Connectandheal pvt ltd

Key Responsibilities:

1. Network Engineering & Team Leadership

• Architect & Maintain: Design, implement, and manage secure, scalable network architectures (LAN, WAN, VPN, and Google Workspace) supporting both corporate offices and widespread on-site clinic networks.
• Lead the Team: Mentor and manage a team of system/network engineers, setting clear milestones, managing internal ticketing escalations, and conducting performance reviews.
• Uptime & Redundancy: Ensure 99.9% uptime for critical health-tech delivery systems by monitoring network traffic, troubleshooting bottlenecks, and implementing failover mechanisms.

2. Data Privacy, Cyber Security & Compliance Safeguards:

• Privacy & Zero-Trust Infrastructure: Implement strict access control mechanisms, data encryption standards (at rest and in transit), and zero-trust network frameworks to protect sensitive personal health information (SPI/PHI).
• End-to-End Security Architecture: Oversee the deployment and maintenance of enterprise-grade Antivirus/EDR solutions, End-to-End Firewalls, and comprehensive Cybersecurity frameworks to defend against external and internal threats.
• Access Control & Governance: Define, implement, and enforce robust Access Control policies—including Least Privilege and Role-Based Access Control (RBAC)—across all corporate, clinical, and Google Workspace environments.
• Access Reviews & Audits: Establish and oversee routine, formalized Access Review processes, ensuring user permissions, administrative privileges, and third-party access are regularly audited and validated.
• Regulatory Alignment & Audit Readiness: Align IT, network policies, and access governance protocols with Indian data protection laws (DPDP Act) and global healthcare standards (HIPAA principles). Conduct routine vulnerability assessments and maintain clean compliance logs.

3. Data Data Understanding & Visualization:

• Infrastructure Analytics: Look beyond raw logs. Analyze data flow patterns, bandwidth utilization, and system performance logs to deeply understand network health.
• Executive Dashboards: Transform complex IT operational data, compliance metrics, and access audit logs into intuitive, actionable visual dashboards using tools like Tableau, Power BI, or AWS QuickSight.
• Data-Driven Decisions: Present clear data trends to the executive leadership team regarding resource utilization, forecasting future capacity needs, and justifying infrastructure spend.

Job Description

Department: Information Technology

Location: Bangalore (with travel to other locations as required)

Reporting To: Head – Information Technology / CISO

Experience: 7–8 Years

Employment Type: Full-time

About Connect & Heal

Connect & Heal (CNH) is one of India's leading integrated healthcare organizations, delivering technology-enabled healthcare solutions across primary care, home healthcare, diagnostics, wellness, emergency response, and enterprise healthcare services. We are committed to building secure, scalable, and resilient digital infrastructure to support our rapidly growing healthcare ecosystem.

Position Summary

The IT Security & Network Administrator is responsible for ensuring the confidentiality, integrity, and availability of Connect & Heal's IT infrastructure. The role will manage enterprise network operations, cybersecurity controls, cloud and endpoint security, identity and access management, vulnerability management, and regulatory compliance.

The incumbent will play a key role in strengthening the organization's cyber resilience while supporting business continuity, healthcare operations, and information security initiatives aligned with ISO 27001, ISO 27701, and applicable healthcare data privacy regulations.

Key Responsibilities

Information Security

• Implement and administer enterprise information security controls across all business locations.
• Manage endpoint security, antivirus, EDR/XDR, email security, and Data Loss Prevention (DLP) solutions.
• Monitor and respond to security incidents, alerts, and vulnerabilities.
• Conduct vulnerability assessments, penetration testing coordination, and remediation tracking.
• Support cybersecurity awareness and phishing simulation programs.
• Maintain identity and access management (IAM), including MFA, privileged access, and user lifecycle management.
• Monitor security logs and coordinate incident response with internal and external stakeholders.
• Ensure secure configuration baselines for servers, endpoints, and network devices.

Network Administration

• Administer enterprise LAN, WAN, SD-WAN, VPN, Wi-Fi, firewalls, switches, routers, and internet connectivity.
• Configure and maintain Cisco, Fortinet, Sophos, Palo Alto, or equivalent network security appliances.
• Monitor network performance and proactively resolve connectivity issues.
• Manage network segmentation and secure remote access.
• Maintain network documentation, IP addressing, topology, and disaster recovery configurations.
• Support cloud networking for Azure and AWS environments.

Cloud & Infrastructure Security

• Secure Microsoft 365, Azure AD (Microsoft Entra ID), Exchange Online, and SharePoint environments.
• Implement Conditional Access Policies and Zero Trust principles.
• Support cloud backup and disaster recovery strategies.
• Monitor cloud security posture using Microsoft Defender and related security tools.

Compliance & Governance

• Support ISO 27001, ISO 27701, ISMS, and Privacy Information Management System (PIMS) implementation and audits.
• Ensure compliance with the Digital Personal Data Protection Act, 2023, and healthcare-specific data protection requirements.
• Maintain security documentation, policies, risk registers, and audit evidence.
• Participate in internal and external security audits.

Business Continuity

• Maintain backup schedules and disaster recovery plans.
• Participate in DR drills and business continuity exercises.
• Ensure high availability of critical business systems.

Vendor & Asset Management

• Coordinate with OEMs, ISPs, cloud providers, and security vendors.
• Manage IT security renewals, certificates, licenses, and warranties.
• Maintain inventory of network and security assets.

Monitoring & Reporting

• Generate monthly dashboards on:
• Security incidents
• Vulnerability status
• Endpoint compliance
• Patch compliance
• Firewall health
• Network uptime
• SLA performance
• Present periodic security posture reports to IT leadership.

Technical Skills

Networking

• TCP/IP
• DNS
• DHCP
• VLAN
• VPN
• Routing & Switching
• SD-WAN
• Wi-Fi Administration
• Firewall Management

Security

• Endpoint Detection & Response (EDR/XDR)
• SIEM Monitoring
• Identity & Access Management (IAM)
• MFA
• DLP
• Email Security
• Vulnerability Management
• Patch Management
• Zero Trust Security
• Incident Response

Cloud

• Microsoft Azure
• Microsoft 365 Administration
• Azure AD (Microsoft Entra ID)
• AWS (preferred)

Operating Systems

• Windows Server
• Linux (preferred)
• Active Directory
• Group Policy

Tools

• Microsoft Defender
• Fortinet
• Sophos
• Palo Alto
• Cisco Meraki
• CrowdStrike
• SentinelOne
• Nessus
• Qualys
• SolarWinds
• ManageEngine

Preferred Certifications

• CEH (Certified Ethical Hacker)
• CompTIA Security+
• Cisco CCNA / CCNP
• Microsoft Certified: Azure Administrator Associate
• Microsoft Certified: Security Administrator Associate
• Fortinet NSE
• ISO 27001 Lead Implementer / Internal Auditor
• Certified Information Systems Security Professional (CISSP) (preferred)

Qualifications

• Bachelor's degree in Computer Science, Information Technology, or a related field.
• 7–8 years of experience in IT infrastructure, network administration, and information security.
• Experience supporting multi-location enterprise environments.
• Experience in healthcare, HealthTech, SaaS, or regulated industries is preferred.

Key Competencies

Functional

• Network Administration
• Cybersecurity Operations
• Cloud Security
• Infrastructure Management
• IT Compliance
• Risk Assessment
• Incident Response
• Business Continuity

Behavioral

• Analytical thinking
• Attention to detail
• Problem-solving
• Ownership and accountability
• Collaboration
• Customer orientation
• Communication skills
• Continuous learning

Key Performance Indicators (KPIs)

KPITargetNetwork Availability≥ 99.9%Critical Security IncidentsZero unresolved incidentsPatch Compliance≥ 98%Endpoint Security Compliance100%Vulnerability Remediation (Critical)Within 15 daysMFA Adoption100%Backup Success Rate≥ 99%Audit Compliance Score≥ 95%DR Drill Success100%

Success Measures (First 12 Months)

• Achieve 99.9% infrastructure uptime across all locations.
• Strengthen enterprise cybersecurity posture and reduce high-risk vulnerabilities.
• Ensure successful completion of internal and external security audits.
• Improve endpoint compliance and identity security across the organization.
• Implement proactive monitoring and reporting dashboards.
• Enhance cyber awareness and security best practices among employees.

Why Join Connect & Heal?

• Be part of one of India's fastest-growing integrated healthcare organizations.
• Work on enterprise-scale cybersecurity and digital transformation initiatives.
• Contribute to building a secure, technology-enabled healthcare ecosystem.
• Collaborate with cross-functional teams in a mission-driven environment focused on innovation, resilience, and patient trust.