IT Infrastrcture and Security Engineer

Mawai Infotech; Dadri; Hybrid; INR 1,200,000 - 1,800,000; Full time

Job summary

Mawai Infotech is seeking a security-focused IT Infrastructure Engineer to protect data, endpoints, network and email systems from threats. The role blends hands-on infrastructure management with ownership of DLP, endpoint protection, network security and threat response across office, remote, and client sites.

You will deploy and monitor DLP policies, manage Windows and Office 365 security, administer EDR/antivirus, firewall rules, and incident response with least-privilege access.

Qualifications

• Graduate in IT, CS or related field
• Certifications such as Security+ or CCNA are a plus
• Hands-on experience with DLP, EDR/AV, and MFA
• Experience administering Microsoft 365, Exchange Online and Teams

Responsibilities

• Deploy, monitor and enforce DLP across endpoints, email, and cloud storage
• Manage laptop/Desktop provisioning, patching and device security
• Configure and review firewall rules; monitor network activity
• Administer Microsoft 365 security, anti-phishing and MFA
• Handle access provisioning and least-privilege enforcement; incident response

Skills

Windows administration

MS 365 administration

Excel & reporting

Networking basics

Threat detection & response

Access control & MFA

IT asset management

Policy enforcement

Education

Graduate in IT/Computer Science or related field

Tools

Microsoft Purview (DLP)

EDR/AV platforms (Defender/CrowdStrike)

Microsoft 365 security tools

Fortinet/Sophos/Cisco Firewalls

Job description

Role & responsibilities :

We are looking for a security-focused IT Infrastructure Engineer to protect the organizations data, endpoints, network and email systems from security threats. The role combines hands‑on infrastructure management with ownership of DLP, endpoint protection, network security and threat response. It supports employees and SAP consultants working in the office, remotely and at client sites.

Data Loss Prevention (DLP) & Data Security

• Deploy, configure and monitor DLP policies across endpoints, email, cloud storage and removable media.
• Investigate DLP alerts, policy violations and data exfiltration attempts, and enforce controls on USB, file sharing and sensitive data movement.

Endpoint & Laptop Security

• Manage laptop and desktop provisioning, hardening and lifecycle, including Windows setup, patching, BitLocker encryption and application control.
• Administer antivirus and EDR/XDR solutions, respond to malware detections, and keep all devices compliant with security policy.

Network & Firewall Security

• Manage and monitor firewalls, VPN, LAN/Wi‑Fi and network access controls, and review firewall rules regularly.
• Detect and respond to suspicious network activity, unauthorized access and intrusion attempts.

Email & Microsoft 365 Security

• Administer email accounts and Microsoft 365, including MS Office, Exchange, OneDrive and Teams.
• Configure and maintain email security controls such as anti‑phishing, anti‑spam, SPF, DKIM, DMARC and MFA, and investigate phishing and suspicious emails.

Access Management & Incident Response

• Control user access provisioning and revocation through onboarding and offboarding, following least‑privilege principles.
• Log, investigate, remediate and es... security incidents, and maintain incident records and root‑cause reports.

Compliance, Assets & Documentation

• Maintain IT asset registers, security trackers, SOPs and audit records, storing credentials only in approved secure vaults.
• Support internal audits, security reviews and compliance checks, and run user security awareness activities.

Preferred candidate profile :

• Expert‑level knowledge of Windows 10/11 administration, troubleshooting, Group Policy and Intune or similar endpoint management.
• Strong MS Office and Microsoft 365 support and administration skills, including Outlook, Exchange Online, Teams and OneDrive.
• Hands‑on experience with laptop and desktop hardware troubleshooting, imaging and IT asset management.
• Solid networking knowledge (TCP/IP, DNS, DHCP, VLANs, VPN) and firewalls such as Fortinet, Sophos, Palo Alto or Cisco.
• Practical experience with DLP tools such as Microsoft Purview, Forcepoint, Symantec or Trellix.
• Experience with EDR/antivirus platforms like Microsoft Defender, CrowdStrike, Sophos or Trend Micro.
• Good understanding of threat detection, incident response, MFA, encryption and access control.
• Good MS Excel skills for inventory, tracking and reporting.

Preferred Qualifications

• Graduate in IT, Computer Science or a related field.
• Certifications such as Microsoft MD-102/MS-102/SC-400, CompTIA Security+, CCNA or vendor‑specific DLP/firewall certifications.
• Exposure to SIEM tools and ISO 27001 practices.

Working Requirements

• Available on two Saturdays a month, per company schedule.
• Willing to travel to client locations when required.
• Able to respond promptly to urgent support requests, network outages and security incidents.

The main changes are a new IT Infrastructure Management section, a dedicated Windows & MS Office consultant support section, and Windows/Microsoft 365 skills moved to the top of the required skills list.