Expected Work Experience: 3 to 6 Years /n /n Job Summary /n Software Engineer with strong focus on technical architecture within Digital Commerce & Experience, responsible for designing and implementing secure server and database baselines aligned to CIS Level 1 standards. Candidate must have relevant experience of 3 to 6 Years. The role involves assessing legacy environments, defining compensating controls, and resolving security hardening exceptions in collaboration with application owners. /n /n Key Responsibilities /n - Design and build CIS Level 1 baselines per member server cohort by OS generation. /n - Assess legacy Windows Server 2012 R2 and LCOP hosts and define compensating controls. /n - Implement SQL Level 1 CIS benchmarks across 7 database servers. /n - Resolve server-side hardening exceptions with application owners, ensuring business functionality is maintained. /n - Collaborate with architecture and security teams to align server and database configurations with enterprise security standards. /n - Contribute to technical architecture decisions for Digital Commerce &

Experience platforms, ensuring secure and scalable designs. /n - Document baseline configurations, exceptions, and compensating controls for audit and compliance purposes. /n - Participate in reviews of existing infrastructure to identify security posture gaps and recommend improvements. /n - Support implementation and validation of hardening changes across environments (development, test, production). /n - Assist in troubleshooting issues arising from security hardening and baseline changes in coordination with cross-functional teams.



/n /n Other Capabilities /n - Strong understanding of operating system concepts, especially Windows Server generations and their security configurations. /n - Familiarity with CIS benchmarks and industry-standard security hardening practices for servers and databases. /n - Ability to work effectively with application owners and stakeholders to balance security and usability. /n - Good analytical and problem-solving skills to assess legacy systems and define practical compensating controls. /n - Effective communication skills to explain technical security changes to non-technical stakeholders. /n - Ability to work in a structured, process-driven environment and adhere to architectural and security governance. /n - Team-oriented mindset with willingness to support broader Digital Commerce &

Experience initiatives. /n /n Qualifications and Skills /n - Bachelor’s degree in Computer Science, Information Technology, Engineering, or a related field (or equivalent practical experience). /n - Experience in Digital Commerce &

Experience platforms and related technical architecture. /n - Hands-on experience with designing and implementing CIS Level 1 baselines for servers and databases. /n - Knowledge of SQL Server security configuration and CIS benchmark implementation. /n - Understanding of legacy Windows Server environments (including 2012 R2) and associated security challenges. /n - Exposure to technical architecture principles, including scalability, reliability, and security-by-design. /n - Familiarity with security hardening tools, configuration management, and automation is an advantage. /n - Awareness of compliance and audit requirements related to infrastructure security.

📌 Windows Server Engineer (Mumbai)
🏢 Mastek
📍 Mumbai