Lead – Endpoint Security & Tooling

About Nerve Solutions

Nerve Solutions is a team of engineers building products for real-time risk management and surveillance in financial markets. Our solutions enable market participants to identify, monitor, and quantify risks and anomalies in live markets, allowing them to take corrective action at sub-second speeds.

We also develop products for automated trading and have become a trusted technology partner to some of the largest financial services organizations in the region.

About the Role

We are looking for a proactive and detail-oriented IT & Information Security Engineer to manage and maintain the organization's IT infrastructure while ensuring the security, availability, and reliability of our systems. The role involves providing technical support, administering hardware and software, strengthening cybersecurity practices, monitoring network activities, and implementing security controls to safeguard organizational assets.

The ideal candidate should have strong infrastructure knowledge, a security-first mindset, and the ability to troubleshoot technical issues while continuously improving the organization's IT environment.

Roles & Responsibilities

• Manage and maintain the organization's IT infrastructure, including hardware, software, servers, and network systems.
• Provide technical support to employees by troubleshooting hardware, software, network, and system-related issues.
• Configure, deploy, and maintain desktops, laptops, peripherals, printers, and other IT equipment.
• Set up user accounts, systems, and required software for new employees and support onboarding activities.
• Monitor network performance and employee network activities to ensure system security and compliance.
• Implement and maintain endpoint security solutions, antivirus tools, firewalls, and access control mechanisms.
• Perform regular system updates, security patching, vulnerability assessments, and preventive maintenance.
• Identify infrastructure risks and recommend security enhancements to minimize vulnerabilities.
• Maintain documentation for IT assets, software licenses, network configurations, security policies, and system inventories.
• Assist in implementing information security best practices, security audits, and compliance initiatives.
• Coordinate with internal teams to ensure IT services effectively support business operations.
• Stay updated with the latest cybersecurity threats, technologies, and industry best practices.

Required Skills

• 2–4 years of experience in IT Infrastructure, System Administration, or Information Security.
• Strong knowledge of Windows operating systems, networking, servers, and IT infrastructure.
• Experience troubleshooting hardware, software, network, and user-related issues.
• Knowledge of network security, endpoint protection, firewalls, VPNs, and vulnerability management.
• Experience with Active Directory, user access management, and system administration.
• Familiarity with Microsoft 365 administration is an added advantage.
• Understanding of backup, disaster recovery, and IT asset management.
• Strong analytical and problem-solving skills with attention to detail.
• Good communication and documentation skills.
• Ability to work independently and collaboratively in a fast-paced environment.

Preferred Qualifications

• Bachelor's degree in Information Technology, Computer Science, or a related field.
• Certifications such as CompTIA A+, Network+, Security+, Microsoft, CCNA, or equivalent will be an added advantage.

IT Systems Engineer

Location: Bengaluru, India · On-site | Experience: 5+ years in IT systems / infrastructure

Department: IT & Information Security | Employment Type: Full-time | Reports To: Engineering Leadership

Focus: Own the identity, endpoints, network, and compliance backbone that powers immersive technology at

scale.

The Mission

About Metadome.ai

Metadome.ai is an immersive 3D & XR technology company that enables cloud-based, photorealistic, and captivating customer experiences for brands. Our technology offers a complete stack for creating immersive 3D & XR applications with omni-channe deployment across both in-store and digital touchpoints, and over a multitude of devices. These experiences span a spectrum of use cases across the automotive, home décor, fashion, and cosmetics & accessories sectors. Our flagship automotive platform — Autodome — enables unprecedented photorealistic, cloud-based immersive 3D & XR applications that cover the entire pre-retail funnel, empowering brands to launch products virtually and drive awareness, engagement, and bookings among modern automotive consumers. Today, we are trusted partners to leading brands across the globe — including Unilever, MG Motor, Lexus, Asian Paints, Tata Motors, and Royal Enfield, among others. We have also partnered with the likes of TCS, SAP , and PwC, and are an active voice in the XR community, including the

Metaverse Standards Forum and the VR/AR Association.

About the Role

We are looking for a hands-on IT Systems Engineer to own and run the technology backbone that keeps our teams productive and our data secure. You will be the single point of accountability for IT operations and information security across a multi-location business where 24x7 systems availability is core to how we operate — managing identity, endpoints, network, and our cloud workspace, while operating and continuously hardening our GDPR, SOC 2, and ISO 27001 compliance posture.

This is a builder-operator role, not a supervisory one. We run a tight ship on security and compliance, and we expect you to have personally implemented and operated the systems and controls described below — you should know them inside out, down to the configuration, the evidence, and the edge cases.

Core Responsibilities

● Identity & Access Management — JumpCloud:

○ Own the JumpCloud directory end-to-end: user lifecycle (joiner / mover / leaver), groups, and organizational structure.

○ Administer SSO, enforce MFA, and configure conditional and device-based access policies across all SaaS applications.

○ Manage cross-platform device policies (macOS, Windows, Linux) via JumpCloud device management, including disk encryption and compliance baselines.

○ Integrate RADIUS / LDAP for Wi-Fi and application authentication.

○ Automate onboarding and offboarding to guarantee least-privilege access and clean, auditable deprovisioning.

● Google Workspace Administration — GWS:

○ Administer the Google Workspace tenant: users, groups, organizational units, and email routing.

○ Configure and enforce security controls — 2-Step Verification, context-aware access, DLP rules,

and sharing / visibility policies.○

○ Manage retention, eDiscovery, and legal holds through Google Vault. Optimize licensing and SaaS spend across Workspace and other portals.

Endpoint & Threat Protection — Sophos:

○ Deploy, configure, and manage Sophos Central (Intercept X / XDR) across all endpoints and

servers.

○ Monitor alerts, triage threats, and lead incident detection, response, and remediation.

○ Maintain endpoint encryption, web / application control, and device-hardening standards.

○ Where Sophos Firewall is in use, manage firewall policies, IPS, and secure remote access.

Network, Firewall & Wi-Fi:

○ Design, configure, and maintain firewalls, VLAN segmentation, VPN, and secure remote access.

○ Administer enterprise Wi-Fi and wired networks (switches, access points), including

RADIUS-backed authentication.

○ Manage LAN / WAN connectivity, ISP relationships, and network performance and uptime.

○ Implement network monitoring, intrusion detection, and centralized logging.

Hardware, Software & Asset Management:

○ Own the full hardware lifecycle — procurement, provisioning / imaging, maintenance, repair, and

decommissioning.

○ Support a mixed fleet of macOS, Windows, and Android devices, including high-performance workstations and XR / VR hardware used by our creative and engineering teams.

○ Maintain an accurate hardware and software inventory and asset register.

○ Manage software deployment, patch management, and license compliance.

Security, Risk & Compliance — GDPR · SOC 2 · ISO 27001:

○ Operate and continuously improve the company's Information Security Management System

(ISMS).

○ Own day-to-day compliance for GDPR, SOC 2 (Type II), and ISO/IEC 27001 — including control

implementation, evidence collection, and continuous monitoring.

○ Conduct risk assessments, internal audits, periodic access reviews, and vendor security / DPA

assessments.

○ Serve as a primary point of contact during external audits and customer security reviews.

○ Maintain security policies, records of processing (RoPA), DPIAs, and incident / breach-response

runbooks.

○ Drive security-awareness and phishing-simulation programs across the organization.

IT Operations & Support:

○ Ensure 24x7 high availability of core systems and meet defined uptime and SLA metrics.

○ Provide escalation-level troubleshooting and support across macOS, Windows, and Android.

○ Manage backups, disaster recovery, and business-continuity testing.

○ Coordinate internal teams and third-party vendors to deliver IT projects on time and within

budget.

○ Maintain documentation, runbooks, and standard operating procedures.

○ Own and report on the IT budget and asset allocation.

Required Skills & Experience

● 5+ years in IT systems / infrastructure engineering — with direct, hands-on ownership of the systems

below rather than purely supervisory exposure.

● JumpCloud — demonstrated hands-on expertise across identity, SSO, MFA, and device management.

● Google Workspace (GWS) — deep admin-console experience including security, DLP , and Vault.

● Sophos — hands-on endpoint / XDR administration and threat response.

● Networking — firewall configuration, Wi-Fi, VLANs, VPN, LAN / WAN, and RADIUS / LDAP fundamentals.

● GDPR, SOC 2 & ISO 27001 — hands-on — you have personally taken an organization through at least one

full audit / certification cycle and know the controls, evidence, and auditor expectations inside out.

Cross-platform support — proven troubleshooting across macOS, Windows, and Android in a 24x7, multi-location environment.

System security — solid grasp of IDS / IPS, endpoint hardening, encryption, and backup / recovery.

Education — B.Sc. / B.Tech in Information Technology, Computer Science, or a related discipline.

Mindset — strong documentation discipline, ownership, resourcefulness, and a structured, problem-solving approach.

Preferred Qualifications

●Relevant certifications — e.g., ISO 27001 Lead Implementer / Auditor, CompTIA Security+ / Network+, or vendor certifications from JumpCloud and Sophos.

●Experience with compliance-automation platforms such as Sprinto, Vanta, or Drata.

●Scripting and automation for IT operations (Bash, PowerShell, or Python).

●Experience in a fast-paced SaaS or technology company serving enterprise and global clients.

●Familiarity with supporting creative, 3D, or XR workflows and high-performance computing environments.

Why Join Us

You will own the systems and security posture of a company building category-defining immersive technology for some of the world's most recognizable brands. It is a high-trust, high-ownership role with the autonomy to design things properly — and the visibility that comes with keeping a security- and compliance-first business running

flawlessly.

A Senior Cybersecurity Engineer is responsible for safeguarding an organization’s IT infrastructure, applications, and data against cyber threats. With 5–10 years of experience, the role demands expertise in designing, implementing, and managing advanced security solutions, conducting risk assessments, and responding to incidents. Senior Engineers also mentor junior staff and contribute to strategic security planning.

Key Responsibilities

• Design, implement, and manage enterprise-level security solutions (firewalls, IDS/IPS, SIEM, endpoint protection).
• Conduct vulnerability assessments, penetration testing, and risk analysis.
• Monitor and respond to security incidents, ensuring timely resolution and documentation.
• Develop and enforce security policies, standards, and compliance frameworks (ISO 27001, NIST, GDPR).
• Collaborate with IT and business teams to integrate security into system architecture and processes.
• Lead incident response drills and disaster recovery planning.
• Provide guidance and mentorship to junior cybersecurity staff.
• Stay updated on emerging threats, tools, and technologies.

Qualifications

• Bachelor’s or Master’s degree in Computer Science, Information Security, or related field.
• 5–10 years of proven experience in cybersecurity engineering or related roles.
• Strong knowledge of network security, cloud security (AWS, Azure, GCP), and endpoint protection.
• Hands-on experience with SIEM tools (Splunk, QRadar, ArcSight), firewalls, and intrusion detection/prevention systems.
• Certifications such as CISSP, CISM, CEH, or OSCP are highly desirable.

Skills

• Advanced problem-solving and analytical skills.
• Strong communication and leadership abilities.
• Ability to manage complex projects and handle escalations effectively.
• Proactive mindset with adaptability to evolving cyber threats.

About the role

We’re hiring an IT Systems Administrator for an NBFC to secure endpoints, SaaS, and networks across ~50 branches, ~250+ field staff, and ~50+ office users.

This is primarily an IT Admin + Security role, with secondary exposure to AWS cloud ops + light DevOps + basic DB access management.

If you’re an IT Admin aiming to break into AWS Cloud Ops + DevOps, this role is a strong next step — you’ll own core IT/security and get hands-on exposure to cloud operations and deployments.

Key responsibilities (Primary: IT Admin + Security)

• Manage endpoint security for laptops and mobiles (policies, patching, encryption, antivirus/EDR); drive MDM implementation now/future (e.g., Intune/Jamf).
• Administer Google Workspace (Gmail/Drive/Calendar): users, groups, permissions, SSO, MFA, sharing controls.
• Own joiner–mover–leaver lifecycle: provisioning/deprovisioning, access controls, periodic access reviews.
• Secure branch connectivity: VPN, internal Wi-Fi, internet usage controls; coordinate troubleshooting and standardization across branches.
• Manage HO security stack: firewall operations, rule changes with change control, monitoring/log review (basic but consistent).
• Secure SaaS tools (CRM/HRMS/comms like Slack/Zoom): role-based access, MFA enforcement, offboarding, integration/OAuth controls.
• Maintain IT asset inventory: procurement coordination, issuance/return, audits, warranty/AMC, license renewals; remote lock/wipe for lost devices.
• Handle security incidents: phishing, account compromise, device loss/theft — contain, investigate, recover, and prevent recurrence.
• Run backups and basic DR testing; maintain SOPs/documentation and train staff on cyber hygiene.
• Provide hands-on user support: laptop builds, software installs, Outlook/Excel issues, VPN/Wi-Fi troubleshooting, escalations and vendor coordination.

Secondary responsibilities (AWS + DevOps + DB ops support)

• Support AWS administration: IAM users/roles/policies, MFA, access key hygiene, basic log review (e.g., CloudTrail).
• Manage AWS access controls: security groups/firewall rules, IP allowlists/whitelisting (admin tools, databases, vendor access).
• Assist engineering with DevOps operations:
• CI/CD support (deployment coordination, rollbacks, environment configuration)
• Secrets/credentials management and rotation (no shared creds)
• DNS + SSL/TLS certificates, basic monitoring/alerting coordination
• Bonus: Docker/Kubernetes and Terraform exposure
• Basic database operations (admin-lite):
• DB user creation, roles/permissions, least-privilege access
• IP allowlisting/whitelisting for DB access via VPN/approved sources
• Backup/restore verification coordination and basic monitoring signals (connections/storage)

Requirements

• 3+ years in IT security / systems administration (BFSI or branch-heavy org preferred).
• Hands-on with Google Workspace or Microsoft 365 administration.
• Must have hands-on experience leading or executing an email suite migration (e.g., Google Workspace ↔ Microsoft 365), including mailbox migration, DNS cutover, MX/SPF/DKIM/DMARC reconfiguration, and user transition management.
• Strong endpoint/security fundamentals: encryption, patching, AV/EDR, remote support, device compliance.
• Comfortable with networks: VPN/Wi-Fi/LAN troubleshooting; firewall basics and change discipline.
• Strong operational discipline: asset tracking, vendor management, documentation, ticketing, user communication.
• Practical AWS familiarity (IAM, access controls, logging) and ability to support DevOps workflows.

Nice to have

• Experience implementing MDM at scale (Intune/Jamf/SureMDM).
• Exposure to SOC2 / ISO27001 evidence, controls, and audit workflows.
• Scripting for automation (PowerShell/Bash/Python).
• Familiarity with managed databases and secure access patterns.

Job Overview

We are looking for a technically strong IT Infrastructure & Automation Engineer to manage, implement, migrate, and optimize enterprise IT environments across Microsoft infrastructure, endpoint management, identity, collaboration, security, and AI-powered automation.

The ideal candidate should have strong hands-on experience with Microsoft technologies, excellent communication skills, and the ability to deliver infrastructure and digital transformation projects end-to-end. Experience with non-Microsoft technologies and multi-vendor environments will be an added advantage.

Key Responsibilities

Microsoft Intune & Endpoint Management

• Implement and manage Microsoft Intune environments.
• Configure device enrollment, application deployment, policies, compliance, and security baselines.
• Manage Windows, macOS, iOS, and Android devices.
• Configure Conditional Access, endpoint security, and compliance controls.
• Manage Windows Autopilot and device lifecycle activities.
• Monitor and resolve endpoint compliance and configuration issues.

SCCM / Configuration Manager

• Deploy, configure, and maintain SCCM infrastructure.
• Manage OS deployment, imaging, software distribution, and patch management.
• Support SCCM and Intune co-management.
• Generate reports and troubleshoot SCCM issues.
• Assist with migration to modern endpoint management.

Microsoft Exchange

• Administer Exchange Online and Hybrid Exchange environments.
• Support mailbox and tenant migration activities.
• Manage mail flow, connectors, transport rules, and email security.
• Configure SPF, DKIM, DMARC, anti-spam, and anti-phishing controls.
• Troubleshoot messaging and mail delivery issues.

Active Directory & Identity

• Manage Active Directory and Group Policy environments.
• Configure Microsoft Entra ID integration and synchronization.
• Implement SSO, MFA, Conditional Access, and identity security.
• Handle user provisioning, onboarding, offboarding, and access management.
• Support hybrid identity environments.

SharePoint & Microsoft 365

• Implement and administer SharePoint Online.
• Configure sites, permissions, document management, and governance.
• Support file-share and legacy platform migrations.
• Integrate SharePoint with Teams, Power Platform, and business applications.
• Support knowledge and collaboration solutions.
• AI & Automation
• Implement Microsoft 365 Copilot and Copilot Studio solutions.
• Develop AI-powered assistants and agents for business functions.
• Work with Azure OpenAI, Azure AI Search, and Document Intelligence.
• Design RAG and knowledge management solutions.
• Integrate AI solutions with SharePoint, Teams, Dataverse, and enterprise applications.
• Implement workflow automation using Power Automate and Power Platform.
• Support AI governance, security, compliance, and responsible AI adoption.
• Security & Compliance
• Work with Microsoft Defender, Conditional Access, Identity Protection, and endpoint security.
• Implement Microsoft Purview, DLP, information protection, and governance solutions.
• Support security and compliance initiatives across Microsoft environments.
• Identify infrastructure and security gaps and recommend improvements.

Required Technical Skills

• Microsoft Intune
• SCCM / Microsoft Configuration Manager
• Exchange Online & Hybrid Exchange
• Active Directory
• Microsoft Entra ID
• SharePoint Online
• Microsoft Teams Administration
• Windows Server Administration
• Microsoft 365 Administration
• PowerShell
• Microsoft Defender Suite
• Conditional Access
• Identity Protection
• Microsoft Purview
• Endpoint Security
• Device Compliance
• Data Loss Prevention
• Microsoft 365 Copilot
• Copilot Studio
• Azure OpenAI
• Azure AI Services
• Power Automate
• Power Platform Integration
• Preferred Experience

Experience with AWS, GCP, VMware, Citrix, Cisco, Fortinet, Palo Alto, Linux, Veeam, ServiceNow, Trend Micro, CrowdStrike, or similar enterprise technologies will be an advantage.

Knowledge of enterprise architecture, cybersecurity, governance, and compliance frameworks is also preferred.

Candidate Profile

• 5+ years of relevant implementation and administration experience.
• Strong troubleshooting and analytical skills.
• Excellent communication and stakeholder management abilities.
• Strong documentation and reporting skills.
• Ability to manage multiple projects independently.
• Comfortable working with business stakeholders and technical teams.
• Bachelor's degree in IT, Computer Science, Engineering, or a related field.

Preferred Certifications

• Microsoft Certified: Endpoint Administrator Associate
• Microsoft 365 Certified: Administrator Expert
• Microsoft Certified: Identity and Access Administrator Associate
• Microsoft Certified: Azure Administrator Associate
• Microsoft Certified: Azure AI Engineer Associate
• Microsoft Certified: Information Protection Administrator Associate
• ITIL Foundation

Key Deliverables

• Intune implementation and endpoint management.
• SCCM deployment, migration, and optimization.
• Exchange Online and Hybrid Exchange implementation.
• Active Directory and Entra ID integration.
• SharePoint Online deployment and governance.
• Microsoft 365 security and compliance implementation.
• AI and Copilot deployment and governance.
• Technical documentation, knowledge transfer, and operational handover.
• Integration of Microsoft and third-party enterprise technologies.

We are looking for a Cybersecurity Engineer to protect our systems, applications and data. You will find vulnerabilities, monitor threats and strengthen our overall security posture.

Responsibilities

• Run vulnerability assessments and penetration tests (VAPT) on web apps, APIs and networks
• Monitor and respond to security events using SIEM tools as part of SOC operations
• Test application security using Burp Suite and similar tools
• Support ISO 27001 compliance, audits and security policies
• Harden network infrastructure, firewalls and access controls
• Document findings and track fixes with engineering teams

Requirements

• 1+ years of experience in VAPT, SOC or security engineering
• Hands-on experience with Burp Suite and SIEM tools
• Knowledge of the OWASP Top 10 and network security fundamentals
• Exposure to ISO 27001 or similar frameworks
• Certifications such as CEH, OSCP or CompTIA Security+ are a plus

This role will be permanent with NAM info and deploy to client location Chennai.

Work Mode: WORK FROM OFFICE

Offer salary can offer on a decent hike

Role Descriptions:

Exp Range: 6-10 years

Primary Competency : Terraform, Hashi Sentinel (IaC/PaC), Kubernetes (GKE/EKS)

City Locations: Bengaluru or Chennai

Key Responsibilities*

Experience Required: 6-10

Role Descriptions:

Security Monitoring & Incident Response

Investigate and analyze security alerts escalated by L1 SOC analysts.

Perform triage, containment, eradication, and recovery activities for security incidents.

1. Perform in-depth analysis of security alerts escalated from L1

2. Investigate suspicious activities using SIEM, EDR, and threat intelligence tools

3. Correlate events across multiple log sources (firewalls, endpoints, IAM, cloud logs)

4. Validate true positives and recommend reducing false positives

5. Lead triage and response for medium to high severity incidents

6. Coordinate with IT, network, and application teams during incidents and support deep investigations when required

7. Conduct proactive threat hunting based on TTPs (e.g., MITRE ATT&CK)

8. Fine-tuning and optimize SIEM use cases to reduce false positives

9. Develop new correlation rules and detection logic

10. Document incidents, findings, and response actions

11. Prepare weekly , monthly reports for SOC leadership and stakeholders

Desire candidate

• Candidate should have valid PF.

At Shipthis, we are building a better future for freight forwarders by evolving traditional operations into fully digital, efficient, and scalable systems. We’re a fast-growing product company where every individual has the opportunity to take ownership, move fast, and create real impact. If you enjoy solving complex problems, shaping products from the ground up, and influencing technical direction, Shipthis is the place for you.

Learn more at www.shipthis.co

Role Overview

We are looking for an associate-level SecOps Engineer to support security operations, compliance, endpoint management, cloud infrastructure, and DevOps engineering. The role will work closely with the CTO/CISO and engineering team. Security and compliance are core responsibilities; when those priorities are lighter, the engineer will focus on CI/CD, infrastructure automation, reliability, monitoring, performance, and cloud cost optimization.

What You’ll be Doing

Security Operations

• Monitor infrastructure, application, and security alerts and assist with incident investigation.
• Review access controls, privileged accounts, service accounts, permissions, and periodic access reviews.
• Support infrastructure hardening, logging, monitoring, backup, recovery, and other security controls.
• Track security issues and corrective actions through closure.

Vulnerability Management

• Run and review application and infrastructure vulnerability scans.
• Maintain a vulnerability register and coordinate remediation with engineering teams.
• Support VAPT and penetration-testing exercises and validate closure of findings.
• Monitor dependencies, containers, operating systems, and cloud infrastructure for known vulnerabilities and patching needs.

Compliance & Governance

• Support ongoing ISO/IEC 27001, SOC 2, GDPR, customer-security, and internal-policy requirements.
• Maintain audit evidence, control registers, security policies, procedures, risk items, and remediation records.
• Assist with internal/external audits, vendor assessments, customer security questionnaires, and asset inventories.
• Maintain evidence for access reviews, vulnerability management, incidents, onboarding/offboarding, backups, and infrastructure changes.

MDM & Endpoint Security

• Administer the company MDM platform and enroll/manage company laptops, desktops, and mobile devices.
• Maintain device inventory and monitor endpoint compliance.
• Enforce approved controls such as disk encryption, screen locks, password requirements, patching, and endpoint protection.
• Support employee device onboarding/offboarding, approved application deployment, lost/stolen-device procedures, and remote wipe where authorized.
• Maintain endpoint security and MDM evidence required for audits and troubleshoot enrollment or policy issues.

DevOps, CI/CD & Cloud

• Maintain and improve CI/CD pipelines, deployment workflows, build times, caching, and rollback processes.
• Support production and non-production cloud infrastructure, networking, DNS, TLS certificates, IAM, and secrets.
• Automate repetitive deployment, infrastructure, security, and compliance tasks.
• Improve monitoring, logging, alerting, reliability, resource utilization, and cloud costs.
• Troubleshoot pipeline, deployment, and infrastructure issues and participate in root-cause analysis.

Required Fundamentals

• Basic knowledge of Linux, networking, HTTP/HTTPS, DNS, TLS, Git, Docker, cloud computing, APIs, and web applications.
• Understanding of IAM, MFA, least privilege, vulnerabilities/CVEs, encryption, logging, patching, and secrets management.
• Strong troubleshooting, ownership, attention to detail, and willingness to learn.

Desired Qualifications

• 1–2 years of experience with strong fundamentals are welcome.
• Basic scripting knowledge in Python, Bash, or similar.
• Interest in cybersecurity, cloud infrastructure, automation, and troubleshooting.
• Exposure to AWS/GCP/Azure, Terraform, GitHub Actions, Cloudflare, OWASP, vulnerability scanners, MDM, ISO 27001, or SOC 2 is a plus, not mandatory.

We Welcome Candidates:

• Who can join immediately
• Female candidates returning to work after a career break are strongly encouraged.

We are an equal opportunity employer and are committed to fostering diversity and inclusivity. We do not discriminate based on race, religion, color, gender, sexual orientation, age, marital status, or disability status.

Job Synopsys

Location: Bangalore

Job Type: Full-time, Permanent

Experience: 1-2 years

Industry: Software Product

Position: Technical Lead – Forcepoint (Data & Cloud Security)

Company: Inflow Technologies

Location: Bangalore

Work Mode: Work From Office | 5 days/week

Experience Required: Minimum 6 years

Interview Process: 2 rounds (Virtual + Final Face-to-Face)

About Inflow Technologies

Founded in 2005, Inflow is a value-added IT infrastructure distributor covering Networking, Cybersecurity, UC&C, AIDC, Surveillance, Server, Storage & Software across India/South Asia. HQ'd in Bangalore with 20+ locations, backed by a 120+ certified technical team, and ~USD 700M+ annual run-rate revenue.

Position Overview

Acting as the Forcepoint subject matter expert, this role owns end-to-end design, deployment, and troubleshooting of enterprise data and cloud security architectures — spanning DLP, SWG, CASB, and SSE/ZTNA. The role sits at the intersection of solution architecture and hands-on L3 execution: defining security policies, configuring network proxies, and resolving complex support escalations in a client-facing, consultative capacity.

Core Products

• Forcepoint DLP (Endpoint, Network, Web, Email)
• Forcepoint Web Security
• Forcepoint Email Security
• Forcepoint CASB
• Forcepoint Suite / Forcepoint One
• Forcepoint Cloud Security / SSE (incl. ZTNA)
• Forcepoint DSPM

Key Responsibilities

1. Solution Design & Architecture

• Design enterprise architectures: DLP (Endpoint + Network + Discovery), Web Security (Proxy/Hybrid/Cloud), CASB & SaaS protection, Forcepoint Suite/One
• Install & configure Management Server, Policy Engine, Detection Servers, Protectors (Email/Web/Network), Endpoint agents (Windows/Mac)
• Implement EDM/IDM/OCR and data classification policies

2. Web Security (SWG)

• Deploy on-prem (V-series appliances) and cloud SWG/hybrid mode
• Configure transparent/explicit proxy, SSL inspection, URL filtering

3. Email Security

• Configure SMTP routing, DLP email policies, encryption & compliance rules

4. Advanced Policy Configuration

• Design/tune DLP policies (structured + unstructured data), web filtering (user/group/app-based), cloud app governance rules

5. L3 Troubleshooting & RCA (Critical)

• Handle: DLP not detecting over HTTPS, endpoint agent communication failures, web proxy latency/SSL failures, policy not applying to users, email DLP bypass
• Approach: log analysis (Policy Engine, endpoint, web), packet capture/traffic analysis, root cause identification & permanent fix

Qualifications & Certifications (Preferred)

• Bachelor's degree (IT/CS or related)
• Forcepoint Certified Administrator (FCA)
• Forcepoint DLP Specialist
• CCNA / Security+ (nice-to-have)

Zscaler Network Security Engineer | 4–7+ Years

• Manage and troubleshoot Zscaler ZIA & ZPA, including policies, URL filtering, SSL inspection, DNS security, App Segments and App Connectors.
• Troubleshoot Client Connector, PAC, GRE/IPsec tunnels and Zscaler Digital Experience issues.
• Strong knowledge of TCP/IP, DNS, DHCP, IPAM, VLAN and Ethernet switching; Infoblox experience preferred.
• Must have working experience in one of: Palo Alto Firewall, Cisco LAN/Wi-Fi, or Cisco SD-WAN.
• Handle incidents, changes, SLA/KPI, ITIL processes, documentation and L3 escalations.
• Willingness to work in rotating/follow-the-sun shifts.