Lead – Endpoint Security & Tooling

About Solutionara

Solutionara is a U.S.-headquartered IT Consulting & Technology Services firm with a rapidly growing Global Delivery Center in Noida, India. We specialize in enterprise integration, data platforms, cloud engineering, and digital experience technologies. Our clients trust us to modernize their technology landscape, streamline operations, and build data-driven digital products.

At Solutionara, we operate with a builder mindset — high ownership, hands-on problem solving, and a culture where innovation is not a slogan but a standard. If you want to grow in an environment where your work contributes to real enterprise systems and digital platforms, you will thrive here.

Location: Noida, India (On-site – Global Delivery Center, Sector 62)

Experience: 6 – 10 years

Employment Type: Full-time

Role Summary

The IT Systems & Endpoint Lead will be responsible for managing and overseeing Solutionara's endpoint environment, user access, and core IT systems across cloud and on-premise infrastructure. This role combines hands-on system administration with operational ownership, ensuring endpoint compliance, identity governance, and reliable IT operations across the organization. The ideal candidate will act as a key operational anchor, driving stability, enforcing IT policies, and supporting a secure and scalable environment.

Key Responsibilities

Endpoint & Identity Ownership

• Own user identity and access management across Microsoft Entra ID and hybrid Active Directory
• Manage and enforce endpoint compliance using Microsoft Intune
• Ensure consistent enforcement of MFA, Conditional Access, and device policies
• Maintain role-based access control (RBAC) and support periodic access reviews

Infrastructure & Systems Management

• Oversee Windows Server environments and core infrastructure services
• Administer Microsoft 365 services (Exchange Online, Teams, SharePoint, OneDrive)
• Drive patch management, system health monitoring, and uptime reliability
• Identify and implement automation opportunities using PowerShell

IT Operations & Support Oversight

• Handle complex L2/L3 issues and provide escalation support
• Guide junior IT staff or vendors for L1/L2 support activities
• Oversee device provisioning, onboarding, and lifecycle management
• Ensure accurate asset tracking and IT documentation

Security & Compliance Execution

• Ensure enforcement of endpoint security policies (Defender, BitLocker, compliance baselines)
• Support Conditional Access, identity security, and policy enforcement
• Participate in audit readiness, compliance checks, and documentation
• Monitor risks and escalate security gaps proactively

Network & Access Coordination

• Oversee LAN, VPN, and Wi-Fi operations in coordination with network partners
• Maintain access control records, VLANs, and network documentation
• Troubleshoot and resolve advanced connectivity issues

Qualifications & Skills

Education & Experience

• Bachelor's degree in Computer Science, IT, or related field
• 6–10 years of experience in IT infrastructure, endpoint management, or system administration

Core Technical Skills

• Strong hands-on experience with Microsoft Entra ID, Intune, Windows Server, and Microsoft 365
• Experience managing endpoint compliance and identity access
• Solid understanding of Conditional Access, MFA, and access governance
• Good knowledge of networking fundamentals (LAN, VPN, firewall basics)
• Experience with ITSM tools (JIRA, ServiceNow)
• PowerShell scripting for automation and reporting

Preferred Skills

• Exposure to Microsoft Defender (Endpoint / O365)
• Understanding of basic security best practices and audit requirements
• Experience supporting compliance or audit activities

Certifications (Preferred)

• Microsoft Certified: Azure Administrator Associate (AZ-104)
• Microsoft Certified: Modern Desktop Administrator (MD-102)
• CompTIA Security+ / Network+
• ITIL Foundation

Soft Skills

• Strong ownership and accountability mindset
• Good communication and stakeholder coordination skills
• Ability to mentor junior team members
• Structured problem-solving and decision-making ability
• Ability to operate in a fast-paced, evolving environment

Job Title : L2 Operations Lead – Malware Tools

Experience : 10+ Years

Location : Gurugram

Work Mode : Hybrid – 2 Days in Office

Employment Type : Full-Time

Engagement Duration : 6+ Months

Number of Positions : 1

Support Level : L2 Operations

Domain : Endpoint Security & Malware Protection

About the Role :

We are looking for an experienced L2 Operations Lead – Malware Tools to manage and support enterprise endpoint protection and malware security platforms, with a primary focus on CrowdStrike. The ideal candidate will have strong expertise in endpoint detection and response (EDR), malware investigation, incident management, and endpoint security operations.

The role involves monitoring security platforms in a 24×7×365 support environment, resolving Level 2 incidents, troubleshooting endpoint security agents, and escalating complex issues to L3 teams when required. The candidate will also collaborate with cross-functional security and infrastructure teams to maintain effective endpoint protection and minimize recurring incidents.

Mandatory Skills :

CrowdStrike Falcon, EDR, Endpoint Security, Malware Detection & Investigation, Alert Triage, Threat Containment, Microsoft Defender, ServiceNow, SIEM/SOAR (Splunk), Windows Server, Incident Management, 24×7 Operations Support, and Python/PowerShell Scripting.

Key Responsibilities :

• Manage end-to-end security incident handling, from L1/L1.5 escalation through investigation, resolution, and closure.
• Monitor and support endpoint protection and malware security platforms in a 24×7×365 operational environment.
• Administer and maintain CrowdStrike Falcon and other endpoint detection and response (EDR) solutions.
• Investigate malware alerts, perform alert triage, assess risks, and implement appropriate containment and remediation actions.
• Troubleshoot endpoint security agent issues, including installation, deployment, connectivity, health monitoring, and performance.
• Install, configure, update, and maintain antivirus and endpoint protection solutions across servers.
• Manage endpoint security consoles, agent updates, patching, platform upgrades, and configuration changes.
• Escalate complex incidents to L3 teams with detailed investigation findings, impact assessments, and recommended actions.
• Maintain accurate and up-to-date incident records in ServiceNow, including investigation details, resolution steps, and closure notes.
• Participate in Root Cause Analysis (RCA) reviews and implement corrective and preventive measures.
• Develop and maintain Standard Operating Procedures (SOPs), troubleshooting guides, and knowledge-base articles.
• Analyze incident trends and recurring alerts to improve detection effectiveness and reduce repeated incidents.
• Collaborate with DLP, Hosting, Network Security, Identity and Access Management (IDAM), and other infrastructure teams to resolve cross-functional issues.
• Ensure compliance with client security policies, operational procedures, and established service-level agreements (SLAs).
• Provide clear incident updates, communicate security risks promptly, and recommend appropriate mitigation measures.

Required Technical Skills :

• Endpoint Security & EDR : Strong hands-on experience with endpoint protection, antivirus, and EDR technologies.
• CrowdStrike Falcon : Experience in administration, monitoring, policy management, alert investigation, and agent troubleshooting.
• Microsoft Defender : Knowledge of endpoint protection and malware detection capabilities.
• Malware Investigation : Expertise in alert triage, threat analysis, risk assessment, containment, and remediation.
• ITSM : Experience with incident, problem, and change management processes.
• Security Monitoring : Familiarity with SIEM/SOAR platforms and security event analysis.
• Operating Systems : Strong knowledge of Windows operating systems and endpoint security administration.
• Scripting : Basic to intermediate scripting knowledge in Python or PowerShell for troubleshooting and operational automation.
• Monitoring Tools : Familiarity with Splunk, DataDog, and related monitoring or security operations tools.

Tools & Technologies :

• CrowdStrike Falcon
• Microsoft Defender
• ServiceNow
• Splunk SIEM
• SOAR Platforms
• DataDog
• Antivirus and Endpoint Detection & Response (EDR) Solutions
• Windows Server and Windows Operating Systems
• Python / PowerShell

Required Experience & Qualifications :

• 10+ years of overall experience in IT operations, endpoint security, or related security operations functions, with strong hands-on L2 endpoint security experience.
• Proven experience supporting endpoint protection and malware security tools in an enterprise environment.
• Hands-on experience with CrowdStrike Falcon or other enterprise EDR solutions.
• Experience troubleshooting endpoint security agents and resolving security incidents.
• Strong understanding of malware investigation, alert triage, threat containment, and escalation procedures.
• Experience working in a 24×7 operational support environment.
• Good understanding of ITSM processes, including incident, problem, and change management.
• Experience maintaining operational documentation, SOPs, RCA reports, and knowledge-base articles.
• Strong analytical, troubleshooting, and problem-solving skills.
• Excellent written and verbal English communication skills.
• Ability to coordinate effectively with L1, L3, and cross-functional infrastructure and security teams.

Preferred Certifications :

• CrowdStrike Falcon Administrator
• Microsoft Certified: Security Operations Analyst Associate (SC-200)
• CompTIA Security+

Key Performance Expectations :

• Timely resolution of L2 incidents within defined SLAs.
• Effective investigation and containment of malware and endpoint security threats.
• Reduced recurrence of incidents through RCA and preventive actions.
• Accurate incident documentation and timely escalations.
• Improved endpoint agent health, security coverage, and operational efficiency.
• Compliance with client security standards and operational procedures.

Ideal Candidate Profile :

The ideal candidate is a hands-on endpoint security professional with extensive L2 operations experience, strong CrowdStrike or EDR expertise, and the ability to independently manage security incidents in an enterprise environment. The candidate should demonstrate sound troubleshooting skills, effective incident coordination, and a proactive approach to improving security operations.

📢 We're Hiring | Cybersecurity Consultant | Gurugram

Role: Cybersecurity Consultant

Experience: 7+ Years

Location: Gurugram, Haryana

We are looking for experienced cybersecurity professionals with strong hands-on expertise in security operations, infrastructure security, vulnerability management and incident response.

🔹 Key Responsibilities

• Manage and strengthen security controls across enterprise IT infrastructure.
• Perform vulnerability assessments, remediation tracking and patch management.
• Monitor security alerts, investigate incidents and support threat hunting.
• Implement and manage SIEM, EDR and endpoint security solutions.
• Work on IAM controls, including MFA, SSO, RBAC and privileged access management.
• Support network security, including firewalls, IDS/IPS, segmentation and secure remote access.
• Assist with backup, recovery, disaster recovery and business continuity activities.
• Maintain security documentation, remediation evidence and audit compliance.

🔹 Required Skills

• 7+ years of relevant experience in cybersecurity, security engineering or security operations.
• Hands-on experience with SIEM tools such as Microsoft Sentinel, Splunk, QRadar or ArcSight.
• Knowledge of Microsoft security technologies, including Defender and Entra ID, is preferred.
• Experience with vulnerability management tools such as Tenable, Qualys or CrowdStrike Falcon.
• Strong understanding of incident response, threat hunting, network security and security remediation.
• Experience with EDR, IAM and enterprise security controls.

⭐ Preferred: OT/ICS security, IEC 62443, NIST frameworks, backup/DR and network segmentation experience.

📩 Interested candidates: Please share your updated cv at: snigdhaattheratebeanhr.com

IT Systems Engineer

Location: Bengaluru, India · On-site | Experience: 5+ years in IT systems / infrastructure

Department: IT & Information Security | Employment Type: Full-time | Reports To: Engineering Leadership

Focus: Own the identity, endpoints, network, and compliance backbone that powers immersive technology at

scale.

The Mission

About Metadome.ai

Metadome.ai is an immersive 3D & XR technology company that enables cloud-based, photorealistic, and captivating customer experiences for brands. Our technology offers a complete stack for creating immersive 3D & XR applications with omni-channe deployment across both in-store and digital touchpoints, and over a multitude of devices. These experiences span a spectrum of use cases across the automotive, home décor, fashion, and cosmetics & accessories sectors. Our flagship automotive platform — Autodome — enables unprecedented photorealistic, cloud-based immersive 3D & XR applications that cover the entire pre-retail funnel, empowering brands to launch products virtually and drive awareness, engagement, and bookings among modern automotive consumers. Today, we are trusted partners to leading brands across the globe — including Unilever, MG Motor, Lexus, Asian Paints, Tata Motors, and Royal Enfield, among others. We have also partnered with the likes of TCS, SAP , and PwC, and are an active voice in the XR community, including the

Metaverse Standards Forum and the VR/AR Association.

About the Role

We are looking for a hands-on IT Systems Engineer to own and run the technology backbone that keeps our teams productive and our data secure. You will be the single point of accountability for IT operations and information security across a multi-location business where 24x7 systems availability is core to how we operate — managing identity, endpoints, network, and our cloud workspace, while operating and continuously hardening our GDPR, SOC 2, and ISO 27001 compliance posture.

This is a builder-operator role, not a supervisory one. We run a tight ship on security and compliance, and we expect you to have personally implemented and operated the systems and controls described below — you should know them inside out, down to the configuration, the evidence, and the edge cases.

Core Responsibilities

● Identity & Access Management — JumpCloud:

○ Own the JumpCloud directory end-to-end: user lifecycle (joiner / mover / leaver), groups, and organizational structure.

○ Administer SSO, enforce MFA, and configure conditional and device-based access policies across all SaaS applications.

○ Manage cross-platform device policies (macOS, Windows, Linux) via JumpCloud device management, including disk encryption and compliance baselines.

○ Integrate RADIUS / LDAP for Wi-Fi and application authentication.

○ Automate onboarding and offboarding to guarantee least-privilege access and clean, auditable deprovisioning.

● Google Workspace Administration — GWS:

○ Administer the Google Workspace tenant: users, groups, organizational units, and email routing.

○ Configure and enforce security controls — 2-Step Verification, context-aware access, DLP rules,

and sharing / visibility policies.○

○ Manage retention, eDiscovery, and legal holds through Google Vault. Optimize licensing and SaaS spend across Workspace and other portals.

Endpoint & Threat Protection — Sophos:

○ Deploy, configure, and manage Sophos Central (Intercept X / XDR) across all endpoints and

servers.

○ Monitor alerts, triage threats, and lead incident detection, response, and remediation.

○ Maintain endpoint encryption, web / application control, and device-hardening standards.

○ Where Sophos Firewall is in use, manage firewall policies, IPS, and secure remote access.

Network, Firewall & Wi-Fi:

○ Design, configure, and maintain firewalls, VLAN segmentation, VPN, and secure remote access.

○ Administer enterprise Wi-Fi and wired networks (switches, access points), including

RADIUS-backed authentication.

○ Manage LAN / WAN connectivity, ISP relationships, and network performance and uptime.

○ Implement network monitoring, intrusion detection, and centralized logging.

Hardware, Software & Asset Management:

○ Own the full hardware lifecycle — procurement, provisioning / imaging, maintenance, repair, and

decommissioning.

○ Support a mixed fleet of macOS, Windows, and Android devices, including high-performance workstations and XR / VR hardware used by our creative and engineering teams.

○ Maintain an accurate hardware and software inventory and asset register.

○ Manage software deployment, patch management, and license compliance.

Security, Risk & Compliance — GDPR · SOC 2 · ISO 27001:

○ Operate and continuously improve the company's Information Security Management System

(ISMS).

○ Own day-to-day compliance for GDPR, SOC 2 (Type II), and ISO/IEC 27001 — including control

implementation, evidence collection, and continuous monitoring.

○ Conduct risk assessments, internal audits, periodic access reviews, and vendor security / DPA

assessments.

○ Serve as a primary point of contact during external audits and customer security reviews.

○ Maintain security policies, records of processing (RoPA), DPIAs, and incident / breach-response

runbooks.

○ Drive security-awareness and phishing-simulation programs across the organization.

IT Operations & Support:

○ Ensure 24x7 high availability of core systems and meet defined uptime and SLA metrics.

○ Provide escalation-level troubleshooting and support across macOS, Windows, and Android.

○ Manage backups, disaster recovery, and business-continuity testing.

○ Coordinate internal teams and third-party vendors to deliver IT projects on time and within

budget.

○ Maintain documentation, runbooks, and standard operating procedures.

○ Own and report on the IT budget and asset allocation.

Required Skills & Experience

● 5+ years in IT systems / infrastructure engineering — with direct, hands-on ownership of the systems

below rather than purely supervisory exposure.

● JumpCloud — demonstrated hands-on expertise across identity, SSO, MFA, and device management.

● Google Workspace (GWS) — deep admin-console experience including security, DLP , and Vault.

● Sophos — hands-on endpoint / XDR administration and threat response.

● Networking — firewall configuration, Wi-Fi, VLANs, VPN, LAN / WAN, and RADIUS / LDAP fundamentals.

● GDPR, SOC 2 & ISO 27001 — hands-on — you have personally taken an organization through at least one

full audit / certification cycle and know the controls, evidence, and auditor expectations inside out.

Cross-platform support — proven troubleshooting across macOS, Windows, and Android in a 24x7, multi-location environment.

System security — solid grasp of IDS / IPS, endpoint hardening, encryption, and backup / recovery.

Education — B.Sc. / B.Tech in Information Technology, Computer Science, or a related discipline.

Mindset — strong documentation discipline, ownership, resourcefulness, and a structured, problem-solving approach.

Preferred Qualifications

●Relevant certifications — e.g., ISO 27001 Lead Implementer / Auditor, CompTIA Security+ / Network+, or vendor certifications from JumpCloud and Sophos.

●Experience with compliance-automation platforms such as Sprinto, Vanta, or Drata.

●Scripting and automation for IT operations (Bash, PowerShell, or Python).

●Experience in a fast-paced SaaS or technology company serving enterprise and global clients.

●Familiarity with supporting creative, 3D, or XR workflows and high-performance computing environments.

Why Join Us

You will own the systems and security posture of a company building category-defining immersive technology for some of the world's most recognizable brands. It is a high-trust, high-ownership role with the autonomy to design things properly — and the visibility that comes with keeping a security- and compliance-first business running

flawlessly.

Senior Network Security Engineer – ZTNA (Zscaler, Axis/HPE SSE Focus)

• ZTNA and Zero Trust Implementation: The role involves architecting and deploying ZTNA solutions using platforms like Zscaler and Axis Security, replacing traditional VPNs with identity-aware access, enforcing least-privilege models based on user identity, device posture, and application context, and integrating with identity providers and security tools to secure remote workforces and third parties. Migration from VPN to ZTNA is a key responsibility. 

• Network Security Architecture and Operations: The engineer participates in architecture reviews, designs secure environments across data centers, cloud, and edge, provides risk and telemetry analysis, supports audits and compliance, manages SIEM systems, and collaborates with global cybersecurity and infrastructure teams to maintain security posture. 

• Technical Expertise and Qualifications: Required qualifications include over 10 years of experience in network security engineering, hands-on expertise with Zscaler (ZIA, ZPA), Axis Security/Aruba SSE, deep knowledge of Zero Trust, SASE frameworks, firewall and proxy technologies, identity integration, cloud security across AWS, Azure, and GCP, and certifications such as CCNP, CCIE, Zscaler certifications, and CISSP or CISM. 

• Role Focus and Strategic Importance: The position emphasizes transitioning from traditional network security to identity-driven access security, positioning ZTNA as a core transformation pillar replacing VPNs, aligning with enterprise Zero Trust initiatives, enabling secure hybrid workforces, and balancing expertise in both modern cloud security platforms and traditional network controls.

Senior Network Security Engineer (Microsegmentation) 

Key Responsibilities 

• Translate high-level business strategic objectives and goals into Enterprise IT requirements and conceptual designs. 
• Develop and support comprehensive solutions that meet requirements and align with HPE’s global network security and microsegmentation strategy. 
• Develop and maintain a multi-year strategic network and security architecture roadmap, incorporating Zero Trust and segmentation-driven security models. 
• Lead end-to-end network and security architecture across global platforms ensuring secure, high-performing, fault-tolerant, and resilient environments. 

Microsegmentation & Zero Trust Responsibilities 

• Architect and implement microsegmentation strategies across data center, campus, and cloud environments to limit lateral movement and enforce least-privilege access. 
• Design and operationalize Zero Trust Architecture (ZTA) principles, integrating identity, application, and network-based policy enforcement. 
• Collaborate with application owners to discover, validate, and map application dependencies to enable policy-driven segmentation. 
• Define and enforce granular security policies using label/tag-based segmentation approaches across hybrid environments. 
• Integrate microsegmentation with firewalls, SIEM, IAM, EDR/XDR, and cloud-native controls for unified policy enforcement. 
• Lead adoption of microsegmentation platforms (e.g, Guardicore/Akamai Segmentation). 
• Develop segmentation governance models, policy lifecycle management, and compliance alignment (CIS/NIST/Zero Trust frameworks). 

Core Network Security Responsibilities 

• Participate in network security design reviews and ensure all implementations meet enterprise security standards. 
• Analyze business requirements to design and implement security across data centers, campus networks, and hybrid environments. 
• Provide ongoing risk metrics, control effectiveness tracking, and security posture reporting. 
• Conduct and support internal and external security audits and compliance assessments. 
• Maintain awareness of emerging threats and update policies accordingly. 
• Develop and manage policies, processes, and procedures ensuring reliability, availability, and security of network systems. 
• Manage and optimize Security Information and Event Management (SIEM) systems. 
• Collaborate with Cyber Security, infrastructure, and application teams toward compliance and operational excellence. 

Technical Qualifications 

• 10+ years of experience in enterprise network security architecture, engineering, and operations. 

Microsegmentation & Advanced Security 

• Strong hands-on experience in designing and implementing microsegmentation solutions in complex enterprise environments. 
• Proven capability to build application-aware segmentation policies based on traffic flow analysis. 
• Experience with policy simulation, enforcement, monitoring, and optimization in segmentation platforms. 
• Understanding of east-west traffic inspection, workload protection, and software-defined segmentation. 
• Familiarity with Zero Trust Network Access (ZTNA) and identity-driven access models. 

Network Security & Infrastructure 

• Strong experience managing LAN/WAN security technologies, including firewalls, IDS/IPS, SIEM, VPN, and NAC. 
• Expertise in firewall architecture and design with hands-on experience in:  
• Fortinet (Fortigate), Palo Alto, Juniper 
• Policy design, NAT, routing, application control, and threat prevention profiles 
• Experience securing public and private cloud (AWS, Azure, GCP) environments. 
• Design and implementation of Web Application and API Protection (WAAP) solutions. 
• Strong experience in proxy (forward/reverse), load balancing, and application security integration. 
• Experience with SDN and SD-WAN architectures, including segmentation use cases. 

Networking & Protocol Expertise 

• Strong knowledge of:  
• Routing protocols: BGP, OSPF, RIP, MPLS 
• Network services: DNS, DHCP, NTP 
• IPv4/IPv6 architecture and traffic management 
• Experience in QoS, NetFlow, ACLs, NAT, multicast, and wireless technologies (802.11 variants). 
• Experience with F5 GTM/LTM, VPN technologies, and Internet proxy solutions. 

Data Center & Infrastructure 

• Experience managing enterprise data center environments with technologies including:  
• Aruba, Arista, Juniper switching 
• Firewalls, WAN optimization, IDS/IPS, DLP 
• Strong understanding of structured cabling and network facilities. 

Operations & Lifecycle Management 

• Plan, implement, and document infrastructure changes, including upgrades and migrations. 
• Work within ITIL frameworks for incident, change, and problem management. 

Education & Certifications 

• Bachelor’s Degree in Computer Science, Network Engineering, or related field (or equivalent experience). 
• 10+ years of experience in global network security environments. 
• Preferred certifications:  
• CCNP / CCIE 
• JNCIE 
• Security certifications (CISSP, CISM, or equivalent) are a plus 

Key Differentiators Added (for your context) 

This version strengthens the JD by: 

• Embedding microsegmentation as a core capability (not just one bullet) 
• Aligning with Zero Trust and application dependency mapping (important for your programs) 
• Emphasizing cross-team collaboration with application owners (critical for rollout success) 
• Integrating segmentation with existing firewall + SIEM ecosystem (not replacing, but complementing) 

Hello,

Greetings for the day !!!

We are hiring "Security Engineer L2 - Netskope" for one of our client based at Navi Mumbai !!!

Location: Ghansoli

Designation: Security Engineer L2 (Netskope)

Job Description:

Design and implement Netskope SSE/SASE solutions.

• Configure and manage Netskope policies, traffic steering, SSL/TLS inspection, and cloud security controls.
• Deploy and support Netskope Client on Windows, macOS, and mobile devices.

Implement and manage:

• CASB (Cloud Access Security Broker)
• SWG (Secure Web Gateway)
• DLP (Data Loss Prevention)
• ZTNA (Zero Trust Network Access)
• Cloud Firewall and DNS Security
• Monitor security incidents and investigate security alerts.
• Integrate Netskope with identity providers such as Microsoft Entra ID (Azure AD), Okta, and Active Directory.
• Perform troubleshooting, policy tuning, and performance optimization.
• Prepare security reports, documentation, and standard operating procedures.

Required Skills:

• Netskope SSE/SASE Platform
• CASB, SWG, DLP, ZTNA
• Network Security and Cloud Security
• HTTP/HTTPS, DNS, VPN, Proxy technologies

Experience: 3+ years

Working days: Monday to Friday

**LOOKING FOR IMMEDIATE JOINERS ONLY**

Job Title : Security Delivery Lead

Experience : 8+ Years

Location : Gurugram Sector 59

Working Mode : Hybrid (2 Days WFO)

Domain : IT Infrastructure & Security Operations

Job Overview :

We are looking for an experienced Security Delivery Lead to manage end-to-end 24x7 L1 / L2 Security Operations for a large enterprise client. The candidate will be responsible for managing multiple security towers, client relationships, service delivery, SLAs, escalations, commercial governance, and team management.

Mandatory skills :

Security Service Delivery, SecOps, MSP, 24x7 Operations, Network Security, IDAM, DLP, Endpoint Security, Zscaler, Palo Alto, Entra ID, CyberArk, CrowdStrike, ServiceNow, SLA Management, MIM, RCA, Client Management, Contract Management.

Key Responsibilities :

• Manage end-to-end 24x7 L1 / L2 Security Operations across Network Security, IDAM, Endpoint / Malware Security, DLP, and SecOps Command Center.
• Act as the primary point of contact for client stakeholders and senior management.
• Manage SLAs, KPIs, service reviews, operational reports, and governance meetings.
• Handle P1 / P2 incidents, Major Incident Management (MIM), escalations, and RCA.
• Manage team capacity, shift rosters, resource planning, and performance of 20+ engineers.
• Handle monthly invoicing, SOW, contractual obligations, change requests, and service credits.
• Ensure security compliance, audit readiness, and continuous service improvement.
• Drive automation, process optimization, and reduction of recurring incidents.

Required Skills :

• Strong experience in Security Operations and Infrastructure Managed Services (MSP).
• Experience managing multiple security towers in a 24x7 environment.
• Good understanding of Network Security, IDAM, DLP, Endpoint Security, and Email Security.
• Working knowledge of Zscaler, Palo Alto, Microsoft Defender, CrowdStrike, Entra ID, CyberArk, and Microsoft Purview.
• Strong expertise in ServiceNow, SLA / KPI management, MIM, RCA, and ITIL processes.
• Experience in client management, commercial governance, invoicing, and contract reviews.
• Excellent communication and stakeholder management skills.

Experience Requirements :

• 8+ years of overall IT / Security Operations experience.
• 5+ years of Security Service Delivery / Leadership experience in an MSP environment.
• Must have managed 24x7 security operations and teams of 20+ engineers.
• Experience handling global enterprise clients and senior-level escalations.

Preferred Certifications :

• CISSP / CISM
• ITIL 4 Foundation
• Microsoft SC-100 / SC-200
• Zscaler or Palo Alto certifications

Certifications are preferred, not mandatory.

At Shipthis, we are building a better future for freight forwarders by evolving traditional operations into fully digital, efficient, and scalable systems. We’re a fast-growing product company where every individual has the opportunity to take ownership, move fast, and create real impact. If you enjoy solving complex problems, shaping products from the ground up, and influencing technical direction, Shipthis is the place for you.

Learn more at www.shipthis.co

Role Overview

We are looking for an associate-level SecOps Engineer to support security operations, compliance, endpoint management, cloud infrastructure, and DevOps engineering. The role will work closely with the CTO/CISO and engineering team. Security and compliance are core responsibilities; when those priorities are lighter, the engineer will focus on CI/CD, infrastructure automation, reliability, monitoring, performance, and cloud cost optimization.

What You’ll be Doing

Security Operations

• Monitor infrastructure, application, and security alerts and assist with incident investigation.
• Review access controls, privileged accounts, service accounts, permissions, and periodic access reviews.
• Support infrastructure hardening, logging, monitoring, backup, recovery, and other security controls.
• Track security issues and corrective actions through closure.

Vulnerability Management

• Run and review application and infrastructure vulnerability scans.
• Maintain a vulnerability register and coordinate remediation with engineering teams.
• Support VAPT and penetration-testing exercises and validate closure of findings.
• Monitor dependencies, containers, operating systems, and cloud infrastructure for known vulnerabilities and patching needs.

Compliance & Governance

• Support ongoing ISO/IEC 27001, SOC 2, GDPR, customer-security, and internal-policy requirements.
• Maintain audit evidence, control registers, security policies, procedures, risk items, and remediation records.
• Assist with internal/external audits, vendor assessments, customer security questionnaires, and asset inventories.
• Maintain evidence for access reviews, vulnerability management, incidents, onboarding/offboarding, backups, and infrastructure changes.

MDM & Endpoint Security

• Administer the company MDM platform and enroll/manage company laptops, desktops, and mobile devices.
• Maintain device inventory and monitor endpoint compliance.
• Enforce approved controls such as disk encryption, screen locks, password requirements, patching, and endpoint protection.
• Support employee device onboarding/offboarding, approved application deployment, lost/stolen-device procedures, and remote wipe where authorized.
• Maintain endpoint security and MDM evidence required for audits and troubleshoot enrollment or policy issues.

DevOps, CI/CD & Cloud

• Maintain and improve CI/CD pipelines, deployment workflows, build times, caching, and rollback processes.
• Support production and non-production cloud infrastructure, networking, DNS, TLS certificates, IAM, and secrets.
• Automate repetitive deployment, infrastructure, security, and compliance tasks.
• Improve monitoring, logging, alerting, reliability, resource utilization, and cloud costs.
• Troubleshoot pipeline, deployment, and infrastructure issues and participate in root-cause analysis.

Required Fundamentals

• Basic knowledge of Linux, networking, HTTP/HTTPS, DNS, TLS, Git, Docker, cloud computing, APIs, and web applications.
• Understanding of IAM, MFA, least privilege, vulnerabilities/CVEs, encryption, logging, patching, and secrets management.
• Strong troubleshooting, ownership, attention to detail, and willingness to learn.

Desired Qualifications

• 1–2 years of experience with strong fundamentals are welcome.
• Basic scripting knowledge in Python, Bash, or similar.
• Interest in cybersecurity, cloud infrastructure, automation, and troubleshooting.
• Exposure to AWS/GCP/Azure, Terraform, GitHub Actions, Cloudflare, OWASP, vulnerability scanners, MDM, ISO 27001, or SOC 2 is a plus, not mandatory.

We Welcome Candidates:

• Who can join immediately
• Female candidates returning to work after a career break are strongly encouraged.

We are an equal opportunity employer and are committed to fostering diversity and inclusivity. We do not discriminate based on race, religion, color, gender, sexual orientation, age, marital status, or disability status.

Job Synopsys

Location: Bangalore

Job Type: Full-time, Permanent

Experience: 1-2 years

Industry: Software Product

Job Title: Technical Consultant – Netskope & SSE (L3 Engineer)

Company: Inflow Technologies

Location: Bangalore (Work From Office, 5 days/week)

About Inflow Technologies:

Inflow Technologies, founded in 2005 and headquartered in Bangalore, is a leading value-added IT infrastructure distributor across Networking, Cybersecurity, Unified Communications, AIDC, Surveillance, Server, Storage, and Software. With 20+ locations across India/South Asia and a 120+ member certified technical team, Inflow supports channel partners through the full solution sales cycle. Annual run-rate revenue: USD 700+ Million.

Position Overview:

We're looking for an experienced Technical Consultant (L3 Engineer) specializing in Netskope and Security Service Edge (SSE) technologies. You'll own end-to-end architecture, design, deployment, and optimization of cloud security solutions — acting as a trusted advisor who translates business requirements into secure, scalable technical architectures, and resolves advanced issues through root cause analysis.

Key Responsibilities:

Implementation & Deployment

• Deploy Netskope CASB (API + Proxy), SWG, DLP (Email/Web/Network), ZTNA (Private Access), NPA, and Prime Advantage package
• Configure traffic steering (Client, GRE, IPsec), policy rules (DLP, URL filtering, access control), and dashboard fine-tuning
• Perform agent rollout across Windows, Mac, and Mobile

Architecture & Design

• Design a secure access architecture for remote users, branch offices, and cloud workloads
• Integrate with identity providers (Azure AD, Okta) and existing security stack (Firewall, Proxy, SIEM)
• Integrate Netskope with SIEM (Splunk, QRadar), EDR tools, and email security
• Configure SSO/SAML authentication

Required Qualifications:

• Bachelor's degree in IT/CS or related field
• 6–8 years of experience (L3 level)
• Preferred certifications: Netskope Certified Cloud Security Architect (NCSA), NSK 100/200/300, CCNA/Security+ (good to have)

Interview Process: 2 rounds (Virtual) + Final round (Face-to-Face)