Infrastructure Manager (M365, Azure & Infra Security)

Role overview The Infrastructure Manager owns MyPulse's Microsoft 365 tenant, Azure estate and infrastructure security end to end. The role keeps a regulated fintech lending platform available, secure and audit-ready, and leads the Infrastructure function within ICT.

Item

Purpose of the role: run a secure, resilient, cost-efficient Microsoft cloud environment that meets ISO 27001 and RBI expectations and turn security policy into working controls.

Key responsibilities

Microsoft 365

- Own the M365 tenant: Exchange Online, SharePoint, OneDrive and Teams, including governance, lifecycle and retention.
- Run Entra ID identity: user lifecycle, groups, Conditional Access, MFA, PIM and access reviews.
- Manage devices with Intune: enrolment, compliance policies, configuration profiles, app protection and patching.
- Build and govern Power Automate flows to automate IT and business processes, including connector policies, DLP for the Power Platform and setting management.
- Manage external collaboration, guest access and tenant-to-tenant integration for acquisitions.
- Own Microsoft licensing: strong knowledge of M365 E3/E5, Business Premium, Entra ID P1/P2, add-ons and Azure consumption models; plan renewals, true-ups and right-sizing so spend matches actual use.

Azure infrastructure

- Design and operate the Azure estate on a Landing Zone model: management groups, subscriptions, policy and RBAC.
- Run compute, networking, storage and PaaS services (VNets, NSGs, Application Gateway/WAF, App Service, AKS, Azure SQL, Key Vault).
- Deliver infrastructure as code (Bicep or Terraform)



and CI/CD pipelines using Azure DevOps (Repos, Pipelines, Boards), with peer-reviewed changes.
- Own backup, disaster recovery and business continuity, including tested RTO/RPO and regular DR drills.
- Monitor with Azure Monitor, Log Analytics and KQL; own alerting, capacity and performance.
- Run FinOps: cost visibility, tagging, reservations and right-sizing.

Infrastructure security

- Run Microsoft Defender XDR (Endpoint, Office 365, Identity, Cloud Apps) and Defender for Cloud.
- Operate Microsoft Sentinel with the SOC: data connectors, analytics rules, playbooks and incident response.
- Enforce Zero Trust: least privilege, just-in-time admin access, secure baselines (CIS, Microsoft Secure Score).
- Manage SSE/SWG/CASB controls (e.g. Netskope) and email security.
- Run vulnerability management, patching SLAs, and remediation from VAPT findings.
- Build security gates into infrastructure change, in line with the SSDLC.

Governance, risk and compliance

- Own infrastructure controls for ISO 27001 (ISMS) and support certification and surveillance audits.
- Meet RBI requirements for IT governance, cyber security and outsourcing as they apply to lending.
- Maintain policies, standards, runbooks,



asset register and the risk register for infrastructure.
- Produce audit evidence, KPIs and monthly reports for the Head of ICT and the board.

Operations and leadership

- Lead, hire and develop the infrastructure team; set on-call and escalation.
- Run ITIL processes: incident, problem, change and service request, with SLAs.
- Manage vendors, Microsoft partners and MSPs, including contracts and performance.
- Plan the roadmap and budget for infrastructure and security tooling.

Qualifications and skills

Must have

- Bachelors degree in computer science, IT or Engineering, or equivalent experience.
- 10+ years in IT infrastructure, with 5+ years hands-on in Azure and Microsoft 365 at enterprise scale.
- 4+ years leading engineers, including hiring, performance management and on-call.
- Deep Entra ID knowledge: Conditional Access, PIM, hybrid identity, app registrations and SSO.
- Hands-on Intune, Defender XDR, Defender for Cloud and Purview.
- Azure networking and security: hub-spoke, private endpoints, firewalls, WAF, Key Vault.
- Infrastructure as code (Bicep or Terraform), CI/CD with Azure DevOps, and scripting in PowerShell (incl. Microsoft Graph) and KQL.
- Working experience of ISO 27001 controls and audits.

Good to have

- Experience in BFSI, NBFC or fintech, with exposure to RBI cyber security and IT governance directions.
- Microsoft Sentinel engineering and SOC collaboration.
- SSE/CASB tools such as Netskope or Zscaler.
- M&A; tenant integration or migration (e.g. Slack to Teams, cross-tenant).
- Exposure to SOC 2, PCI DSS or the DPDP Act, 2023.

📌 Infrastructure Manager (Mumbai)
🏢 Mypulse.io
📍 Mumbai