Role Summary
Own secure, resilient infrastructure for both sites: FortiGate, LAN/Wi‑Fi, AD/Windows Server, Microsoft 365/Azure, backups/DR, vulnerability management. Acts as change approver and security authority for day‑to‑day operations.
Core Responsibilities
- Network & Perimeter: FortiGate SD‑WAN/VPN, policy hygiene, logging, config backups; VLAN/Wi‑Fi segmentation; ISP/vendor management.
- Identity & Servers: AD OU/GPO design; joiner/mover/leaver; BitLocker/USB controls; Windows patching/WSUS (or equivalent).
- Cloud & Microsoft 365: Conditional Access/MFA; Exchange/SharePoint/OneDrive/Teams administration; baseline hardening and Secure Score review.
- Resilience: Define RPO/RTO; quarterly restore tests across servers and Microsoft 365; document evidence and lessons learned.
- Security Governance: Vulnerability remediation; incident playbooks; MDR/SOC‑lite vendor liaison; quarterly firewall rule reviews.
- Documentation: Network diagrams, baselines, SOPs; monthly risk & KPI reports.
Key Performance Indicators (KPIs)
- Internet/VPN uptime ≥ 99.5%; P1 MTTR < 2 hours.
- Patch compliance ≥ 95% across servers and endpoints.
- Backup restore test pass rate ≥ 95% per quarter; documented RPO/RTO.
- Critical vulnerability remediation time < 15 days.
- Firewall configuration backups: 100% monthly.
Minimum Qualifications & Experience
- 5–9 years overall in infrastructure/security, with 3+ years hands‑on across FortiGate, AD/GPO, and Microsoft 365/Azure.
- Preferred Certifications: Fortinet NSE 4 / FCP‑Network Security (or higher); Microsoft AZ‑104 (Azure Administrator).
- Nice‑to‑have: Microsoft SC‑200 (Security Operations); ITIL 4 Foundation.
Skills & Behaviors
- FortiGate policy design; IPsec/SSL‑VPN; VLANs/L3 routing; AD/GPO administration; Microsoft 365 admin; basic PowerShell.
- Incident handling under pressure; structured documentation; strong vendor management and stakeholder communication.
Pay: ₹45,000.00 - ₹60,000.00 per month
Benefits:
- Health insurance
- Life insurance
Work Location: In person