Senior Infrastructure & Security Engineer

Mercola; India; Remote; INR 2,500,000 - 4,500,000; Full time

Benefits offered by this job

Remote work from India

Ownership and engineering autonomy

Contribute to on-prem AI platform

Hybrid collaboration with infra team

Job summary

Mercola is seeking a Senior Infrastructure & Security Engineer to own the infrastructure and security posture powering its on-premise AI platform. You will modernize platforms, migrate from VMware to Proxmox, and build resilient, observable systems.

You will collaborate across Windows, Linux, AD, and network domains, write automation, and craft runbooks so another engineer can operate each system. This role follows India hours with US overlap and remote work from India.

Qualifications

• Five to eight years of relevant experience is indicative.
• Windows Server and Active Directory administration experience required.
• VMware administration, storage and backup experience required.
• Enterprise networking and firewall administration experience required.
• Tool-building ability with PowerShell, Python or Bash to automate live systems.
• Linux experience with systemd, SSH, filesystems, and permissions.
• Cloud familiarity (AWS or Azure) to safely investigate live state.

Responsibilities

• Administer VMware and support the Proxmox migration, manage Windows and Linux hosts, patching and capacity.
• Own SAN and NAS infrastructure, storage-path resilience and backup coverage; perform restores and document verification.
• Diagnose networking faults across VLANs, routing, NAT, inter-site connectivity and firewall policy with evidence-based approach.
• Harden Active Directory and privileged access across two domains, including service accounts and access reviews.
• Improve secrets management, certificate lifecycle, vulnerability remediation and visibility into internet exposure.
• Own the infrastructure beneath IIS, .NET and SQL Server services with application owners and DBAs.
• Build and operate infrastructure for GPU systems, knowledge services and authenticated gateways with restricted data access.
• Write automation against live system data, maintain inventory and create runbooks for operability by another engineer.

Skills

PowerShell

Python

Bash

Linux

Windows Server

Active Directory

VMware

Proxmox

Terraform

Ansible

AWS

Azure

Automation

Education

Computer science degree

Tools

Proxmox

KVM

Fortinet firewall

Terraform

Ansible

Bicep

AWS

Azure

Job description

There’s a particular satisfaction in finding the answer everyone else has been circling.

You follow the evidence. The pieces connect. People can move forward again.

As our Senior Infrastructure & Security Engineer, you’ll turn that feeling into work you can be proud of.

Imagine bringing clarity to something once understood by only one person. Feeling the relief your judgment creates when others need certainty. Watching a teammate succeed because you made the difficult understandable.

Your curiosity will have room to roam. Your decisions will leave a visible mark. And you’ll see your ideas become lasting improvements people experience every day.

You’ll protect the trust behind everyday experiences.

You’ll set a new standard for what dependable can feel like.

You’ll help shape a future where bold ideas stand on foundations people believe in.

Build confidence that lasts. Leave others stronger.

Role Snapshot

Location: India, remote. No relocation or datacenter visits required.

Employment: Full-time.

Hours: India hours with US overlap and a daily standup during that overlap. Occasional incidents outside normal hours; no nightly on-call rota.

Reports to: Director, Technology & Engineering Operations.

Purpose: Own the infrastructure our products depend on and its security posture. Help complete a datacenter consolidation, migrate from VMware to Proxmox, modernize established application platforms and build the infrastructure supporting our on-premise artificial intelligence platform.

You will work alongside the IT infrastructure and security team, which owns the corporate network, datacenters and physical estate.

Key Responsibilities

• Administer VMware, support the Proxmox migration, and manage Windows and Linux hosts, patching and capacity.


• Own SAN and NAS infrastructure, storage-path resilience and backup coverage; personally perform restores and document what you verified.


• Diagnose networking faults across VLANs, routing, NAT, inter-site connectivity and firewall policy using evidence that establishes the failing layer.


• Harden Active Directory and privileged access across two domains and their trust, including service accounts, access reviews and joiner/leaver controls.


• Improve secrets management, certificate lifecycle, vulnerability remediation and visibility into internet exposure.


• Own the infrastructure beneath IIS, .NET and SQL Server services in partnership with application owners and database administrators.


• Build and operate infrastructure for GPU systems, knowledge services, authenticated gateways and isolated environments, including tested restrictions on regulated-data access.


• Write automation against live system data, maintain an accurate inventory and create runbooks that enable a second person to operate each system.

Must-Have Qualifications

• Windows Server and Active Directory administration: Personally built, hardened and recovered environments involving domain controllers, DNS, Group Policy, delegation, privileged accounts and service accounts.


• VMware administration, storage and backup: Hands-on vSphere and vCenter administration, SAN or NAS experience, understanding of storage paths and redundancy, and an enterprise restore personally performed and verified.


• Enterprise networking and firewall administration: Practical IP addressing, subnetting, VLANs, routing, NAT, DNS, TLS and HTTP knowledge, plus Fortinet or an equivalent next-generation firewall.


• Tool-building ability: Strong PowerShell, Python or Bash used to build tooling against live systems and APIs. Ability to read application configuration and source where necessary to understand infrastructure behavior.


• Verification as a habit: Investigate read-only first, distinguish measurements from assumptions, document changes and acknowledge what remains unconfirmed.


• Working Linux proficiency covering systemd, SSH, packages, filesystems and permissions.


• Working familiarity with AWS or Azure sufficient to investigate live state and make a scoped change safely.


• Ability to own work independently and work India hours with US overlap.

Roughly five to eight years of relevant experience is indicative, not a screening gate. A computer science degree or a particular previous job title is not required.

Preferred Qualifications

Helpful experience includes:

• Proxmox, KVM and datacenter migration or consolidation.


• Entra ID, Microsoft 365, conditional access and Defender tooling.


• Endpoint detection, log analysis, vulnerability scanning and monitoring improvement.


• Terraform, Ansible or Bicep.


• Operating managed Kubernetes deployments and rollbacks.


• SQL Server backup chains, recovery and performance investigation.


• PCI DSS or HIPAA control exposure.


• Relevant infrastructure, networking or security certifications, or penetration-testing experience.


• Using artificial intelligence agents for diagnosis, scripting and analysis while independently checking their output.

These are preferences, not additional mandatory requirements.

What We Offer

• Remote work from India without relocation or datacenter travel.


• Meaningful ownership with support from engineering and infrastructure colleagues.


• The opportunity to improve an established estate while helping build a new on-premise artificial intelligence platform.


• Work where investigation, engineering judgment and shared knowledge matter.


• India working hours with US overlap, with occasional genuine incidents outside hours recognized rather than assumed.

Honest Challenge

You will inherit unfinished migrations, older Windows and SQL Server platforms, legacy applications, uneven security coverage and monitoring spread across several tools. Some systems are documented better than they are understood.

The first year includes substantial discovery alongside delivery. You will need to establish what is actually deployed, prove recovery works and turn knowledge held by individuals into usable runbooks. You will have support, but you are expected to carry work independently.

Mercola welcomes applicants of every background, identity, and life experience.