Senior Network & Infrastructure Engineer

Summary
We are seeking a versatile and proactive Network Engineer to serve as the sole owner of our organization's comprehensive IT infrastructure. This pivotal role encompasses the end-to-end management of our network architecture, firewall security, cloud environment, Microsoft 365 ecosystem, web hosting, endpoint protection, and daily IT operations. Ideal for a professional with a broad skill set rather than a narrow specialization, the successful candidate will demonstrate the ability to independently build, secure, and optimize complex environments. The role demands a self-starter who can automate routine tasks, resolve issues efficiently, and ensure high availability with minimal oversight within a mid-sized engineering services firm.

Experience: 5-10 years

Location: Pune

Responsibilities

Core Infrastructure & Security Management

- Oversee FortiGate firewall configurations, VPN connectivity, internet access policies, and security rule sets.

- Liaise with Internet Service Providers, telecommunications firms, and external network vendors to ensure seamless connectivity.

- Administer the full AWS landscape, including EC2 instances, S3 storage, VPC networking, RDS/Aurora databases, and IAM Identity Center governance.

- Implement robust monitoring strategies for infrastructure health, automated backups, patch management, capacity planning, and disaster recovery protocols.

- Manage the Microsoft 365 suite, covering Exchange Online, Entra ID, Intune, Teams, and SharePoint, while overseeing user lifecycle management, license allocation, and access controls.

- Enforce endpoint security standards using Microsoft Defender and Trellix EDR/XDR, ensuring device compliance, Group Policy adherence, and Windows hardening.

- Handle the complete IT asset lifecycle, from onboarding and offboarding procedures to equipment management.

- Coordinate IT incident response, change management, service requests, and the maintenance of technical documentation.

- Manage vendor relationships, including contract negotiations, renewals,



licensing, and support coordination.

Advanced Cloud & Web Operations

- Configure and maintain Cloudflare services, including DNS management, CDN optimization, SSL/TLS certificates, and Web Application Firewall (WAF) rules.

- Administer domain registration, DNS records, and SSL certificates across Cloudflare, AWS Route 53, and HostGator.

- Manage HostGator/cPanel hosting environments, including websites, email systems, FTP/SFTP access, and backup procedures.

- Configure Single Sign-On (SSO), OAuth flows, application registrations, and enterprise app integrations within Entra ID.

- Collaborate with development teams to support Teams integrations, adaptive cards, and approval workflows.

Compliance, Finance & Automation

- Maintain email security protocols, anti-phishing measures, Data Loss Prevention (DLP) strategies, and vulnerability remediation efforts.

- Assist in security assessments, system hardening, and adherence to regulatory compliance standards.

- Collaborate with Finance and Procurement departments to process purchase orders, invoices, vendor payments, and license renewals.

- Drive process improvement and automation initiatives using PowerShell, AWS Lambda, and basic Python scripting.

- Ensure accurate record-keeping for IT assets, network diagrams, and operational documentation.

Requirements
Technical Expertise

- Network & Security: Proficiency with FortiGate firewalls, VPNs, Cloudflare (DNS, CDN, WAF, SSL), DNS routing, and proxy configurations.

- Cloud Computing: Deep experience with AWS services including EC2, S3, VPC, RDS/Aurora, IAM, Route 53, Lambda, EventBridge, and SSM.

- Microsoft 365:



Strong administration skills for Exchange Online, Entra ID (SSO/OAuth), Intune, Teams, SharePoint, and CSP licensing models.

- Endpoint Security: Expertise in Microsoft Defender, Trellix EDR/XDR, Group Policy, Windows hardening, and DLP implementation.

- Server & Hosting: Competence in managing Windows Server, Active Directory, IIS, SQL Server, MySQL, and HostGator/cPanel environments.

- Automation: Advanced PowerShell scripting capabilities, familiarity with AWS Lambda/EventBridge, and basic Python programming skills.

- Applications & Integration: Knowledge of REST APIs, SSO/OAuth protocols, Teams application development, and web application infrastructure.

- IT Operations: Experience in asset management, licensing administration, vendor management, and incident/change management frameworks.

Professional Attributes

- Demonstrated history of managing a full-spectrum IT environment in a live corporate setting, rather than isolated components.

- Exceptional troubleshooting abilities spanning network, DNS, SSL, cloud, and application layers.

- A security-first mindset with the ability to implement least-privilege principles and compliance controls effectively.

- Self-motivated qualified capable of planning, documenting, and executing complex changes independently.

- Strong communication skills for interacting with vendors, finance teams, and non-technical stakeholders.

- Relevant certifications such as AWS Solutions Architect, AWS SysOps, Fortinet NSE, Microsoft MS-102, or AZ-104 are highly desirable.

Key Performance Objectives

- Ensure maximum uptime and high availability for network, cloud, hosting, and Microsoft 365 services.

- Maintain secure and compliant endpoints, servers, identities, and public-facing applications.

- Reduce the frequency of recurring incidents through proactive monitoring, automation, and thorough root-cause analysis.

- Optimize infrastructure and licensing expenditures through strategic cost management and timely renewals.

📌 Hiring || Senior Network & Infrastructure Engineer (Pune)
🏢 2COMs
📍 Pune