Company Overview :

MindInventory is a leading digital product development company that specializes in building high-performance web and mobile applications for global enterprises, startups, and SMEs. Operating at the intersection of cutting-edge technology and user-centric design, the company delivers scalable solutions across industries such as FinTech, Healthcare, Logistics, and E-commerce. With a strong focus on engineering excellence and agile delivery, MindInventory fosters a collaborative environment that encourages innovation, technical ownership, and continuous professional growth.

Role Overview :

As an IT Infrastructure & Compliance Engineer, you will serve as the backbone of our technical operations, ensuring that our internal and client-facing infrastructure remains robust, secure, and fully compliant with international standards.

You will work closely with the DevOps, engineering, and leadership teams to architect secure environments, manage complex virtualized systems, and oversee rigorous security audits.

Key Responsibilities :

- Design, implement, and maintain scalable IT infrastructure, ensuring high availability, security, and performance across production and development environments.

- Administer and optimize VMware vSphere/ESXi environments and other virtualization platforms to support mission-critical workloads.

- Manage and harden Linux servers (RHEL, CentOS, Ubuntu) and Windows environments following industry best practices and CIS Benchmarks.

- Administer Active Directory, Group Policy, DNS, DHCP, LDAP, and Microsoft Entra ID (Azure AD).

- Manage Identity and Access Management (IAM), including user provisioning, RBAC, MFA, SSO, Conditional Access, and Privileged Access Management (PAM).

- Implement and manage SIEM, EDR, and XDR platforms such as Wazuh, Microsoft Sentinel, Microsoft Defender, CrowdStrike, SentinelOne, Sophos, or equivalent solutions.

- Conduct threat detection, incident response, root cause analysis, vulnerability assessments, and remediation activities.

- Develop and maintain Zero Trust security controls and enterprise security policies.

- Lead compliance initiatives and maintain adherence to SOC 2 Type II, ISO 27001, HIPAA, PCI-DSS, GDPR, CCPA, NIST Cybersecurity Framework, CIS Benchmarks, and CMMI Level 5 requirements.

- Participate in internal and external audits, maintain audit evidence, and coordinate remediation activities.

- Conduct periodic access reviews, security assessments, and risk management exercises.

- Develop, test, and maintain Disaster Recovery (DR) and Business Continuity (BCP) plans to meet organizational RPO and RTO objectives.

- Configure and maintain enterprise backup and recovery solutions.

- Manage Microsoft 365 services, including Exchange Online, SharePoint Online, Teams, OneDrive, and Intune.

- Administer Google Workspace environments and user lifecycle management.

- Manage endpoint devices across Windows, Linux, and macOS environments using Intune, Jamf, Kandji, Apple Business Manager, or equivalent MDM solutions.

- Secure and administer cloud environments across Microsoft Azure, AWS, and Google Cloud Platform (GCP), including IAM, monitoring, storage, backup, and infrastructure hardening.

- Collaborate with engineering, DevOps, and development teams to integrate security best practices into the Software Development Lifecycle (SDLC).

- Create and maintain technical documentation, SOPs, infrastructure diagrams, security standards, and compliance policies.

- Provide Level 2 and Level 3 support for infrastructure, cloud, and security-related incidents.

Required Skills & Experience:

- 812 years of hands-on experience in IT infrastructure, security, and compliance roles.

- Strong expertise in VMware vSphere/ESXi, virtualization technologies, and enterprise infrastructure management.

- Extensive experience administering Linux environments (RHEL, CentOS, Ubuntu) and Windows Server ecosystems.

- Hands-on experience with Active Directory, Azure AD (Microsoft Entra ID), DNS, DHCP, Group Policy, LDAP, and Identity Management solutions.

- Strong knowledge of IAM, RBAC, MFA, SSO, Conditional Access, and Privileged Access Management (PAM).

- Proven experience implementing and managing SIEM, EDR, and XDR platforms, including Wazuh, Microsoft Sentinel, Microsoft Defender, CrowdStrike, SentinelOne, or equivalent technologies.

- Demonstrated expertise in vulnerability management, threat detection, incident response, and security operations.

- Deep understanding of SOC 2 Type II, ISO 27001, HIPAA, PCI-DSS, GDPR, CCPA, NIST Cybersecurity Framework, CIS Benchmarks, and CMMI Level 5 requirements.

- Experience leading internal and external audits, compliance assessments, and remediation programs.

- Hands-on experience with Microsoft Azure, AWS, and/or Google Cloud Platform (GCP).

- Strong understanding of Disaster Recovery, Business Continuity Planning, and enterprise backup strategies.

- Excellent analytical, troubleshooting, and problem-solving abilities in high-pressure environments.

- Strong communication and stakeholder management skills, including the ability to lead discussions with auditors, customers, and executive leadership.

- Ability to work effectively in an on-site environment in Ahmedabad.

Preferred Certifications:

- Microsoft Azure Administrator (AZ-104) or Azure Solutions Architect

- Microsoft 365 Administrator Expert

- AWS Solutions Architect

- Google Professional Cloud Engineer

- CISSP or CISM

- VMware VCP

- RHCSA or RHCE

- ISO 27001 Lead Implementer or Lead Auditor