S I INFOTECH LLP
JOB DESCRIPTION
IT Infrastructure &
Audit Compliance Engineer
On-site Deployment: Andheri East location

Key skills : RHEL installation and hardening / Windows Server Installation and hardening / Cisco Switches Installation vlan config etc / Palo alto firewalls configuration etc Veritas Backup exe /

knowledge of tools like Zscaler / Forescout etc

1. Position Details
EmployerS I INFOTECH LLPClient / Work LocationAndheri East in office deploymentJob TitleIT Infrastructure & Audit Compliance EngineerDepartmentIT Infrastructure Support / Managed ServicesReports ToS I INFOTECH Service Manager; works in coordination with the designated clients IT / Security teamEmployment TypeFull-time; subject to the terms in the offer / appointment letterExperienceSuggested: 6-8 years in IT infrastructure support, system/network administration or a similar role
2. Role Purpose
The engineer will manage and support the clients IT infrastructure, including servers, firewalls, network switches and related systems, while maintaining operational records and audit evidence. The role requires both hands-on technical capability and the ability to explain, document and demonstrate assigned IT controls during internal, external and applicable regulatory audits.
The successful candidate should be organised, security-conscious, proactive in identifying gaps and able to communicate clearly with IT teams, auditors and business stakeholders.
3. Key Responsibilities
A. IT Infrastructure Operations

- Administer and support Windows Server and other approved server platforms, including health monitoring, patching, troubleshooting and security configuration.
- Manage firewalls, VPNs, network switches, VLANs, access-control rules and network connectivity in accordance with approved designs and change procedures.
- Maintain accurate infrastructure inventory, network diagrams, IP/subnet records, asset ownership and configuration documentation.
- Monitor availability, capacity, alerts and recurring incidents; investigate issues and escalate service-impacting risks promptly.
- Coordinate with vendors and internal teams for troubleshooting, maintenance and approved changes.
- Maintain configuration backups and verify that recovery arrangements are documented and tested as required by client policy.

B. IT Security and Control Operations

- Support user-access reviews, privileged-account checks and joiner/mover/leaver access-removal processes in coordination with authorised owners.
- Track server and network-device patch status, vulnerability findings, endpoint/server security coverage and remediation actions.
- Review firewall rules and network access controls as assigned; identify obsolete, overly broad or undocumented rules for authorised review.
- Support security-log monitoring, incident recording, evidence preservation and escalation in accordance with client procedures.
- Ensure material infrastructure changes are performed only through approved change-management processes, including implementation validation and rollback planning.
- Record control exceptions and operational gaps accurately; do not conceal failed controls or make unsupported compliance claims.

C. Audit Readiness and Evidence Management

- Maintain an organised, access-controlled evidence repository using the client-approved location and naming convention.
- Prepare and update evidence for assigned controls, including asset inventories, access lists, patch reports, firewall-rule reviews, change tickets, backup reports, incident records and vulnerability remediation.
- Ensure evidence is dated, relevant to the requested period, traceable to a source system or approved record, and reviewed where required.
- Map assigned controls to the approved client control matrix, policies and procedures; seek clarification when applicability or ownership is unclear.
- Support internal audits,



external audits and applicable regulatory or system audits by retrieving evidence, demonstrating technical controls and tracking follow-up requests.
- Maintain an audit-observation tracker with the finding, risk/priority, action owner, target date, evidence reference and closure status.
- Prepare a monthly IT control-readiness report covering control status, evidence availability, outstanding gaps, incidents and overdue actions.
- Participate in mock audits and continuous training to improve evidence retrieval, technical explanations and audit communication.

D. Communication and Service Delivery

- Provide timely, factual status updates to the S I INFOTECH reporting manager and designated CLIENT contacts.
- Escalate critical vulnerabilities, suspected security incidents, unauthorised changes, repeated backup failures and material control gaps without delay.
- Maintain clear service tickets and operational handover notes so that work is traceable and can be independently understood.
- Communicate professionally with auditors and stakeholders; answer within personal knowledge and authority, and refer policy or regulatory interpretations to authorised CLIENT personnel.

4. Required Technical Knowledge

- Windows Server administration, Active Directory and identity/access fundamentals; Linux knowledge is an advantage where used in the environment.
- Firewall administration concepts: rule bases, NAT, VPN, segmentation, management access, configuration backup and firmware lifecycle.
- Managed switching and networking: TCP/IP, DNS, DHCP, VLANs, routing fundamentals, ACLs and network diagrams.
- Security fundamentals: least privilege, MFA, hardening, patch management, vulnerability management, endpoint/server protection and log review.
- Backup and recovery concepts, including backup-job monitoring, restore testing, RPO and RTO.
- IT General Controls (ITGC): access management, change management, IT operations, backups, vulnerability remediation and incident management.
- Audit evidence principles: scope, date/period, source, traceability, approval, reviewer and documented exceptions.
- Familiarity with ISO/IEC 27001/27002, COBIT, NIST Cybersecurity Framework and financial-sector cybersecurity controls is desirable.

5. Regulatory and Policy Awareness
The engineer must follow the current policies, control standards and procedures formally communicated by CLIENT. He or she should be familiar with the purpose of applicable cybersecurity and IT-control requirements, including relevant SEBI / exchange requirements where confirmed by CLIENT compliance.
The engineer is responsible for technical implementation, operational monitoring, evidence collection and escalation within the assigned scope. Determining the legal or regulatory applicability of a framework, accepting material risk, certifying overall compliance, approving regulatory submissions and authorising exceptions remain with the designated CLIENT functions or other formally authorised personnel.
6. Qualifications and Experience

- Diploma, Bachelors degree or equivalent practical qualification in Information Technology, Computer Science, Electronics or a related discipline.
- Suggested 36 years of relevant hands-on experience in server, firewall and network support; candidates with strong equivalent experience may be considered.
- Experience supporting a business-critical or regulated environment is preferred.
- Certifications such as Microsoft role-based certifications, CCNA, Fortinet / other firewall-vendor training,



ISO 27001 Foundation or Internal Auditor training are desirable, not mandatory.
- Positive written documentation, spreadsheet, ticketing and verbal communication skills.

7. Essential Behavioural Competencies

- Methodical, accurate and comfortable maintaining evidence and checklists.
- Proactive in reporting risks and following up on open actions.
- Able to explain technical work in clear, non-technical language when needed.
- Honest and transparent when evidence is missing or a control has failed.
- Respects confidentiality, access restrictions, change approvals and segregation of duties.
- Calm and professional during audits, incidents and time-sensitive requests.

8. Deliverables and Performance Measures

- Infrastructure inventory and network documentation are maintained and reconciled at the agreed frequency.
- Assigned audit evidence is complete, current, traceable and available within agreed response times.
- Patch, vulnerability, access-review, backup and firewall-review exceptions are tracked and escalated in line with client policy.
- Changes and incidents have complete records and required approvals.
- Audit observations have named owners, target dates, progress updates and verifiable closure evidence.
- Monthly IT control-readiness report is submitted on time.
- Mock-audit results improve over the first 90 days, with no tolerance for fabricated evidence, unauthorised changes or concealment of material issues.

9. First 90 Days Expected Onboarding Outcomes
PeriodExpected outcomeDays 115Understand client policies, infrastructure inventory, audit history, control owners, escalation routes and approved evidence repository.Days 1630Complete an initial assessment of server, firewall, switch, access, patching and vulnerability evidence; identify gaps for review.Days 3160Maintain evidence registers, support backup/DR and change/incident documentation, and prepare the monthly control-readiness report.Days 6190Complete a mock audit, demonstrate evidence retrieval and technical explanations, and submit a prioritised improvement plan.
10. Role Boundaries and Escalation

- Do not make production changes without the required authorisation and change record.
- Do not approve your own access, risk exceptions or changes unless a documented delegation explicitly permits it.
- Do not represent that CLIENT complies with a regulation or control framework unless the authorised CLIENT function has confirmed the position.
- Do not fabricate, backdate or alter evidence to create a misleading audit trail.
- Protect confidential information and use only client-approved systems for storing or sharing evidence.
- Immediately follow the approved escalation process for suspected compromise, unauthorised access, critical vulnerabilities, material control failures or requests outside your authority.

11. Candidate Interview Practical Assessment Areas
Candidates may be asked to explain or demonstrate how they would:

1. Produce a current privileged-access list and evidence of an access review.
2. Trace a firewall rule to its business justification and approval.
3. Report patch compliance and explain how overdue critical vulnerabilities are handled.
4. Demonstrate the evidence needed to establish backup success and restoration testing.
5. Trace an infrastructure change from request and approval through implementation and validation.
6. Respond professionally when an auditor requests evidence that is unavailable or outside the candidates authority.

12. General Notes
This job description describes the intended role and recruitment requirements. Final employment terms, working hours, notice period, compensation, leave, confidentiality obligations and other service conditions will be governed by the company offer/appointment letter and applicable policies. Specific client responsibilities and regulatory scope will be confirmed by the authorised client representatives.

📌 It Infrastructure Engineer (Mumbai)
🏢 Si Infotech
📍 Mumbai