About Manastu Manastu Space is a Space Safety and Logistics company focused on making space safe, sustainable, and accessible. We develop technologies to address critical challenges such as space debris mitigation and green propulsion, enabling safer satellite operations, and long-term sustainability of the space ecosystem. Our work sits at the intersection of advanced engineering, applied research, and mission-critical systems, requiring deep technical capability and long-term thinking. Website: https://www.manastuspace.com LinkedIn: https://www.linkedin.com/company/manastu-space/ Email: [email protected] Role Objective Own Manastu Space’s IT end to end: infrastructure, cloud, compute, devices, security and data protection. Design and run our infrastructure in-house, manage every device centrally, build our IT security practice from the ground up, and give our software, simulation and AI teams the compute and tools they need. Be accountable for all IT procurement and cost, and establish SOPs for all IT operations. Role Overview This is the senior, hands-on owner of IT at a fast-growing deep-tech company. You will design our network, systems and cloud, run them yourself, and build and lead the IT team as we grow. You will work closely with our software, simulation, AI and engineering teams to map what they need (compute, GPU/CPU clusters, storage, software, licences and security) and deliver it within budget. You will also own the IT budget, every licence and every vendor relationship, and establish the SOPs that let IT run consistently.

Key Responsibilities
• Infrastructure and systems design: Design the end-to-end IT architecture and turn company-wide requirements into an approved roadmap and budget.
• Network and infrastructure: Own firewalls, Wi-Fi, switching and secure remote access (ZTNA), and fix network issues such as Wi-Fi reliability, speed and ISP redundancy.
• Identity, devices and security: Manage identity, MFA and every laptop centrally, and enforce security policies, access reviews and regular audits.
• Data protection: Protect engineering, customer and export-controlled data through data classification, access control and DLP.
• Audit and compliance: Keep audit-ready records, asset and vendor registers, and manage vendors to meet customer, government and defence requirements.
• Security operations: Run security logging and alerting, incident response, lost-device handling, IT ticketing and tested backup and disaster recovery.
• Compute and AI infrastructure: Set up and run GPU/CPU clusters (hardware, Linux, drivers, scheduling, storage)



and plan on-premise vs cloud capacity.
• Cloud and servers: Own the Microsoft, Google and AWS environments, servers, backups and monitoring, and lead cloud vs on-premise decisions.
• Procurement, assets and cost: Own the IT budget, purchasing, licences and renewals, comparing vendor quotations before major spend.
• Team and collaboration: Build and lead the IT team, establish SOPs for all of IT, and advise leadership on hosting and the IT roadmap. Experience & Background
• 8+ years in IT infrastructure, with at least 3 years in a lead or senior owner role.
• Proven track record of building an IT function from the ground up: infrastructure, security, operations and administration, with minimal support and a lean team, taking it from ad hoc to documented, secure and scalable.
• Has designed IT infrastructure end to end (network, systems, cloud and security) and led its implementation.
• Has moved a device fleet to central management (MDM), rolled out MFA, and written and enforced security policies.
• Has set up or run compute clusters: hardware, Linux, job scheduling and shared storage.
• Has structured and hired an IT team.
• Has owned an IT budget, managed licences and vendors, compared vendor quotations, and can show savings with numbers.
• Has written SOPs and runbooks that others follow, and kept them current. Core skills (required)
• Infrastructure architecture and design: designing networks and systems end to end, including topology and segmentation, high availability and redundancy, capacity planning and sizing, cloud vs on-premise trade-offs, security by design, and explicit architecture diagrams and documentation.
• Networking fundamentals: TCP/IP, DNS, DHCP, VLANs, routing and inter-VLAN routing, NAT, QoS, ISP redundancy and failover.
• Firewalls and remote access: enterprise firewall administration (HA, policies, VPN, DNS and web filtering); ZTNA / secure remote access with device-posture checks.
• Wireless and switching: Aruba (or equivalent) controllers and access points, RF planning and tuning; Cisco (or equivalent) switching, stacking and VLANs.
• Identity and access: Active Directory and Group Policy; Entra ID, Okta or Google Workspace (SSO, SCIM,



conditional access); MFA and passkeys; joiner-mover-leaver automation; access reviews.
• Endpoint management and security: MDM across Windows, Mac and Linux (e.g. Intune, Jamf); EDR; disk encryption with key escrow; privilege management; remote wipe.
• Data protection: DLP across endpoints, email and SaaS; data classification and handling; access control for sensitive and export-controlled data.
• Cloud and productivity platforms: Microsoft 365 and Google Workspace administration and licensing; Azure, AWS or Google Cloud (compute, storage, networking, identity, cost control); cloud and SaaS tenant security.
• Servers and virtualization: Windows Server and Linux administration; VMware, Hyper-V or Proxmox; HPE iLO and RAID; server health, patching and warranty.
• Backup and recovery: backup design, tested restores, BCP/DR planning with annual test evidence.
• Compute infrastructure: cluster server hardware (power, cooling, racks, cluster networking); Linux; job scheduling (e.g. SLURM), shared storage, user access and monitoring.
• Security operations: security policies and audits, security logging and alerting, vulnerability and patch management, incident response.
• Monitoring and service management: network and server monitoring (e.g. PRTG, Zabbix), ITSM ticketing, uptime and support SLAs.
• Scripting and automation: PowerShell, Bash/shell and Python; version control with Git.
• Procurement and vendor management: IT budgeting, vendor quotations, purchasing, licence management and renewals, vendor contracts, asset and vendor registers, total cost tracking.
• Documentation: SOPs, runbooks and network documentation (e.g. NetBox) that others can follow. Good to have:
• Full SASE / secure web gateway: cloud-delivered web security and shadow-IT discovery.
• SIEM and forensics: full SIEM platform operations and incident forensics.
• Compliance: ISO 27001 / SOC 2 controls and evidence operations.
• Infrastructure-as-code: Terraform or similar.
• GPU computing: GPU servers, GPU drivers and CUDA, and supporting GPU workloads for simulation and AI teams.
• Certifications (good to have, any of): firewall vendor certification (e.g. Fortinet, Palo Alto, Check Point), HPE Aruba Networking, Cisco CCNA/CCNP, Microsoft Endpoint Administrator (MD-102), Identity and Access Administrator (SC-300) or Azure Administrator (AZ-104), or AWS/GCP equivalents, CompTIA Security+ or CISSP, ISO 27001 Lead Implementer/Auditor, ITIL 4. Equivalent hands-on experience counts equally.

📌 Information Technology Lead (Navi Mumbai)
🏢 Manastu Space
📍 Navi Mumbai