Infrastructure & Security Engineer

Mercola; India; Remote; INR 1,200,000 - 1,800,000; Full time

Job summary

Mercola is seeking a seasoned Infrastructure Engineer to own and improve the product estate. You will operate across Azure, AWS, and virtualization, ensuring security, reliability, and operability. You will inventory environments, deploy paths, and automate steps while maintaining robust access controls.

You will build runbooks, document incidents with factual data, and review AI-assisted deployments to ensure safe and auditable changes within a remote India-based setup.

Qualifications

• Read application source and build tooling, not only admin tasks.
• 1" Read and write code to automate tasks.
• 2" Proficiency across Windows Server, Linux, web stack, relational databases, and networking fundamentals.
• 3" Strong scripting in PowerShell, Python, or Bash; Git; and hands-on CI/CD experience.
• 4" Azure or AWS with working knowledge of the other.
• 5" Manage Kubernetes workloads: read manifests, deploy, and rollback.
• 6" Active Directory and Entra ID administration incl. SSO and MFA.
• 7" Hands-on security practices for access, secrets, patching, logs, and audits.
• 8" API literacy and ability to review AI-driven changes with sound judgment.

Responsibilities

• Operate product infrastructure across Azure, AWS, and virtualized Windows and Linux hosts with IT.

Skills

Dev tooling

Windows & Linux

Web stack

Relational databases

Networking basics

PowerShell

Python

Bash

Git

CI/CD

Kubernetes

Active Directory & Entra ID

SSO & MFA

AI agent usage & review

English writing

Tools

Azure

AWS

Terraform

Ansible

Bicep

Microsoft 365

Defender

SIEM

Job description

You know the moment: a stubborn problem finally makes sense. You find the hidden cause, prove it, and make sure it cannot quietly return.

Here, that satisfaction becomes your everyday work. You’ll turn uncertainty into clarity. You’ll make overlooked systems understandable, dependable, and safe. When something has been held together by memory and luck, you’ll give it a future others can trust.

You’ll feel the pride of protecting experiences people rely on, even when they never see your work.

You’ll give fellow engineers the freedom to build instead of chasing the same failures again. Your curiosity will uncover risks before they become someone else’s crisis.

You’ll set a new standard for how thoughtfully a product can be cared for. You’ll build a legacy in the problems that stay solved, the people who can carry your work forward, and the confidence your judgment earns.

If you love finding the truth and leaving things stronger, this is yours.

ROLE SNAPSHOT

• Location/Schedule: India, remote; full-time, India hours with a US overlap and daily standup
• Reports to: Director, Technology Engineering Operations (India)
• Purpose: Own the infrastructure that products depend on and improve its security, reliability, and operability across cloud and on-premise systems.

KEY RESPONSIBILITIES

• Operate product infrastructure across Azure, AWS, and virtualized Windows and Linux hosts in partnership with IT.
• Inventory environments, deployments, configuration, access, and unused resources so the estate can be understood and maintained.
• Own deployment paths, automate undocumented steps, and test rollback and backup restoration.
• Maintain product edge and identity controls, including DNS, certificates, access reviews, service accounts, and joiner, mover, and leaver processes.
• Put secrets in a vault; establish patching, vulnerability closure, logging, audit trails, and least privilege as working practices.
• Build tools that fetch live state, write usable runbooks, and document incidents with measured facts clearly separated from reports and inferences.
• Review the safety of work produced with AI agents, including changes proposed for deployment.

MUST-HAVE QUALIFICATIONS

• Development experience: you can read application source and build useful tooling, rather than only administer systems or write procedures.
• Working proficiency across Windows Server, Linux, a web application stack, relational databases, and networking fundamentals.
• Strong scripting in PowerShell, Python, or Bash; Git; and hands‑on use of at least one CI/CD system.
• Administrator‑level virtualization experience and enterprise backup experience that includes a restore you personally performed.
• Depth in Azure or AWS and working knowledge of the other.
• Ability to operate managed Kubernetes workloads: read manifests, establish the running image and configuration, deploy, and roll back.
• Practical Active Directory and Entra ID administration, including groups, service accounts, single sign‑on, and multi‑factor authentication.
• Hands‑on security practice involving access, secrets, patching, certificates, useful audit logs, and exposure‑based prioritization.
• API literacy, systematic troubleshooting, current hands‑on use of AI agents with sound review judgment, and clear written English.

Around three to six years of relevant work is indicative, not a cutoff. A degree, a particular job title, and years in every listed technology are not required.

PREFERRED QUALIFICATIONS

• Terraform, Ansible, or Bicep.
• Microsoft 365, conditional access, and Defender administration.
• Next‑generation firewall administration; central logging or SIEM; vulnerability scanning; monitoring and alert improvement.
• Relevant security, cloud, virtualization, or networking certifications.
• Penetration‑testing exposure, access‑review ownership, or closure of penetration‑test findings.
• PCI DSS or HIPAA exposure, commerce or ERP infrastructure, or experience making a single‑owner system operable by others.

WHAT WE OFFER

• Remote work from India, with India hours and a US overlap.
• Hands‑on ownership of the product estate, with support and a clear working boundary with IT.
• Room to investigate, build tooling, improve security, and make systems maintainable by more than one person.
• A team where reporting an exposure is encouraged and evidence‑based incident work is expected.
• Occasional genuine out‑of‑hours incident work that is recognized; the JD does not describe a nightly on‑call rota.

HONEST CHALLENGE

A meaningful part of the first year involves discovering how undocumented environments actually work. You will receive broad production access early, including systems involving health and payment data, and must use it with discretion. Success means closing risks and leaving an auditable trail, not merely finding problems. The short ~5-minute application step asks for concrete examples of your work.

READY TO JUMP IN?

Mercola welcomes applicants of every background, identity, and life experience.