Optimo Capital

About the role

We’re hiring an IT Systems Administrator for an NBFC to secure endpoints, SaaS, and networks across ~50 branches, ~250+ field staff, and ~50+ office users.

This is primarily an IT Admin + Security role, with secondary exposure to AWS cloud ops + light DevOps + basic DB access management.

If you’re an IT Admin aiming to break into AWS Cloud Ops + DevOps, this role is a strong next step — you’ll own core IT/security and get hands-on exposure to cloud operations and deployments.

Key responsibilities (Primary: IT Admin + Security)

• Manage endpoint security for laptops and mobiles (policies, patching, encryption, antivirus/EDR); drive MDM implementation now/future (e.g., Intune/Jamf).
• Administer Google Workspace (Gmail/Drive/Calendar): users, groups, permissions, SSO, MFA, sharing controls.
• Own joiner–mover–leaver lifecycle: provisioning/deprovisioning, access controls, periodic access reviews.
• Secure branch connectivity: VPN, internal Wi-Fi, internet usage controls; coordinate troubleshooting and standardization across branches.
• Manage HO security stack: firewall operations, rule changes with change control, monitoring/log review (basic but consistent).
• Secure SaaS tools (CRM/HRMS/comms like Slack/Zoom): role-based access, MFA enforcement, offboarding, integration/OAuth controls.
• Maintain IT asset inventory: procurement coordination, issuance/return, audits, warranty/AMC, license renewals; remote lock/wipe for lost devices.
• Handle security incidents: phishing, account compromise, device loss/theft — contain, investigate, recover, and prevent recurrence.
• Run backups and basic DR testing; maintain SOPs/documentation and train staff on cyber hygiene.
• Provide hands-on user support: laptop builds, software installs, Outlook/Excel issues, VPN/Wi-Fi troubleshooting, escalations and vendor coordination.

Secondary responsibilities (AWS + DevOps + DB ops support)

• Support AWS administration: IAM users/roles/policies, MFA, access key hygiene, basic log review (e.g., CloudTrail).
• Manage AWS access controls: security groups/firewall rules, IP allowlists/whitelisting (admin tools, databases, vendor access).
• Assist engineering with DevOps operations:
• CI/CD support (deployment coordination, rollbacks, environment configuration)
• Secrets/credentials management and rotation (no shared creds)
• DNS + SSL/TLS certificates, basic monitoring/alerting coordination
• Bonus: Docker/Kubernetes and Terraform exposure
• Basic database operations (admin-lite):
• DB user creation, roles/permissions, least-privilege access
• IP allowlisting/whitelisting for DB access via VPN/approved sources
• Backup/restore verification coordination and basic monitoring signals (connections/storage)

Requirements

• 3+ years in IT security / systems administration (BFSI or branch-heavy org preferred).
• Hands-on with Google Workspace or Microsoft 365 administration.
• Must have hands-on experience leading or executing an email suite migration (e.g., Google Workspace ↔ Microsoft 365), including mailbox migration, DNS cutover, MX/SPF/DKIM/DMARC reconfiguration, and user transition management.
• Strong endpoint/security fundamentals: encryption, patching, AV/EDR, remote support, device compliance.
• Comfortable with networks: VPN/Wi-Fi/LAN troubleshooting; firewall basics and change discipline.
• Strong operational discipline: asset tracking, vendor management, documentation, ticketing, user communication.
• Practical AWS familiarity (IAM, access controls, logging) and ability to support DevOps workflows.

Nice to have

• Experience implementing MDM at scale (Intune/Jamf/SureMDM).
• Exposure to SOC2 / ISO27001 evidence, controls, and audit workflows.
• Scripting for automation (PowerShell/Bash/Python).
• Familiarity with managed databases and secure access patterns.

Optimo Capital is an RBI-registered NBFC focused on secured MSME lending, primarily through Loan Against Property (LAP). We serve small businesses that are underserved by traditional banks, and we do it with a lean, technology-first operating model.

What makes us different is how close our product function sits to the actual business. We don't build software in a vacuum — we build tools directly out of the operational problems our credit, sales, collections, and ops teams run into every day. Our stack spans the full lending lifecycle: loan origination and servicing (LOS/LMS), a telecalling CRM, a communications orchestration platform, document management, bureau and data pipelines, and integrations with co-lending and channel partners.

If you like the idea of shipping products that a real team uses the next morning, this is the environment for it.

The Role

We're looking for an Associate Product Manager to help us build and improve the internal and partner-facing products that power our lending operations. You'll own features and workflows end to end — from understanding the problem, to writing the spec, to coordinating the build, to rolling it out and measuring whether it actually worked.

This is a hands-on, high-ownership role suited to someone early in their product career who wants to learn the craft by doing, inside a business where the feedback loop is short and the impact is visible.

What You'll Do

• Sit with the people who use our tools — telecallers, credit officers, ops, collections, sales — and turn their pain points into clear, well-scoped product requirements.
• Write crisp PRDs, user stories, and workflow specs that engineering and vendor partners can build from without guesswork.
• Coordinate delivery across in-house engineering and external technology vendors (e.g., our LOS/LMS provider), keeping timelines, dependencies, and priorities in order.
• Own UAT and rollout: test what gets built, catch the gaps before users do, write the documentation, and make sure adoption actually happens.
• Use data to inform and defend decisions — pull from dashboards and databases, look at funnel and operational metrics, and measure the impact of what you ship.
• Support integrations with co-lending partners and sourcing channels (DSAs) as our partnership footprint grows.
• Keep a pulse on the regulatory and operational context of lending so the products you build are compliant and practical, not just clever.

What We're Looking For

• 1–3 years of experience in product, business/data analytics, operations, consulting, or an early-stage/founder background — or a strong track record of building things.
• Structured thinking and clear writing. You can break an ambiguous problem into parts and explain your reasoning simply.
• Comfort with data. You're not intimidated by spreadsheets or a database, and you'd rather check a number than guess.
• Genuine curiosity about how lending, fintech, and financial services work.
• High agency. You chase down answers, follow through without being managed, and care about the outcome, not just the ticket.
• Strong communication and the ability to work across teams that don't naturally speak the same language (business, engineering, credit, compliance).

Nice to Have

• Exposure to fintech, NBFCs, banking, or lending operations.
• Working knowledge of SQL, or comfort with no-code/low-code tools (Retool, Airtable, and the like).
• Some ability to build — a bit of coding, scripting, or prototyping goes a long way here.
• Familiarity with the Indian lending stack (LOS/LMS, CRM, WhatsApp Business API, bureau data).

Why Join

• Real ownership from day one — you'll ship products, not slides.
• A short path from idea to impact, with users you can actually talk to.
• Deep exposure to how a modern NBFC works across credit, operations, technology, and partnerships.
• The chance to learn product management the way it's meant to be learned: close to the operator, close to the problem.

How to Apply

Send your CV and a short note on something you've built or shipped — a product, a tool, a process, anything — to [insert application email / link].