IT Infrastructure and Information Security Manager

IT Infrastructure and Information Security Manager

Experienced IT Infrastructure and Information Security professional responsible for managing enterprise infrastructure, Microsoft 365, Endpoint Security, cloud platforms, networking, storage, backup, disaster recovery, audit readiness, and IT operations. Capable of independently managing business-critical IT environments across on-premises, cloud, and hybrid infrastructures while ensuring security, availability, scalability, redundancy, and operational excellence.

Key Responsibilities

• Manage Enterprise IT Infrastructure including Windows Server 2012/2016/2019/2022, Active Directory, Forest & Domain Management, DNS, DHCP, DFS, Group Policy, WSUS, PKI, IAS/NPS, File & Print Services, and Wintel environments.

• Administer Microsoft 365 ecosystem including Exchange Online, Intune, Entra ID, Defender, Purview, Teams, SharePoint Online, OneDrive, and Windows Autopilot.

• Manage User Administration, Access Management, License Management, RBAC, MFA, Conditional Access, SSO, and Identity Governance.

• Manage Endpoint Security, Endpoint Compliance, Device Control, Application Control, BitLocker Encryption, Endpoint Detection & Response (EDR), Extended Detection & Response (XDR), Antivirus, Threat Protection, Attack Surface Reduction (ASR), Vulnerability Management, Endpoint Hardening, and Security Baselines.

• Administer and secure Windows, macOS, Android, and iOS devices using Microsoft Intune, JAMF Pro, Apple Business Manager, MDM/MAM, and Endpoint Compliance Policies.

• Perform Server Administration, OS Management, Patch Management, Server Migrations, Cloning, Capacity Planning, Health Checks, and Lifecycle Management.

• Implement and manage Cyber Security solutions including Microsoft Defender for Endpoint, Sophos Endpoint Security, McAfee ePO, Endpoint Protection Platforms, Email Security Gateways, DLP Solutions, Security Hardening, Vulnerability Management, and VAPT Remediation.

• Design, implement, and support Enterprise Network Infrastructure including LAN, WAN, WLAN, MPLS, SD-WAN, Routing, Switching, TCP/IP, VLANs, NAT, Wireless Networks, and Network Segmentation.

• Configure and manage Layer 2 & Layer 3 Networking including STP, RSTP, VTP, EtherChannel, Inter-VLAN Routing, Routing Protocols, High Availability, and Redundancy Solutions.

• Configure and manage Routers, Switches, Access Points, Firewalls, and Network Security Appliances.

• Administer Sophos Firewalls, Security Policies, SSL VPN, IPSec VPN, Site-to-Site VPN, IPS, IDS, NAT Rules, Application Control, and Web Filtering.

• Manage Azure, AWS, and GCP cloud environments including compute, networking, storage, identity, governance, and cloud security controls.

• Administer NAS, SAN, RAID, Storage Replication, Cloud Storage, and Capacity Planning.

• Manage Full, Incremental, Differential, Image-Level, VM-Level, and Cloud Backups along with Disaster Recovery (DR) and Business Continuity Planning (BCP).

• Manage VMware and Hyper-V virtualization platforms including VM provisioning, migrations, cloning, snapshots, HA clusters, and resource optimization.

• Configure and support FTP, SFTP, FTPS, SSL Certificates, SPF, DKIM, and DMARC.

• Monitor enterprise infrastructure using PRTG, ManageEngine OpManager, Action1, Altris Patch Management, McAfee ePO, Azure Monitor, and Security Monitoring Platforms.

• Perform Preventive Maintenance, Root Cause Analysis (RCA), Patch Compliance, Firmware Upgrades, Security Updates, and Operational Improvements.

• Ensure Infrastructure Redundancy, High Availability, Failover Mechanisms, Business Continuity, and Operational Resilience.

• Support Internal Audits, External Audits, Security Assessments, Audit Readiness Activities, Documentation, SOPs, Risk Assessments, and Remediation Plans.

• Manage Vendors, OEMs, ISPs, Licensing, Renewals, Procurement Coordination, Budget Planning, Cost Optimization, SLA Governance, and Technology Evaluations.

• Technical Skills

• Infrastructure & Systems: Windows Server, Wintel, Active Directory, Forest & Domain Management, DNS, DHCP, DFS, WSUS, PKI, IAS/NPS, File & Print Services

• Microsoft Technologies: Microsoft 365, Exchange Online, Intune, Entra ID, Defender Suite, Purview, SharePoint Online, Teams, OneDrive, Autopilot, PowerShell

• Endpoint Security: Microsoft Defender for Endpoint, EDR, XDR, Endpoint Compliance, Device Control, ASR Rules, BitLocker, Endpoint Hardening, Application Control, Vulnerability Management, Sophos Endpoint Security, McAfee ePO

• Networking: TCP/IP, Routing & Switching, VLANs, VTP, STP, RSTP, EtherChannel, MPLS, SD-WAN, NAT, Wireless Networks, Routing Protocols

• Firewall & VPN: Sophos Firewall, SSL VPN, IPSec VPN, Site-to-Site VPN, IPS, IDS, Web Filtering, Application Control

• Cloud: Microsoft Azure, AWS, GCP

• Storage & Backup: NAS, SAN, RAID, Backup & Recovery, DR, BCP

• Virtualization: VMware vSphere, Microsoft Hyper-V

• Monitoring & Patch Management: PRTG, ManageEngine Op Manager, Action1, Altris, McAfee ePO, Azure Monitor

• Security & Compliance: DLP, Email Security Gateway, VAPT, Security Hardening, Vulnerability Assessment, Risk Management, Audit Support

• Must-have skills

• Active DirectoryMicrosoft 365firewall

• Good-to-have skills

• Server ConfigurationPatch ManagementNetwork Security