Infrastructure Lead - CISSP Certified

Description :

Role : Infrastructure Lead (CISSP Certified)

8 to 12+ years (with strong infra + security ownership)

Location : Kondapur, Hyderabad

Role Summary :

We are seeking an Infrastructure Lead with CISSP certification to own and evolve our infrastructure strategy across cloud/on-prem environments, ensuring high availability, performance, scalability, and security.

You will lead infrastructure operations, define security-aligned architecture, drive compliance readiness, and mentor a team across systems, network, cloud, and DevOps.

Key Responsibilities :

- Lead end-to-end infrastructure operations : compute, storage, network, virtualization, backups, DR, and monitoring.

- Define and implement infrastructure architecture aligned with security best practices and CISSP domains.

- Own availability, incident response, problem management, and continuous improvement (RCA, postmortems, runbooks).

- Drive security governance : IAM, MFA, key management, patching, vulnerability remediation, hardening baselines.

- Collaborate with AppSec/SecOps to implement controls for risk management, threat modeling, logging, SIEM, and security monitoring.

- Manage cloud infrastructure (Azure/AWS/GCP) including networking (VNET/VPC), load balancers, firewalls, WAF, VPN, private endpoints.

- Build/maintain Infrastructure as Code (Terraform/ARM/Bicep/CloudFormation) and CI/CD for infra deployments.

- Ensure backup & disaster recovery, business continuity planning, and periodic DR drills.

- Support audits and compliance (ISO 27001, SOC 2, HIPAA, PCI-DSSdepending on org needs).

- Vendor management : tools, MSPs, ISPs, licensing, budgeting, capacity planning.

- Lead, mentor, and grow the infra team; set goals, hiring, performance reviews.

Required Skills & Qualifications :

- CISSP certification (mandatory).

- 8+ years in infrastructure engineering with 2+ years in a lead/ownership role.

Strong hands-on expertise in :

- Linux/Windows administration, virtualization, storage systems

- Networking fundamentals : DNS, DHCP, routing, switching, TCP/IP

- Security controls : IAM, encryption, PKI, secrets management, endpoint security

- Cloud platform expertise : Azure/AWS/GCP (at least one deep).

- Monitoring & logging tools : Prometheus/Grafana, ELK, Azure Monitor, CloudWatch, Splunk (any).

Strong understanding of :

- Secure architecture & design

- Incident management and risk assessment

- Vulnerability management and patching cycles

Preferred Qualifications :

- Cloud security certifications : CCSP, Azure Security Engineer, AWS Security Specialty.

- Experience with Kubernetes (AKS/EKS/GKE), container security, service mesh.

- Experience implementing Zero Trust, SOC2/ISO controls, and security automation.