Associate Principal Technical Architect

Job Description

Department: Information Technology

Location: Bangalore (with travel to other locations as required)

Reporting To: Head – Information Technology / CISO

Experience: 7–8 Years

Employment Type: Full-time

About Connect & Heal

Connect & Heal (CNH) is one of India's leading integrated healthcare organizations, delivering technology-enabled healthcare solutions across primary care, home healthcare, diagnostics, wellness, emergency response, and enterprise healthcare services. We are committed to building secure, scalable, and resilient digital infrastructure to support our rapidly growing healthcare ecosystem.

Position Summary

The IT Security & Network Administrator is responsible for ensuring the confidentiality, integrity, and availability of Connect & Heal's IT infrastructure. The role will manage enterprise network operations, cybersecurity controls, cloud and endpoint security, identity and access management, vulnerability management, and regulatory compliance.

The incumbent will play a key role in strengthening the organization's cyber resilience while supporting business continuity, healthcare operations, and information security initiatives aligned with ISO 27001, ISO 27701, and applicable healthcare data privacy regulations.

Key Responsibilities

Information Security

• Implement and administer enterprise information security controls across all business locations.
• Manage endpoint security, antivirus, EDR/XDR, email security, and Data Loss Prevention (DLP) solutions.
• Monitor and respond to security incidents, alerts, and vulnerabilities.
• Conduct vulnerability assessments, penetration testing coordination, and remediation tracking.
• Support cybersecurity awareness and phishing simulation programs.
• Maintain identity and access management (IAM), including MFA, privileged access, and user lifecycle management.
• Monitor security logs and coordinate incident response with internal and external stakeholders.
• Ensure secure configuration baselines for servers, endpoints, and network devices.

Network Administration

• Administer enterprise LAN, WAN, SD-WAN, VPN, Wi-Fi, firewalls, switches, routers, and internet connectivity.
• Configure and maintain Cisco, Fortinet, Sophos, Palo Alto, or equivalent network security appliances.
• Monitor network performance and proactively resolve connectivity issues.
• Manage network segmentation and secure remote access.
• Maintain network documentation, IP addressing, topology, and disaster recovery configurations.
• Support cloud networking for Azure and AWS environments.

Cloud & Infrastructure Security

• Secure Microsoft 365, Azure AD (Microsoft Entra ID), Exchange Online, and SharePoint environments.
• Implement Conditional Access Policies and Zero Trust principles.
• Support cloud backup and disaster recovery strategies.
• Monitor cloud security posture using Microsoft Defender and related security tools.

Compliance & Governance

• Support ISO 27001, ISO 27701, ISMS, and Privacy Information Management System (PIMS) implementation and audits.
• Ensure compliance with the Digital Personal Data Protection Act, 2023, and healthcare-specific data protection requirements.
• Maintain security documentation, policies, risk registers, and audit evidence.
• Participate in internal and external security audits.

Business Continuity

• Maintain backup schedules and disaster recovery plans.
• Participate in DR drills and business continuity exercises.
• Ensure high availability of critical business systems.

Vendor & Asset Management

• Coordinate with OEMs, ISPs, cloud providers, and security vendors.
• Manage IT security renewals, certificates, licenses, and warranties.
• Maintain inventory of network and security assets.

Monitoring & Reporting

• Generate monthly dashboards on:
• Security incidents
• Vulnerability status
• Endpoint compliance
• Patch compliance
• Firewall health
• Network uptime
• SLA performance
• Present periodic security posture reports to IT leadership.

Technical Skills

Networking

• TCP/IP
• DNS
• DHCP
• VLAN
• VPN
• Routing & Switching
• SD-WAN
• Wi-Fi Administration
• Firewall Management

Security

• Endpoint Detection & Response (EDR/XDR)
• SIEM Monitoring
• Identity & Access Management (IAM)
• MFA
• DLP
• Email Security
• Vulnerability Management
• Patch Management
• Zero Trust Security
• Incident Response

Cloud

• Microsoft Azure
• Microsoft 365 Administration
• Azure AD (Microsoft Entra ID)
• AWS (preferred)

Operating Systems

• Windows Server
• Linux (preferred)
• Active Directory
• Group Policy

Tools

• Microsoft Defender
• Fortinet
• Sophos
• Palo Alto
• Cisco Meraki
• CrowdStrike
• SentinelOne
• Nessus
• Qualys
• SolarWinds
• ManageEngine

Preferred Certifications

• CEH (Certified Ethical Hacker)
• CompTIA Security+
• Cisco CCNA / CCNP
• Microsoft Certified: Azure Administrator Associate
• Microsoft Certified: Security Administrator Associate
• Fortinet NSE
• ISO 27001 Lead Implementer / Internal Auditor
• Certified Information Systems Security Professional (CISSP) (preferred)

Qualifications

• Bachelor's degree in Computer Science, Information Technology, or a related field.
• 7–8 years of experience in IT infrastructure, network administration, and information security.
• Experience supporting multi-location enterprise environments.
• Experience in healthcare, HealthTech, SaaS, or regulated industries is preferred.

Key Competencies

Functional

• Network Administration
• Cybersecurity Operations
• Cloud Security
• Infrastructure Management
• IT Compliance
• Risk Assessment
• Incident Response
• Business Continuity

Behavioral

• Analytical thinking
• Attention to detail
• Problem-solving
• Ownership and accountability
• Collaboration
• Customer orientation
• Communication skills
• Continuous learning

Key Performance Indicators (KPIs)

KPITargetNetwork Availability≥ 99.9%Critical Security IncidentsZero unresolved incidentsPatch Compliance≥ 98%Endpoint Security Compliance100%Vulnerability Remediation (Critical)Within 15 daysMFA Adoption100%Backup Success Rate≥ 99%Audit Compliance Score≥ 95%DR Drill Success100%

Success Measures (First 12 Months)

• Achieve 99.9% infrastructure uptime across all locations.
• Strengthen enterprise cybersecurity posture and reduce high-risk vulnerabilities.
• Ensure successful completion of internal and external security audits.
• Improve endpoint compliance and identity security across the organization.
• Implement proactive monitoring and reporting dashboards.
• Enhance cyber awareness and security best practices among employees.

Why Join Connect & Heal?

• Be part of one of India's fastest-growing integrated healthcare organizations.
• Work on enterprise-scale cybersecurity and digital transformation initiatives.
• Contribute to building a secure, technology-enabled healthcare ecosystem.
• Collaborate with cross-functional teams in a mission-driven environment focused on innovation, resilience, and patient trust.

About the Role

We are looking for a highly accomplished Generalist Fullstack Engineer for an immediate long-term track opportunity.

This is a 90% hands-on core engineering role. If you are looking for a management or guidance-only position, this is not the right fit. We need builders who love writing high-quality code and own end-to-end features across both backend services and frontend architectures.

Job Parameters & Eligibility

• Experience Required: 5 to 10 Years (Profiles with less than 5 years will not be evaluated).
• Work Mode: Hybrid (3 days Work From Office compulsory at Koramangala, Bengaluru).
• Joining Timeline: Immediate Joiners / Candidates currently serving notice with a Last Working Day (LWD) within the next 20 days only.

Key Responsibilities

• End-to-End Delivery: Design, develop, and deploy highly performant fullstack web applications.
• Backend Mastery: Build modular, scalable, and secure microservices and RESTful/GraphQL APIs.
• Frontend Engineering: Architect clean, dynamic user interfaces ensuring highly optimized state management and reusable components.
• Infrastructure & Data: Work natively with cloud infrastructures and design optimized SQL relational database systems.

Technical Stack Requirements

Backend Depth:

• Advanced hands-on experience in Node.js (Highly Preferred), Python, Java, or Golang.
• Solid experience writing optimized queries and managing relational architectures in SQL.

Frontend Depth:

• Proven UI experience working extensively with modern libraries like React.js, Angular, or Vue.js.
• Deep knowledge of complex frontend state management patterns and structural performance optimization.

Cloud & Infrastructure:

• Robust exposure to AWS core services.
• Familiarity with Infrastructure as Code (IaC) tools like Terraform is a significant plus.

What We Avoid

• Profiles with less than 5 years of absolute engineering depth.
• Frequent job hoppers with multiple short stints.
• Developers whose frontend knowledge is restricted to basic styling rather than complete end-to-end logic/state implementation.

• Shift: Should be comfortable with Night Shift & 24x7 Rotational
• Experience Required: 2 to 8 years
• CTC Offered: - 3 to 9.5 LPA
• Qualification: - Any full-time graduate.
• Notice period: - 0 to 30 days only
• Minimum 15 years of regular, full-time education (10 + 2 + 3)
• Should be flexible with night shifts & rotation shifts
• Max 02 years of overall Gap in Profile will be conisidered not more than 02 years.
• Relocation can not be conisdered.

Job Summary:

The Onboarding Specialist is responsible for ensuring a smooth and engaging onboarding experience for new hires. This role coordinates all aspects of the onboarding process, from Welcome email, contingency launch and monitoring, establishing start date, scheduling orientation and Day 1 letter. The specialist serves as the key

liaison between hiring managers, recruiter and new employees to ensure a seamless transition into the organization.

Key Responsibilities:

• Act as the primary point of contact for new hires during the onboarding phase, answering questions and guiding them through the process
• 3-6 years of experience in candidate onboarding (preferably US onboarding but any international onboarding experience is required)
• Experience with HRIS systems (e.g., Workday, SAP SuccessFactors, BambooHR) is a
• Point of contact for all candidates in Pre - hire stage - Coordinate end-to-end onboarding processes, including pre-boarding, first-day logistics and orientation
• Experience in a shared services or global business services (GBS)
• Familiarity with onboarding automation tools or
• Understanding of US employment laws and compliance
• Select appropriate background check package based on job code, location,
• Order appropriate drug tests based on job code, location,
• Check BG and DT results, basis provide
• Schedule start date and select appropriate onboarding event in My Learning
• Update candidate profile in Workday – Ready for Hire
• Send day 1 email to candidate, hiring manager and recruiter with instructions on where to Report, badging, I-9, Orientation, etc.
• Collaborate with Talent Acquisition Advisor (Recruiter), Hiring Manager, and business units to ensure smooth onboarding.
• Maintain accurate onboarding records in HR systems and update checklists, trackers, and reports as
• Support global/regional onboarding programs and initiatives as
• Strong interpersonal and communication
• High attention to detail and organizational
• Ability to multitask and manage priorities in a fast-paced
• Customer service-oriented with a positive, professional
• Proficient in MS Office (Word, Excel, PowerPoint, Outlook).

4-5 years of overall experience in software development.
- Experience on Hadoop (Apache/Cloudera/Hortonworks) and/or other Map Reduce Platforms
- Experience on Hive, Pig, Sqoop, Flume and/or Mahout
- Experience on NO-SQL – HBase, Cassandra, MongoDB
- Hands on experience with Spark development,  Knowledge of Storm, Kafka, Scala
- Good knowledge of Java
- Good background of Configuration Management/Ticketing systems like Maven/Ant/JIRA etc.
- Knowledge around any Data Integration and/or EDW tools is plus
- Good to have knowledge of  using Python/Perl/Shell

Please note - Hbase hive and spark are must.