Hiring | Senior Network & Infrastructure Engineer

Zoho; Pune District; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

Zoho in Pune seeks a versatile Network Engineer to own the organization’s IT infrastructure, spanning network, firewall, cloud, M365, hosting, and endpoint protection. The role emphasizes automation and high availability in a mid-sized engineering services firm.

The candidate should bring 5–10 years of experience and be able to independently build, secure, and optimize complex environments, liaising with vendors and managing incidents and changes.

Qualifications

• Network & security proficiency with FortiGate, VPNs, Cloudflare, DNS and proxy configurations.
• Cloud computing experience with AWS EC2, S3, VPC, RDS/Aurora, IAM, Route 53, Lambda, EventBridge, SSM.
• Microsoft 365 administration including Exchange Online, Entra ID, Intune, Teams, SharePoint.
• Endpoint security expertise with Defender, Trellix EDR/XDR, policies and Windows hardening.
• Server & hosting skills: Windows Server, AD, IIS, SQL Server, MySQL, HostGator/cPanel.
• Automation skills: PowerShell, AWS Lambda/EventBridge, Python basics.
• Applications & integration: REST APIs, SSO/OAuth, Teams apps.
• IT operations: asset/licensing/vendor management and incident/change management.

Responsibilities

• Oversee FortiGate firewall configurations, VPN connectivity, and security policies.
• Liaise with ISPs, telecoms, and vendors to ensure connectivity.
• Administer AWS landscape including EC2, S3, VPC, RDS/Aurora, and IAM.
• Implement monitoring, backups, patching, capacity planning, and DR protocols.
• Manage Microsoft 365 suite including Exchange Online, Entra ID, Intune, Teams, SharePoint.
• Enforce endpoint security with Defender and Trellix EDR/XDR.
• Handle IT asset lifecycle, onboarding/offboarding, and documentation.
• Coordinate incident response, change management, and service requests.
• Vendor management: contracts, renewals, licensing, support coordination.
• Cloud & web operations: Cloudflare DNS/CDN/WAF, domain registrations, hosting.

Skills

FortiGate firewall

VPN management

AWS services

Microsoft 365 admin

Cloudflare DNS/CDN/WAF

Defender/EDR security

PowerShell scripting

Python basics

IT automation

Tools

FortiGate

Cloudflare

HostGator/cPanel

AWS Lambda/EventBridge

Entra ID

SQL Server/MySQL

Job description

Job Description

Summary

We are seeking a versatile and proactive Network Engineer to serve as the sole owner of our organization's comprehensive IT infrastructure. This pivotal role encompasses the end-to-end management of our network architecture, firewall security, cloud environment, Microsoft 365 ecosystem, web hosting, endpoint protection, and daily IT operations. Ideal for a professional with a broad skill set rather than a narrow specialization, the successful candidate will demonstrate the ability to independently build, secure, and optimize complex environments. The role demands a self-starter who can automate routine tasks, resolve issues efficiently, and ensure high availability with minimal oversight within a mid-sized engineering services firm.

Experience: 5-10 years

Location: Pune

Responsibilities

Core Infrastructure & Security Management

• Oversee FortiGate firewall configurations, VPN connectivity, internet access policies, and security rule sets.
  
• Liaise with Internet Service Providers, telecommunications firms, and external network vendors to ensure seamless connectivity.
  
• Administer the full AWS landscape, including EC2 instances, S3 storage, VPC networking, RDS/Aurora databases, and IAM Identity Center governance.
  
• Implement robust monitoring strategies for infrastructure health, automated backups, patch management, capacity planning, and disaster recovery protocols.
  
• Manage the Microsoft 365 suite, covering Exchange Online, Entra ID, Intune, Teams, and SharePoint, while overseeing user lifecycle management, license allocation, and access controls.
  
• Enforce endpoint security standards using Microsoft Defender and Trellix EDR/XDR, ensuring device compliance, Group Policy adherence, and Windows hardening.
  
• Handle the complete IT asset lifecycle, from onboarding and offboarding procedures to equipment management.
  
• Coordinate IT incident response, change management, service requests, and the maintenance of technical documentation.
  
• Manage vendor relationships, including contract negotiations, renewals, licensing, and support coordination.
  

Advanced Cloud & Web Operations

• Configure and maintain Cloudflare services, including DNS management, CDN optimization, SSL/TLS certificates, and Web Application Firewall (WAF) rules.
  
• Administer domain registration, DNS records, and SSL certificates across Cloudflare, AWS Route 53, and HostGator.
  
• Manage HostGator/cPanel hosting environments, including websites, email systems, FTP/SFTP access, and backup procedures.
  
• Configure Single Sign-On (SSO), OAuth flows, application registrations, and enterprise app integrations within Entra ID.
  
• Collaborate with development teams to support Teams integrations, adaptive cards, and approval workflows.
  

Compliance, Finance & Automation

• Maintain email security protocols, anti-phishing measures, Data Loss Prevention (DLP) strategies, and vulnerability remediation efforts.
  
• Assist in security assessments, system hardening, and adherence to regulatory compliance standards.
  
• Collaborate with Finance and Procurement departments to process purchase orders, invoices, vendor payments, and license renewals.
  
• Drive process improvement and automation initiatives using PowerShell, AWS Lambda, and basic Python scripting.
  
• Ensure accurate record-keeping for IT assets, network diagrams, and operational documentation.
  

Requirements

Technical Expertise

• Network & Security: Proficiency with FortiGate firewalls, VPNs, Cloudflare (DNS, CDN, WAF, SSL), DNS routing, and proxy configurations.
  
• Cloud Computing: Deep experience with AWS services including EC2, S3, VPC, RDS/Aurora, IAM, Route 53, Lambda, EventBridge, and SSM.
  
• Microsoft 365: Strong administration skills for Exchange Online, Entra ID (SSO/OAuth), Intune, Teams, SharePoint, and CSP licensing models.
  
• Endpoint Security: Expertise in Microsoft Defender, Trellix EDR/XDR, Group Policy, Windows hardening, and DLP implementation.
  
• Server & Hosting: Competence in managing Windows Server, Active Directory, IIS, SQL Server, MySQL, and HostGator/cPanel environments.
  
• Automation: Advanced PowerShell scripting capabilities, familiarity with AWS Lambda/EventBridge, and basic Python programming skills.
  
• Applications & Integration: Knowledge of REST APIs, SSO/OAuth protocols, Teams application development, and web application infrastructure.
  
• IT Operations: Experience in asset management, licensing administration, vendor management, and incident/change management frameworks.
  

Professional Attributes

• Demonstrated history of managing a full-spectrum IT environment in a live corporate setting, rather than isolated components.
  
• Exceptional troubleshooting abilities spanning network, DNS, SSL, cloud, and application layers.
  
• A security-first mindset with the ability to implement least-privilege principles and compliance controls effectively.
  
• Self-motivated professional capable of planning, documenting, and executing complex changes independently.
  
• Strong communication skills for interacting with vendors, finance teams, and non-technical stakeholders.
  
• Relevant certifications such as AWS Solutions Architect, AWS SysOps, Fortinet NSE, Microsoft MS-102, or AZ-104 are highly desirable.
  

Key Performance Objectives

• Ensure maximum uptime and high availability for network, cloud, hosting, and Microsoft 365 services.
  
• Maintain secure and compliant endpoints, servers, identities, and public-facing applications.
  
• Reduce the frequency of recurring incidents through proactive monitoring, automation, and thorough root-cause analysis.
  
• Optimize infrastructure and licensing expenditures through strategic cost management and timely renewals.