IT Engineer

Risa Labs Inc; Bengaluru; On-site; INR 800,000 - 1,200,000; Full time

Job summary

Risa Labs Inc is seeking an IT Operations and Infrastructure professional in Bengaluru to manage servers, networks, endpoints, and enterprise apps. The role emphasizes cloud security on the GCP platform, IAM controls, and robust device management.

You will implement patching, DR testing, incident response, and automation to improve efficiency. Onsite support for Windows/macOS and active participation in asset inventory and security controls is required.

Qualifications

• Experience with network administration, endpoint management, and IT security operations.

Responsibilities

• IT Operations & Infrastructure Management: Manage and maintain IT infrastructure including servers, networks, endpoints, storage, and enterprise applications.
• IT Operations & Infrastructure Management: Perform system configuration, upgrades, and maintenance to ensure performance, availability, and security.
• IT Operations & Infrastructure Management: Manage endpoint provisioning, configuration, lifecycle management, and installation of mandatory security software during onboarding.
• IT Operations & Infrastructure Management: Follow change management processes for system updates, configurations, and infrastructure changes.
• IT Operations & Infrastructure Management: Maintain IT asset inventory, documentation, and system configuration baselines.
• IT Operations & Infrastructure Management: Maintain system documentation, SOPs and audit evidence for security and infrastructure controls.
• Cloud Infrastructure, Monitoring & Security Management: Manage and secure cloud infrastructure across the GCP environment.
• Cloud Infrastructure, Monitoring & Security Management: Configure IAM policies, network security controls, and cloud security configurations.
• Cloud Infrastructure, Monitoring & Security Management: Manage backup, high availability, business continuity, and disaster recovery configurations and testing while ensuring defined RPO/RTO objectives.
• Cloud Infrastructure, Monitoring & Security Management: Conduct periodic access reviews, monitor resource utilization, and support cloud cost optimization.
• Cloud Infrastructure, Monitoring & Security Management: Configure and maintain centralized logging and monitoring systems, including alerting and log retention.
• Cloud Infrastructure, Monitoring & Security Management: Monitor network activity and security events to identify and respond to potential threats.
• Identity & Access Management: Manage user provisioning, modification, and deprovisioning across enterprise systems.
• Identity & Access Management: Implement authentication controls including MFA, SSO, and secure password policies.
• Identity & Access Management: Monitor privileged access and enforce access approval workflows and segregation of duties.
• Identity & Access Management: Manage access and security configurations for SaaS applications and third-party tools.
• Endpoint Security & Device Management: Deploy, configure, and manage endpoint security and device management solutions, including EDR/XDR, DLP, antivirus, VPN, and MDM tools such as Trend Micro and ManageEngine, to enforce IT security policies.
• Endpoint Security & Device Management: Manage OS and application patching, security updates, vulnerability remediation, and device encryption across endpoints and IT infrastructure.
• Endpoint Security & Device Management: Install, configure, upgrade, and maintain Windows/macOS operating systems, drivers, and business applications, including OS re-imaging and reinstallation.
• Endpoint Security & Device Management: Manage onboarding/offboarding, including laptop provisioning, account creation, and security agent installation, plus asset collection and revocation.
• Endpoint Security & Device Management: Manage laptop lifecycle, including procurement, inventory, maintenance, and returns.
• Endpoint Security & Device Management: Provide onsite and remote L1/L2 support for laptops, desktops, peripherals, and business apps.
• Endpoint Security & Device Management: Diagnose and resolve hardware, software, and performance issues.
• Endpoint Security & Device Management: Troubleshoot Wi-Fi, LAN, VPN, email, printer, and collaboration tools.
• Endpoint Security & Device Management: Resolve user access issues, including locks, passwords, and MFA.
• Endpoint Security & Device Management: Back up, recover, and migrate data during device upgrades and transitions.
• Endpoint Security & Device Management: Log, prioritize, track, and resolve tickets within SLAs, escalate as needed.
• Endpoint Security & Device Management: Liaise with vendors and OEMs for procurement and AMC SLAs.
• Endpoint Security & Device Management: Maintain knowledge base of common issues and resolutions.

Skills

Network administration

GCP cloud

MDM tools

IAM systems

Network security & firewall

GCP incident response

Patch & vulnerability mgmt

Backup & DR testing

Asset inventory & config

REST APIs & scripting

Windows/macOS troubleshooting

Helpdesk/L1-L2 support

Tools

Trend Micro

ManageEngine

Job description

Mandatory Skill Set :

1. Experience with network administration, endpoint management, and IT security operations
2. Hands-on experience with cloud platform (GCP) and hybrid infrastructure environments
3. Implementation and management of MDM (VPN, DLP, EDR) tools.
4. Experience with Identity & Access Management systems
5. Knowledge of network security technologies and firewall management
6. Experience in incident response of alerts in the GCP
7. Knowledge of patch management, vulnerability management, and system hardening
8. Experience with backup, disaster recovery planning, and DR testing
9. Ability to maintain asset inventory and system configuration records
10. Familiarity with REST APIs and basic scripting (Python/Bash) to support internal automation initiatives.
11. Strong hands-on experience in laptop/desktop troubleshooting across Windows and macOS (hardware, OS, software, drivers, and peripherals)
12. Experience providing L1/L2 end-user IT support via helpdesk/ticketing tools with adherence to SLAs

Roles & Responsibilities :

1. IT Operations & Infrastructure Management

• Manage and maintain IT infrastructure including servers, networks, endpoints, storage, and enterprise applications.
• Perform system configuration, upgrades, and maintenance to ensure performance, availability, and security.
• Manage endpoint provisioning, configuration, lifecycle management, and installation of mandatory security software during onboarding.
• Follow change management processes for system updates, configurations, and infrastructure changes.
• Maintain IT asset inventory, documentation, and system configuration baselines.
• Maintain system documentation, SOPs and audit evidence for security and infrastructure controls.

2. Cloud Infrastructure, Monitoring & Security Management

• Manage and secure cloud infrastructure across the GCP environment.
• Configure IAM policies, network security controls, and cloud security configurations.
• Manage backup, high availability, business continuity, and disaster recovery configurations and testing while ensuring defined RPO/RTO objectives.
• Conduct periodic access reviews, monitor resource utilization, and support cloud cost optimization.
• Configure and maintain centralized logging and monitoring systems, including alerting and log retention.
• Monitor network activity and security events to identify and respond to potential threats.
• Monitor IT systems and security tools to detect suspicious activities and security incidents.
• Develop automation scripts to improve operational efficiency and reduce manual effort.

3. Identity & Access Management

• Manage user provisioning, modification, and deprovisioning across enterprise systems.
• Implement authentication controls including MFA, SSO, and secure password policies.
• Monitor privileged access and enforce access approval workflows and segregation of duties.
• Manage access and security configurations for SaaS applications and third-party tools.

4. Endpoint Security & Device Management

1. Deploy, configure, and manage endpoint security and device management solutions, including EDR/XDR, DLP, antivirus, VPN, and MDM tools such as Trend Micro and ManageEngine, to enforce IT security policies.
2. Manage operating system and application patching, security updates, vulnerability remediation, and device encryption across endpoints and IT infrastructure.
3. Install, configure, upgrade, and maintain Windows/macOS operating systems, drivers, and business applications, including OS re-imaging and reinstallation.
4. Manage end-to-end IT onboarding and offboarding, including laptop provisioning, account creation, access configuration, and security agent installation for new joiners, as well as asset collection, data backup, secure device wiping, and access revocation for departing employees.
5. Manage the laptop lifecycle, including procurement coordination, allocation, inventory tracking, maintenance, repairs, replacements, and returns.
6. Provide onsite and remote L1/L2 technical support for laptops, desktops, peripherals, and business applications.
7. Diagnose and resolve laptop hardware, software, and performance issues, including startup, battery, charging, storage, operating system, and driver problems.
8. Troubleshoot Wi-Fi, LAN, VPN, remote access, email, printer, and collaboration tool issues.
9. Resolve user access issues, including account lockouts, password resets, permissions, and multi-factor authentication.
10. Perform data backup, recovery, and migration during device upgrades, replacements, and employee transitions in accordance with IT policies.
11. Log, prioritize, track, and resolve support tickets within defined SLAs, escalating complex issues to internal IT teams, vendors, or OEMs as required.
12. Act as the primary point of contact for laptop vendors and OEMs, coordinating procurement, warranty claims, repairs, replacements, and Annual Maintenance Contract (AMC) obligations, and tracking service SLAs through closure.
13. Maintain a knowledge base of common issues, troubleshooting procedures, and resolutions to improve first-time fix rates and support efficiency.