Hiring || Senior Network & Infrastructure Engineer
2coms
- Location
- Onsite (Pune, Maharashtra)
- Employment
- Contract
- Level
- Senior Level
Posted 2 weeks ago
About the role
2COMS Consulting is seeking a Senior Network & Infrastructure Engineer to independently manage the end-to-end IT infrastructure, including network architecture, cloud environments, and Microsoft 365 ecosystems. This role ensures high availability, security, and operational efficiency within a mid-sized engineering services firm.
Skills
FortiGate
AWS
Microsoft 365
Cloudflare
PowerShell
Python
Active Directory
Endpoint Security
Network Architecture
DNS Management
Infrastructure Management
Vendor Management
Incident Response
Windows Server
SQL Server
Automation
Full job details
Senior Network & Infrastructure Engineer
Summary
We are seeking a versatile and proactive Network Engineer to serve as the sole owner of our organization's comprehensive IT infrastructure. This pivotal role encompasses the end-to-end management of our network architecture, firewall security, cloud environment, Microsoft 365 ecosystem, web hosting, endpoint protection, and daily IT operations. Ideal for a professional with a broad skill set rather than a narrow specialization, the successful candidate will demonstrate the ability to independently build, secure, and optimize complex environments. The role demands a self-starter who can automate routine tasks, resolve issues efficiently, and ensure high availability with minimal oversight within a mid-sized engineering services firm.
Experience: 5-10 years
Location: Pune
Responsibilities
Core Infrastructure & Security Management
- Oversee FortiGate firewall configurations, VPN connectivity, internet access policies, and security rule sets.
- Liaise with Internet Service Providers, telecommunications firms, and external network vendors to ensure seamless connectivity.
- Administer the full AWS landscape, including EC2 instances, S3 storage, VPC networking, RDS/Aurora databases, and IAM Identity Center governance.
- Implement robust monitoring strategies for infrastructure health, automated backups, patch management, capacity planning, and disaster recovery protocols.
- Manage the Microsoft 365 suite, covering Exchange Online, Entra ID, Intune, Teams, and SharePoint, while overseeing user lifecycle management, license allocation, and access controls.
- Enforce endpoint security standards using Microsoft Defender and Trellix EDR/XDR, ensuring device compliance, Group Policy adherence, and Windows hardening.
- Handle the complete IT asset lifecycle, from onboarding and offboarding procedures to equipment management.
- Coordinate IT incident response, change management, service requests, and the maintenance of technical documentation.
- Manage vendor relationships, including contract negotiations, renewals, licensing, and support coordination.
Advanced Cloud & Web Operations
- Configure and maintain Cloudflare services, including DNS management, CDN optimization, SSL/TLS certificates, and Web Application Firewall (WAF) rules.
- Administer domain registration, DNS records, and SSL certificates across Cloudflare, AWS Route 53, and HostGator.
- Manage HostGator/cPanel hosting environments, including websites, email systems, FTP/SFTP access, and backup procedures.
- Configure Single Sign-On (SSO), OAuth flows, application registrations, and enterprise app integrations within Entra ID.
- Collaborate with development teams to support Teams integrations, adaptive cards, and approval workflows.
Compliance, Finance & Automation
- Maintain email security protocols, anti-phishing measures, Data Loss Prevention (DLP) strategies, and vulnerability remediation efforts.
- Assist in security assessments, system hardening, and adherence to regulatory compliance standards.
- Collaborate with Finance and Procurement departments to process purchase orders, invoices, vendor payments, and license renewals.
- Drive process improvement and automation initiatives using PowerShell, AWS Lambda, and basic Python scripting.
- Ensure accurate record-keeping for IT assets, network diagrams, and operational documentation.
Requirements
Technical Expertise
- Network & Security: Proficiency with FortiGate firewalls, VPNs, Cloudflare (DNS, CDN, WAF, SSL), DNS routing, and proxy configurations.
- Cloud Computing: Deep experience with AWS services including EC2, S3, VPC, RDS/Aurora, IAM, Route 53, Lambda, EventBridge, and SSM.
- Microsoft 365: Strong administration skills for Exchange Online, Entra ID (SSO/OAuth), Intune, Teams, SharePoint, and CSP licensing models.
- Endpoint Security: Expertise in Microsoft Defender, Trellix EDR/XDR, Group Policy, Windows hardening, and DLP implementation.
- Server & Hosting: Competence in managing Windows Server, Active Directory, IIS, SQL Server, MySQL, and HostGator/cPanel environments.
- Automation: Advanced PowerShell scripting capabilities, familiarity with AWS Lambda/EventBridge, and basic Python programming skills.
- Applications & Integration: Knowledge of REST APIs, SSO/OAuth protocols, Teams application development, and web application infrastructure.
- IT Operations: Experience in asset management, licensing administration, vendor management, and incident/change management frameworks.
Professional Attributes
- Demonstrated history of managing a full-spectrum IT environment in a live corporate setting, rather than isolated components.
- Exceptional troubleshooting abilities spanning network, DNS, SSL, cloud, and application layers.
- A security-first mindset with the ability to implement least-privilege principles and compliance controls effectively.
- Self-motivated professional capable of planning, documenting, and executing complex changes independently.
- Strong communication skills for interacting with vendors, finance teams, and non-technical stakeholders.
- Relevant certifications such as AWS Solutions Architect, AWS SysOps, Fortinet NSE, Microsoft MS-102, or AZ-104 are highly desirable.
Key Performance Objectives
- Ensure maximum uptime and high availability for network, cloud, hosting, and Microsoft 365 services.
- Maintain secure and compliant endpoints, servers, identities, and public-facing applications.
- Reduce the frequency of recurring incidents through proactive monitoring, automation, and thorough root-cause analysis.
- Optimize infrastructure and licensing expenditures through strategic cost management and timely renewals.