Own the IT backbone and the security program that protects it - identity, endpoints, network, cloud, security operations, and compliance for a company delivering immersive technology at scale.

The Mission :

About Metadome.ai :

Metadome.ai is an immersive 3D & XR technology company that enables cloud-based, photorealistic, and captivating customer experiences for brands. Our technology offers a complete stack for creating immersive 3D & XR applications with omni-channel deployment across both in-store and digital touchpoints, and over a multitude of devices. These experiences span a spectrum of use cases across the automotive, home décor, fashion, and cosmetics & accessories sectors.

Our flagship automotive platform - Autodome - enables unprecedented photorealistic, cloud-based immersive 3D & XR applications that cover the entire pre-retail funnel, empowering brands to launch products virtually and drive awareness, engagement, and bookings among modern automotive consumers. Today, we are trusted partners to leading brands across the globe - including Unilever, MG Motor, Lexus, Asian Paints, Tata Motors, and Royal Enfield, among others. We have also partnered with the likes of TCS, SAP, and PwC, and are an active voice in the XR community, including the Metaverse Standards Forum and the VR/AR Association.

About the Role :

We are looking for a hands-on IT & Information Security Engineer who is equally at home administering systems and defending them. You will be the single point of accountability for both IT operations and information security across a multi location business where 24x7 systems availability is core to how we operate. On the IT side, you will run identity, endpoints, network, and our cloud workspace. On the security side, you will own security operations, vulnerability management, incident response, cloud and data security, and our GDPR, SOC 2, and ISO 27001 compliance posture.

This is a builder-operator role, not a supervisory one, and it is a genuine dual role - we expect roughly half your time to go to IT administration and half to security. You should have personally implemented and operated the systems and controls described below, and you should think like both an admin ("how do we keep this running?") and an attacker ("how would someone break this?"). We expect you to know these systems inside out, down to the configuration, the evidence, and the edge cases.

Core Responsibilities :

IT Administration :

Identity & Access Management - JumpCloud :

- Own the JumpCloud directory end-to-end: user lifecycle (joiner / mover / leaver), groups, and organizational structure.

- Administer SSO, enforce MFA (phishing-resistant where possible), and configure conditional and device-based access policies across all SaaS applications.

- Manage cross-platform device policies (macOS, Windows, Linux) via JumpCloud device management, including disk encryption and compliance baselines.

- Integrate RADIUS / LDAP for Wi-Fi and application authentication.

- Automate onboarding and offboarding to guarantee least-privilege access and clean, auditable deprovisioning.

Google Workspace Administration - GWS :

- Administer the Google Workspace tenant: users, groups, organizational units, and email routing.

- Configure and enforce security controls - 2-Step Verification, context-aware access, DLP rules, and sharing / visibility policies.

- Harden email security : SPF, DKIM, DMARC enforcement, and phishing / malware protections.

- Manage retention, eDiscovery, and legal holds through Google Vault.

- Optimize licensing and SaaS spend across Workspace and other portals.

Network, Firewall & Wi-Fi :

- Design, configure, and maintain firewalls, VLAN segmentation, VPN, and secure remote access.

- Administer enterprise Wi-Fi and wired networks (switches, access points), including RADIUS-backed authentication.

- Manage LAN / WAN connectivity, ISP relationships, and network performance and uptime.

- Where Sophos Firewall is in use, manage firewall policies, IPS, and secure remote access.

Hardware, Software & Asset Management :

- Own the full hardware lifecycle - procurement, provisioning / imaging, maintenance, repair, and secure decommissioning (including certified data wiping).

- Support a mixed fleet of macOS, Windows, and Android devices, including high-performance workstations and XR / VR hardware used by our creative and engineering teams.

- Maintain an accurate hardware and software inventory and asset register.

- Manage software deployment, patch management, and license compliance.

IT Operations & Support :

- Ensure 24x7 high availability of core systems and meet defined uptime and SLA metrics.

- Provide escalation-level troubleshooting and support across macOS, Windows, and Android.

- Manage backups, disaster recovery, and business-continuity testing.

- Coordinate internal teams and third-party vendors to deliver IT projects on time and within budget.

- Maintain documentation, runbooks, and standard operating procedures.

- Own and report on the IT and security budget and asset allocation.

Information Security :

Security Operations & Monitoring :

- Build and run centralized logging and security monitoring (SIEM or equivalent) across identity, endpoints, network, cloud, and SaaS.

- Write and tune detection rules and alerts; reduce noise so real threats surface quickly.

- Implement network monitoring and intrusion detection / prevention (IDS / IPS).

- Track threat intelligence relevant to our stack and industry, and act on it.

Endpoint & Threat Protection - Sophos :

- Deploy, configure, and manage Sophos Central (Intercept X / XDR) across all endpoints and servers.

- Monitor alerts, triage threats, run threat hunts, and lead detection, response, and remediation.

- Maintain endpoint encryption, web / application control, and device-hardening standards (e.g., CIS Benchmarks).

Incident Response :

- Own the incident response plan end-to-end - detection, containment, eradication, recovery, and post-incident review.

- Lead investigations, including log analysis and basic forensics, and coordinate with leadership, legal, and external responders when needed.

- Manage personal-data breach handling, including GDPR 72-hour notification readiness and customer communication.

- Run tabletop exercises at least annually and turn lessons learned into fixes.

Vulnerability & Exposure Management :

- Run continuous vulnerability scanning across endpoints, servers, network devices, and cloud assets.

- Prioritize findings by risk, drive remediation with owners, and track SLAs to closure.

- Scope and coordinate external penetration tests, and verify that findings are fixed.

- Monitor our external attack surface - exposed services, domains, certificates, and leaked credentials.

Cloud, Application & Data Security :

- Partner with engineering to secure our cloud infrastructure (AWS / Azure / GCP): IAM, network exposure, encryption, logging, and security posture monitoring.

- Champion a secure SDLC - code and dependency scanning, secrets management, and security review of new features and architecture changes.

- Classify data and enforce protection controls - encryption at rest and in transit, DLP, and key management.

- Lead privileged-access management: admin accounts, break-glass access, and periodic reviews.

Governance, Risk & Compliance - GDPR, SOC 2, ISO 27001 :

- Operate and continuously improve the company's Information Security Management System (ISMS).

- Own day-to-day compliance for GDPR, SOC 2 (Type II), and ISO/IEC 27001 - including control implementation, evidence collection, and continuous monitoring.

- Maintain the risk register; conduct risk assessments, internal audits, and periodic access reviews.

- Run third-party risk management - vendor security reviews, DPAs, and ongoing monitoring of critical suppliers.

- Serve as the primary point of contact during external audits, customer security questionnaires, and enterprise security reviews.

- Maintain security policies, records of processing (RoPA), DPIAs, and incident / breach-response runbooks.

- Drive security-awareness training and phishing-simulation programs across the organization.

- Report on security posture, key risks, and metrics to leadership on a regular cadence.

Required Skills & Experience :

- 5+ years across IT systems / infrastructure and information security, including at least 2 years with direct, hands-on security responsibility (security operations, incident response, or GRC) - not purely supervisory exposure.

- JumpCloud - demonstrated hands-on expertise across identity, SSO, MFA, and device management.

- Google Workspace (GWS) - deep admin-console experience including security, DLP, email authentication, and Vault.

- Sophos - hands-on endpoint / XDR administration, threat hunting, and threat response.

- Security operations : experience running a SIEM or log platform, writing detections, and triaging alerts.

- Incident response : you have handled real security incidents end-to-end and can walk us through one in detail.

- Vulnerability management - hands-on with scanning tools (e.g., Nessus, Qualys, OpenVAS, or similar) and driving remediation to closure.

- Cloud security fundamentals - IAM, network controls, and logging in at least one major cloud (AWS, Azure, or GCP).

- Networking - firewall configuration, Wi-Fi, VLANs, VPN, LAN / WAN, IDS / IPS, and RADIUS / LDAP.

- GDPR, SOC 2 & ISO 27001 - hands-on - you have personally taken an organization through at least one full audit / certification cycle and know the controls, evidence, and auditor expectations inside out.

- Cross-platform support - proven troubleshooting across macOS, Windows, and Android in a 24x7, multi-location environment.

- Working knowledge of common attack techniques (phishing, credential theft, ransomware, OWASP Top 10, MITRE ATT&CK) and how to defend against them.

- Education - B.Sc. / B.Tech in Information Technology, Computer Science, Cybersecurity, or a related discipline.

- Mindset - strong documentation discipline, ownership, resourcefulness, sound judgment under pressure, and a structured, problem-solving approach.

Preferred Qualifications :

- Security certifications - e.g., CISSP, CISM, CCSP, OSCP, GIAC (GSEC / GCIH), ISO 27001 Lead Implementer / Auditor, or CompTIA Security+ / CySA+.

- IT certifications - e.g., CompTIA Network+, or vendor certifications from JumpCloud and Sophos.

- Cloud security certifications such as AWS Certified Security - Specialty.

- Experience with compliance-automation platforms such as Sprinto, Vanta, or Drata.

- Scripting and automation for IT and security operations (Bash, PowerShell, or Python).

- Experience in a fast-paced SaaS or technology company serving enterprise and global clients.

- Familiarity with supporting creative, 3D, or XR workflows and high-performance computing environments.