1. IT Infrastructure Management

- Manage and maintain IT infrastructure across Head Office and all branch locations, including desktops, laptops, servers, printers, network devices, and related IT systems.

- Ensure high availability, performance, reliability, and security of IT infrastructure.

- Manage hardware installation, configuration, upgrades, preventive maintenance, and troubleshooting.

- Monitor infrastructure performance and implement preventive measures to minimise downtime.

- Maintain infrastructure documentation, asset inventories, configuration records, and operational reports.

2. Network and Firewall Management

- Manage LAN, WAN, Wi-Fi, VPNs, routers, switches, firewalls, and network connectivity across Head Office and branches.

- Configure and maintain firewall policies, access control rules, VPN connectivity, network segmentation, and traffic filtering.

- Review firewall logs, investigate suspicious network activity, and implement appropriate security measures.

- Coordinate with network service providers and vendors for connectivity issues and infrastructure upgrades.

- Conduct periodic network security reviews and ensure secure connectivity between branch offices and Head Office.

3. Microsoft 365 and Office 365 Administration

- Administer the Microsoft 365 environment, including user accounts, licenses, groups, mailboxes, and access permissions.

- Manage the Microsoft 365 Admin Center, Exchange Online, SharePoint Online, OneDrive, and Microsoft Teams.

- Manage user onboarding, offboarding, account deactivation, license allocation, and access revocation.

- Implement and maintain email security controls, spam and phishing protection, MFA, and access policies.

- Monitor Microsoft 365 service health, investigate user issues, and coordinate with Microsoft support when required.

- Ensure appropriate access controls and compliance settings are maintained across Microsoft 365 services.

4. Endpoint and Device Management Microsoft Intune

- Manage endpoint devices using Microsoft Intune, including corporate laptops, desktops, and supported mobile devices.

- Configure device enrolment, compliance policies, configuration profiles, application deployment, and security baselines.

- Implement and manage device encryption, endpoint protection, patching, and operating system update policies.

- Manage device lifecycle activities, including provisioning, inventory tracking, remote lock, and wipe where authorized.

- Ensure corporate devices comply with organizational security policies before accessing business applications and data.

- Troubleshoot device compliance, application deployment, enrolment, and endpoint management issues.

5.

Data Loss

Prevention (DLP) and Information Security

- Implement and manage Data Loss Prevention (DLP) policies to prevent unauthorised sharing or leakage of confidential business information.

- Manage Microsoft Purview DLP policies for Exchange Online, SharePoint Online, OneDrive, and other supported workloads.

- Define and enforce policies for sensitive data handling, external sharing, email attachments, and unauthorised data transfers.

- Review DLP alerts, investigate policy violations, and coordinate with relevant stakeholders for remediation.

- Implement security controls covering endpoint protection, antivirus/EDR, MFA, privileged access, and secure data handling.





- Coordinate with internal teams and vendors to investigate security incidents and implement corrective actions.

6.

Active

Directory and Identity Management

- Manage on-premises Active Directory services across Head Office and branch locations.

- Administer user accounts, security groups, organisational units, Group Policy Objects (GPOs), and computer objects.

- Manage domain joining, authentication, password policies, access permissions, and account lockout issues.

- Maintain Active Directory replication, DNS, DHCP, domain controllers, and related infrastructure wherever applicable.

- Implement least-privilege access, privileged account controls, and periodic access reviews.

- Manage user onboarding and offboarding processes, ensuring timely creation, modification, and disabling of accounts.

- Coordinate and maintain synchronisation between on-premises Active Directory and Microsoft Entra ID, where applicable.

7. CCTV, Camera and Biometric Access Systems

- Manage CCTV cameras, video surveillance systems, NVR/DVR devices, recording storage, and monitoring availability across Head Office and branches.

- Manage biometric attendance systems, access control devices, and associated user enrolment and configuration.

- Coordinate installation, maintenance, troubleshooting, and upgrades of CCTV and biometric systems.

- Ensure appropriate access permissions, recording retention, system availability, and secure handling of surveillance data.

- Coordinate with facility management, HR, and external vendors for attendance system integration and access-related issues.

8. Server, Backup and Disaster Recovery Management

- Manage physical and virtual servers, operating systems, storage, and related infrastructure.

- Monitor server health, capacity, availability, patching, and performance.

- Manage backup solutions, backup schedules, restoration testing, and backup monitoring.

- Develop and maintain disaster recovery procedures and business continuity plans.

- Conduct periodic recovery testing and document recovery procedures to minimise business disruption.

9. IT Asset, Licensing and Vendor Management

- Manage the complete IT asset lifecycle, including procurement coordination, allocation, inventory, maintenance, and retirement.

- Maintain accurate records of hardware, software, warranties, AMC contracts, and vendor agreements.

- Manage Microsoft 365 and other software licenses, ensuring appropriate allocation and compliance.

- Coordinate with vendors and service providers for support, renewals, hardware repairs, and infrastructure upgrades.

- Track vendor performance, service-level commitments, costs, and renewal timelines.

- Identify opportunities for IT cost optimisation without compromising security or service quality.

10. IT Service Delivery and Team Management

- Lead and manage the IT infrastructure and support team across Head Office and branch locations.

- Allocate tasks, monitor performance,



and ensure timely resolution of incidents and service requests.

- Establish service delivery KPIs, escalation procedures, and ticket management standards.

- Maintain an effective IT helpdesk and ensure appropriate prioritisation of critical incidents.

- Coordinate with internal departments and management to address business technology requirements.

- Prepare periodic reports on incidents, availability, security issues, assets, costs, and service performance.

11. IT Governance, Audit and Compliance

- Ensure adherence to organisational IT policies, security standards, and applicable compliance requirements.

- Support ISO 27001:2022, ISMS audits, internal IT audits, and external assessments.

- Maintain evidence and documentation for access reviews, asset management, backup testing, security controls, and incident handling.

- Review IT risks and vulnerabilities and coordinate corrective and preventive actions.

- Ensure timely remediation of audit observations and compliance gaps.

Required Technical Skills

- Solid knowledge of enterprise IT infrastructure, hardware, operating systems, and networking.

- Hands-on experience with Microsoft 365 administration and identity management.

- Practical experience with Microsoft Intune, endpoint compliance, device management, and application deployment.

- Knowledge of DLP implementation and Microsoft Purview security controls.

- Strong understanding of Active Directory, Group Policy, DNS, DHCP, and Microsoft Entra ID.

- Experience managing firewalls, VPNs, switches, routers, LAN/WAN, and network security.

- Knowledge of server management, virtualization, backup, disaster recovery, and business continuity.

- Experience managing CCTV, NVR/DVR, biometric attendance, and access control systems.

- Understanding of endpoint protection, patch management, MFA, access governance, and security incident handling.

- Familiarity with IT asset management, software licensing, vendor management, and ITSM/ticketing tools.

- Knowledge of ISO 27001:2022 and ISMS requirements is an advantage.

Preferred Experience and Qualifications

- Bachelor's degree in Information Technology, Computer Science, or a related discipline.

- 812 years of relevant IT infrastructure experience, including team management responsibilities.

- Demonstrated experience managing IT infrastructure across multiple offices or branch locations.

- Relevant certifications in Microsoft 365, Microsoft Intune, networking, firewall technologies, or IT infrastructure management are an advantage.

- Strong communication,leadership, vendor coordination, documentation, and stakeholder management skills.

Key Performance Indicators (KPIs)

- IT infrastructure availability and reduction in unplanned downtime.

- Timely resolution of incidents and service requests against agreed SLAs.

- Endpoint compliance, patching, and device management coverage.

- Effectiveness of DLP, identity management, and access control implementation.

- Successful completion of backup restoration and disaster recovery tests.

- Timely closure of IT audit observations and security findings.

- Accuracy of IT asset inventory and software license compliance.

- Vendor SLA performance and IT cost optimization.

Effective support coverage across Head Office and branch locations

📌 Senior It And Infrastructure Manager (Mumbai)
🏢 Pentagon System and Services
📍 Mumbai