Infrastructure Engineer

GraniteShares ETFs; Delhi; Hybrid; INR 11,342,000 - 17,013,000; Full time

Job summary

GraniteShares ETFs is seeking an Infrastructure Engineer (Azure) for a hybrid remote position reporting to the CTO. You will run and optimise Azure workloads, secure networking, and automate routine tasks while drafting IT and cloud policies.

The role covers global teams in the US, Europe and Asia-Pacific and requires strong Azure expertise, policy governance and disaster recovery planning. You will manage Azure environments end-to-end, ensure compliance with security standards, and contribute

Qualifications

• 3+ years in infrastructure engineering or systems administration with production Azure workloads.
• Strong Azure skills across compute, storage, networking, Azure SQL, Key Vault and monitoring.
• Hands-on Entra ID and Microsoft 365 administration including conditional access, MFA and Intune.
• Experience with backup, disaster recovery and Azure Site Recovery.
• Proven ability to write and enforce IT policies and RBAC-based controls.

Responsibilities

• Design, build and operate Azure environments (VMs, App Services, Azure SQL, storage, Key Vault, Functions).
• Manage subscriptions, management groups, resource groups and landing zones per CAF guidance.
• Monitor performance with Azure Monitor, Log Analytics and Application Insights; optimize for reliability and cost.
• Configure secure networking (VNets, NSGs, Azure Firewall, VPNs, Private Endpoints, DNS) and IAM.
• Lead capacity planning, DR planning and security reviews; automate with Terraform/Bicep and CI/CD pipelines.

Skills

Communication

Independent working

Security mindset

Troubleshooting

Education

AZ-104 Certification

AZ-305 Certification

AZ-500 Certification

Tools

Azure

Azure DevOps

Microsoft Entra ID

Kubernetes

Job description

The Infrastructure Engineer (Azure) is a hybrid remote role reports to the CTO and works across technology, operations and business teams in the US, Europe and Asia-Pacific.

Day to day, you will run and optimise Azure workloads, keep networking secure and reliable, resolve infrastructure incidents and service requests, and automate routine tasks. You will also write and maintain the IT and cloud policies that keep the environment secure, compliant and auditable, and lead capacity planning, disaster recovery and security reviews.

Location: Hybrid / remote

Reports to: Chief Technology Officer

Employment type: Full-time

Key responsibilities

Role overview

The Infrastructure Engineer (Azure) is a hybrid remote role reports to the CTO and works across technology, operations and business teams in the US, Europe and Asia-Pacific.

Day to day, you will run and optimise Azure workloads, keep networking secure and reliable, resolve infrastructure incidents and service requests, and automate routine tasks. You will also write and maintain the IT and cloud policies that keep the environment secure, compliant and auditable, and lead capacity planning, disaster recovery and security reviews.

Location: Hybrid / remote

Reports to: Chief Technology Officer

Employment type: Full-time

Key responsibilities

Azure infrastructure and operations

• Design, build and operate Azure environments, including virtual machines, App Services, Azure SQL, storage accounts, Key Vault and Azure Functions.
• Manage Azure subscriptions, management groups, resource groups and landing zones in line with the Microsoft Cloud Adoption Framework.
• Monitor performance and availability using Azure Monitor, Log Analytics and Application Insights, and tune workloads for reliability and cost.
• Manage patching, backups and configuration for Windows and Linux servers, cloud and remaining on-premises.
• Resolve infrastructure incidents and service requests, and carry out root-cause analysis.

Networking and security

• Configure and secure Azure networking: VNets, NSGs, Azure Firewall, VPN gateways, Private Endpoints and DNS.
• Administer Microsoft Entra ID (Azure AD): identities, groups, conditional access, MFA and Privileged Identity Management.
• Operate Microsoft Defender for Cloud and Defender for Endpoint, and act on security recommendations and alerts.
• Manage Microsoft 365 security settings, including Intune device management, email security and data loss prevention.

Governance, policy and compliance

• Write, implement and maintain IT and cloud policies, standards and procedures (see the next section).
• Enforce policy technically through Azure Policy, management group hierarchy, RBAC, tagging standards and resource locks.
• Maintain evidence and documentation for internal audit, regulators and counterparties, including due diligence questionnaires.
• Run periodic access reviews, security reviews and policy compliance reporting for the CTO.

Automation and resilience

• Automate provisioning and routine tasks using Terraform or Bicep, PowerShell and Azure DevOps or GitHub Actions pipelines.
• Plan and test disaster recovery and business continuity using Azure Backup and Azure Site Recovery.
• Lead capacity planning and cost management, using Azure Cost Management and reservations.
• Support new product and platform launches across US, European and Asia-Pacific markets.

Policies and standards you will own

You will draft, implement and review these policies with the CTO, IT team and compliance, and keep them current at least annually.

Policy / standard

What it covers

• Information security policy
• Overall security principles, roles and responsibilities
• Access control and identity policy
• Joiners, movers and leavers; MFA; least privilege; privileged access; access reviews
• Cloud governance and Azure usage standard
• Subscription structure, naming and tagging, approved services and regions, Azure Policy baselines
• Password and authentication policy
• Password rules, MFA, passwordless and service account credentials
• Network security policy
• Segmentation, firewall rules, remote access and VPN, change control on network rules
• Patch and vulnerability management policy
• Patching cadence, severity-based remediation timelines, exception handling
• Backup, disaster recovery and business continuity policy
• Backup scope and retention, RPO and RTO targets, DR test schedule
• Change management policy
• Change requests, approvals, testing and rollback
• Incident response policy
• Detection, escalation, communication and post-incident review
• Data protection and encryption policy
• Data classification, encryption at rest and in transit, key management, DLP
• Logging and monitoring policy
• What is logged, retention periods, alert ownership
• Acceptable use and endpoint policy
• Use of company devices, Intune compliance, removable media
• Third-party and vendor access policy
• Access for vendors, service providers and counterparties

Qualifications

Required

• 3+ years in infrastructure engineering or systems administration, with at least 3 years running production workloads in Microsoft Azure.
• Strong Azure skills across compute, storage, networking, Azure SQL, Key Vault and monitoring.
• Hands-on Microsoft Entra ID and Microsoft 365 administration, including conditional access, MFA and Intune.
• System administration skills: Windows Server and Linux configuration, patching, user management and performance tuning.
• Networking skills: routing, switching, VPNs, DNS and network performance monitoring.
• Network security skills: firewall configuration, access controls, encryption and security best practice.
• Proven experience writing and enforcing IT policies, standards and procedures, including through Azure Policy and RBAC.
• Experience with backup, disaster recovery and Azure Site Recovery.
• Strong troubleshooting skills on complex technical issues.

Desirable

• Microsoft certifications such as AZ-104 (Azure Administrator), AZ-305 (Azure Solutions Architect), AZ-500 (Azure Security Engineer) or SC-300 (Identity and Access Administrator).
• Familiarity with security frameworks such as ISO 27001, NIST CSF, CIS Benchmarks or SOC 2.

Personal attributes

• Clear written and verbal communication, including documentation for non-technical readers.
• Able to work independently in a remote setting and across time zones.
• Committed to security, reliability and continuous improvement, with a proactive approach to spotting risk.