There’s a moment when a stubborn problem finally makes sense. You can point to what happened, show why it happened, and help everyone move forward. If that’s the part of the work you love, you’ll find plenty of it at Mercola.

You’ll get to build something new while making the things people already rely on easier to trust. Feel the pride of catching a problem early enough that it never interrupts someone’s day. Enjoy the freedom to follow a clue all the way to an answer you can stand behind.

You’ll set a new standard for how people build with emerging technology while protecting the information others entrust to them. You’ll give teammates the confidence to take on work they once had to hand back. And you’ll leave behind systems people can understand, care for, and improve long after your first fix.

Your next 5 minutes could land you in our top 5% shortlist — click Apply to start your application (a short, easy step to put you in the running) → [https://www.surveymonkey.com/r/MFCQJDJ]

JOB-DESCRIPTION

Title: Senior Infrastructure & Security Engineer

AI Platform, Senior Infrastructure and Security Engineering | Mercola

ROLE SNAPSHOT

- Location and schedule — Remote from India, full-time. India working hours with US overlap and a daily standup during that overlap. Occasional incidents may require work outside normal hours. There is no nightly on-call rota or datacenter travel.
- Purpose — Own the infrastructure and security posture behind Mercola’s products, from established application services to its new on-premises AI platform.
- Reports to — Director, Technology & Engineering Operations (India).

KEY RESPONSIBILITIES

- Build and operate the infrastructure behind on-premises NVIDIA DGX-class systems, including GPU drivers, firmware, scheduling, and networking. Own the database and storage tiers, authenticated gateways, and isolated training and evaluation environments that support the AI platform.
- Secure AI applications, agents, and Model Context Protocol integrations. Define access boundaries and approval requirements, validate them before release, and verify that non-production environments cannot reach regulated health data.
- Operate VMware across both vCenters, support the Proxmox migration, and maintain Windows and Linux hosts, SAN and NAS capacity, and storage path redundancy. Own Veeam coverage and verify restores through recovery tests.
- Own product infrastructure networking and security at the edge, including segmentation, routing, NAT,



firewall policy, VPNs, and administrative access. Use measurements to isolate faults across sites and providers.
- Manage identity and privileged access across two Active Directory domains and their trust, alongside Entra ID and Microsoft 365. Harden policies and track service-account ownership and access reviews.
- Manage patching, credential rotation, certificates, internet-facing exposure, and vulnerability remediation. Use vaults and federated workload identity to reduce reliance on long-lived pipeline secrets.
- Establish reliable logging, detection, and escalation. Verify coverage and confirm that alerts reach the right owner, including outside normal hours.
- Write tooling against live system and API data, maintain an accurate inventory, and create runbooks teammates can use. Use AI tools for diagnosis and engineering work, protect sensitive inputs, and independently verify outputs before acting on them.

MUST-HAVE QUALIFICATIONS

- Windows Server and Active Directory administration. You’ve built, hardened, and recovered environments involving domain controllers, DNS, Group Policy, delegation, and privileged or service accounts. You understand the operational impact of expired credentials and certificates.
- VMware administration, storage, and backup. You’ve administered vSphere and vCenter, worked with SAN or NAS storage and path redundancy, and personally performed and verified a restore using an enterprise backup product.
- Enterprise networking and firewall administration. You can work with subnetting, VLANs, routing, NAT, DNS, TLS, and HTTP. You’ve administered policy on Fortinet or an equivalent next-generation firewall and can isolate a path-specific fault with measurements.
- Tooling and code reading. You write tools in PowerShell, Python, or Bash against live system or API data. You can read application configuration and source code to understand their effects on infrastructure.
- Verification and change judgment. You start investigations with read-only checks, account for what you change, and distinguish direct measurements from reports, inferences, and unknowns.





Working Linux proficiency is also expected across systemd, SSH, packages, filesystems, and permissions. In either AWS or Azure, you should be able to inspect a resource, establish its state, and safely make a scoped change. Roughly five to eight years across infrastructure, systems, and security is indicative. Independent ownership matters more than years served.

PREFERRED QUALIFICATIONS

- GPU or AI infrastructure, including DGX-class or comparable systems, drivers and CUDA, GPU scheduling, model serving or fine-tuning, vector databases, federated pipeline identity, or PostgreSQL administration.
- Proxmox, KVM, or another hypervisor alongside VMware, or datacenter consolidation involving dependency mapping, move windows, and rollback planning.
- Entra ID, Microsoft 365, and Conditional Access administration, or experience with endpoint detection, log analysis, and vulnerability scanning.
- Infrastructure as code, configuration management, managed Kubernetes operations, hands-on SQL Server administration, or exposure to PCI DSS or HIPAA.
- Relevant infrastructure, networking, Fortinet, or security certifications are welcome.

WHAT WE OFFER

- A fully remote role in India, with site teams handling physical datacenter work.
- Ownership of an on-premises AI platform while its infrastructure and security controls are still being designed.
- Hands-on work across a VMware-to-Proxmox migration, established product services, and cloud-connected infrastructure.
- Collaboration with the IT infrastructure and security team, with clear ownership of the systems Mercola’s products depend on.

Honest Challenge

You’ll investigate older IIS and SQL Server services while building the AI platform. Documentation and monitoring coverage vary across the estate, so you’ll have to verify what’s running, where access exists, and which alerts reach an owner. In your first 90 days, you’ll map the estate and its privileged access, document monitoring gaps, verify a restore, take ownership of a system previously understood by one person, and prove that non-production AI environments cannot reach regulated data.

READY TO JUMP IN?

Click Apply to start the short application (about 5 minutes; embedded step) → [https://www.surveymonkey.com/r/MFCQJDJ]

Important: Completing the embedded application step is required to be considered.

Mercola welcomes applicants of every background, identity, and life experience.

📌 Senior Infrastructure & Security Engineer (India)
🏢 Mercola
📍 India