible for designing and implementing secure server and database baselines aligned to CIS Level 1 standards. Candidate must have relevant experience of 3 to 6 Years. The role involves assessing legacy environments, defining compensating controls, and resolving security hardening exceptions in collaboration with application owners.

NKey Responsibilities

n

N
- Design and build CIS Level 1 baselines per member server cohort by OS generation.
N
- Assess legacy Windows Server 2012 R2 and LCOP hosts and define compensating controls.
N
- Implement SQL Level 1 CIS benchmarks across 7 database servers.
N
- Resolve server-side hardening exceptions with application owners, ensuring business functionality is maintained.
N
- Collaborate with architecture and security teams to align server and database configurations with enterprise security standards.
N
- Contribute to technicalarchitecture decisions for Digital Commerce &

Experience platforms, ensuring secure and scalable designs.

N
- Document baseline configurations, exceptions, and compensating controls for audit and compliance purposes.
N
- Participate in reviews of existing infrastructure to identify security posture gaps and recommend improvements.
N
- Support implementation and validation of hardening changes across environments (development, test, production).
N
- Assist in troubleshooting issues arising from security hardening and baseline changes in coordination with cross-functional teams.
N

nOther Capabilities

N

n




- Strong understanding of operating system concepts, especially Windows Server generations and their security configurations.
N
- Familiarity with CIS benchmarks and industry-standard security hardening practices for servers and databases.
N
- Ability to work effectively with application owners and stakeholders to balance security and usability.
N
- Good analytical and problem-solving skills to assess legacy systems and define practical compensating controls.
N
- Effective communicationskills to explain technical security changes to non-technical stakeholders.
N
- Ability to work in a structured, process-driven workplace and adhere to architectural and security governance.
N
- Collaborative mindset with willingness to support broader Digital Commerce &

Experience initiatives.

N

nQualifications andSkills

N

n
- Bachelor's degreein Computer Science, Information Technology, Engineering, or a related field (or equivalent practical experience).
N
- Experience in Digital Commerce &

Experience platforms and related technical architecture.

N
- Hands-on experience with designing and implementing CIS Level 1 baselines for servers and databases.
N
- Knowledge of SQL Serversecurity configuration and CIS benchmark implementation.
N
- Understanding of legacyWindows Server environments (including 2012 R2) and associated security challenges.
N
- Exposure to technical architecture principles, including scalability, reliability, and security-by-design.
N
- Familiarity with security hardening tools, configuration management, and automation is an advantage.
N
- Awareness of complianceand audit requirements related to infrastructure security.
N

📌 Hiring: Windows Server Engineer (Alibag)
🏢 Mastek
📍 Alibag