About the role
- Team Mentorship: Lead, mentor, and grow a team of IT Support Technicians and Junior Admins. Conduct performance reviews and identify skill gaps.
- Strategic Planning: Translate business goals into technical roadmaps. Manage the IT budget and hardware procurement cycles.
- Vendor Management: Manage relationships with ISPs, hardware vendors, and cloud service providers to ensure optimal service and pricing.
- Policy Stewardship: Act as the technical champion for ISO 27001 compliance, ensuring the team follows all ISMS protocols.
- Identity (Entra ID): Manage Microsoft Entra ID (Azure AD), implementing Conditional Access, PIM, and MFA to secure maritime engineering data.
- Data Governance (MS Purview): Implement and manage Microsoft Purview for data discovery, classification, and lifecycle management. Define and enforce sensitivity labels across the organization.
- DLP Strategy: Design and maintain Data Loss Prevention (DLP) policies across Endpoint, Exchange, SharePoint, and Teams to prevent unauthorized exfiltration of maritime intellectual property.
- MDM (Intune): Oversee Microsoft Intune for automated device enrollment (Autopilot), security baselines, and remote wipe capabilities.
- Collaboration (SharePoint): Design secure SharePoint structures with sensitivity labels to prevent unauthorized exfiltration of proprietary 3D/naval data.
- Firewall & Edge: Expert administration of FortiGate and Sophos firewalls, including SD-WAN and secure VPN tunnels for remote staff.
- Secure Wi-Fi: Maintain a high-performance 802.1X/RADIUS authenticated wireless network optimized for heavy 3D modeling and engineering traffic.
- Virtualization: Manage and optimize hybrid clusters on VMware Pro and Proxmox VE.
- Cloud (AWS & Cloudflare): Manage AWS resources (EC2/S3) and Cloudflare WAF/CDN for global application delivery.
- ITSM (ManageEngine): Act as the lead administrator for ManageEngine ServiceDesk Plus. Standardize the "Joiner-Mover-Leaver" (JML) workflows and CMDB accuracy.
- Log Management: Establish centralized logging to ensure all security events are audited for ISO 27001 Annex A.12.
- Capacity Planning: Perform predictive analysis on hardware and cloud usage to ensure scalability before bottlenecks occur.
- Experience: 7+ years in IT/Infrastructure, with 1+ years in a leadership or senior capacity.
- Education: B.Tech/B.E in Computer Science, Information Technology, or a related field.
- ISO 27001 Knowledge: Deep understanding of ISMS controls, specifically regarding onboarding, exit procedures, and asset management.
- Certifications: * Fortinet NSE 4/5 or Sophos Certified Engineer.
- Microsoft 365 Certified: Endpoint Administrator Associate.
- Microsoft Certified: Information Protection and Compliance Administrator Associate (SC-400).
- AWS Certified SysOps Administrator.
- Compliance: 100% accuracy in the Asset Register and Onboarding/Exit logs for ISO audits.
- Data Security: Zero unauthorized data leaks from Purview-protected repositories.
- Uptime: 99.9% availability of core engineering servers and cloud platforms.
- Security: Zero unauthorized access incidents via Entra ID/VPN.
- Team Efficiency: Maintaining MTTR (Mean Time to Resolve) within ServiceDesk Plus SLAs.