Infrastructure Manager

Kotak Mahindra Bank; Mumbai, Navi Mumbai; On-site; INR 3,500,000 - 6,000,000; Full time

Job summary

Kotak Mahindra Bank is seeking an Infrastructure Manager to lead identity services, VDI, Intune and endpoint management, and file services. The role emphasizes governance, security, and regulatory compliance across critical infrastructure platforms used by business and customer-facing services.

You will drive design, operation, and continual improvement, ensuring high availability, audit readiness, and cyber resilience while coordinating with internal teams and vendors.

Qualifications

• 9-15+ years of experience in enterprise infrastructure operations.
• Minimum five years of experience managing AD, endpoint, or VDI teams.
• Experience in large banking, BFSI, or other highly regulated environments.
• Proven experience supporting audits, regulatory reviews, cyber security assessments, and disaster recovery exercises.
• Role requires design, operation, governance, security, compliance and audit readiness of critical infrastructure.

Responsibilities

• Active Directory & Identity Services management across forests, domains, sites, trusts and GPOs.
• Oversee ADFS, Entra ID, MFA, SSO, CA, and identity lifecycle controls.
• VDI management with Citrix/Azure Virtual Desktop, ensuring scalability and availability.
• Intune & Endpoint Management including MDM, MAM, Autopilot, and device compliance.
• File Services: Windows File Servers, DFS, quotas, and storage governance.
• Infrastructure governance: 24x7 availability, SLAs, KPIs, runbooks, and incident roots.
• Security, risk & compliance aligned to RBI, ISO27001, CIS, audits, and remediation.

Tools

Active Directory

ADFS

Entra ID

Group Policy

Intune

MDM/MAM

VDI administration

Windows Server

File Server/DFS

DNS/DHCP

PowerShell

PKI

MFA/CA

Microsoft Defender

SCCM/MECM

Azure Infra

SIEM

Automation scripting

Job description

Designation: Infrastructure Manager

Location: Mumbai/ Navi Mumbai

Years of experience: 9 to 15 Years

JOB DESCRIPTION: Identity, Virtual Desktop & Endpoint Infrastructure

Role Purpose:

The role is responsible for the design, operation, governance, security, compliance, and continual improvement of the Bank's Identity Services, Virtual Desktop Infrastructure (VDI), Microsoft Intune, Endpoint Management, and Enterprise File Services. The position ensures high availability, regulatory compliance, cyber resilience, operational excellence, and audit readiness across critical infrastructure platforms supporting business and customer-facing services.

Key Responsibilities:

1. Active Directory & Identity Services

Manage enterprise Active Directory infrastructure, including forests, domains, sites, trusts, Group Policies, DNS integration, and Domain Controllers.

Administer ADFS, Microsoft Entra ID, Microsoft Entra Connect, federation services, MFA, SSO, Conditional Access, and authentication platforms.

Oversee identity lifecycle management, Privileged Access Management (PAM), role-based access control (RBAC), and delegated administration.

Ensure compliance with Microsoft security best practices, CIS benchmarks, RBI guidelines, and internal security standards.

Lead NTLM reduction, LDAPS enforcement, Kerberos hardening, and authentication modernisation initiatives.

Conduct periodic reviews of privileged accounts, service accounts, Group Policy Objects, trust relationships, and Active Directory security posture.

2. Virtual Desktop Infrastructure (VDI)

Manage Citrix, Azure Virtual Desktop, or enterprise VDI environments supporting internal users and automation workloads.

Ensure VDI platform scalability, availability, performance optimisation, and capacity planning.

Implement endpoint security controls for VDI environments.

Drive automation initiatives to enhance provisioning, monitoring, and user experience.

Conduct disaster recovery drills, patch management, and business continuity testing.

3. Microsoft Intune & Endpoint Management

Manage Microsoft Intune, Mobile Device Management (MDM), Mobile Application Management (MAM), Windows Autopilot, compliance policies, and configuration profiles.

Implement and maintain security baselines, device compliance frameworks, and endpoint protection controls.

Lead mobile device governance across iOS, Android, Windows, and BYOD deployments.

Support endpoint hardening initiatives including Microsoft Defender, BitLocker, Windows LAPS, and Zero Trust controls.

Ensure enterprise device inventory accuracy and compliance reporting.

4. Enterprise File Services ( File Server)

Manage Windows File Servers, Distributed File System (DFS), permissions, quota management, and storage governance.

Design and maintain file-sharing architecture aligned with regulatory and security requirements.

Implement data classification, access reviews, file server audits, and backup validation.

Coordinate disaster recovery, restoration testing, and business continuity exercises.

5. Infrastructure Governance & Operations

Ensure 24x7 availability of critical infrastructure services.

Drive service-level agreement (SLA), key performance indicator (KPI), and service improvement initiatives.

Develop and maintain operational runbooks, standard operating procedures, architecture documents, and support procedures.

Manage infrastructure patching, vulnerability remediation, capacity planning, and lifecycle management.

Lead root cause analysis for major incidents and ensure timely resolution.

6. Security, Risk & Compliance

Ensure infrastructure alignment with the RBI Cyber Security Framework, ISO/IEC 27001, internal audit requirements, CIS Security Benchmarks, and the Bank's information security policies.

Support regulatory inspections, internal audits, and external audits.

Manage remediation of audit findings and security observations.

Maintain infrastructure evidence repositories and compliance dashboards.

7. Vendor & Team Management

Lead internal and vendor support teams.

Define operational KPIs, service standards, and control requirements.

Manage OEM engagements, renewals, infrastructure upgrades, and strategic projects.

Mentor engineers and develop technical capabilities across the team.

Required Technical Skills

Must Have:

1. Microsoft Active Directory (Windows Server 2016/2019/2022)
2. ADFS and federation services
3. Microsoft Entra ID and Microsoft Entra Connect
4. Group Policy management
5. Microsoft Intune, MDM, and MAM
6. Endpoint security and compliance
7. Citrix / Azure Virtual Desktop / enterprise VDI administration
8. Windows Server administration
9. File Server and DFS technologies
10. DNS and DHCP
11. PowerShell automation
12. Public Key Infrastructure (PKI) and Certificate Services
13. MFA and Conditional Access

Good to Have:

1. Microsoft Defender suite
2. Microsoft 365 administration
3. Privileged Access Management
4. Microsoft Configuration Manager (SCCM / MECM)
5. Azure infrastructure services
6. SIEM and security monitoring
7. Infrastructure automation and scripting

Experience:

9-15+ years of experience in enterprise infrastructure operations.

Minimum five years of experience managing Active Directory, endpoint, or VDI teams.

Experience in large banking, BFSI, or other highly regulated environments.

Proven experience supporting audits, regulatory reviews, cyber security assessments, and disaster recovery exercises.