Storage and Backup Engineer - Night Shift

Gemological Institute of America; Mumbai; On-site; INR 1,200,000 - 2,200,000; Full time

Job summary

The Gemological Institute of America in Mumbai is seeking a Storage and Backup Engineer to protect and recover data across on-premises and cloud environments. You will manage Rubrik, Veeam, NetBackup, tape, and AWS backups, ensuring RTOs and RPOs are met for all workloads.

The role requires hands-on experience across storage, virtualization, and cloud protection, with a strong focus on immutable copies, IAM/KMS security, cost-aware cloud operations, and regular restoration testing and reporting.

Qualifications

• Experience administering Rubrik, Veeam and NetBackup in enterprise environments.
• Experience with tape libraries, vaulting and offsite media workflows.
• Strong understanding of DR concepts, RTO/RPO and testing.
• Hands-on with AWS storage services (S3, Glacier) and immutability controls (Object Lock, Vault Lock).
• Familiarity with IAM and KMS in backup access and encryption.

Responsibilities

• Administer the data protection estate including policy configuration and SLA domains.
• Manage on-premises tape libraries and offsite vaulting.
• Monitor backup/replication outcomes and investigate failures to root cause.
• Maintain immutable and air-gapped protection copies.
• Upgrade systems and manage vendor cases to closure.
• Ensure workloads are protected by appropriate policies across on-prem and cloud estates.
• Administer cloud protection in AWS and Rubrik Cloud; manage replication and retention policies.
• Maintain IAM roles, policies and KMS keys for backup and restore.

Skills

Rubrik

Veeam

NetBackup

Tape backup

AWS backup

S3 Glacier

IAM/KMS

DR testing

SAN/NAS

Cross-region

Tools

Rubrik Cloud

NetBackup

VTL tape libraries

AWS Backup

Job description

The Storage and Backup Engineer is responsible for the protection and recoverability of data across on-premises and cloud environments, and for the storage and compute platforms that hold it. The role manages the data protection estate: on premises this covers Rubrik, Veeam, NetBackup and tape; in cloud it covers backup and archive to Amazon Web Services and replication from the primary Rubrik clusters to Rubrik Cloud. The engineer is accountable for backup success, restore performance and the disaster recovery capability that depends on them, and administers enterprise SAN and NAS storage and the supporting compute and virtualization platforms for capacity, provisioning, replication and protection, working alongside the platform engineers who own the wider infrastructure design.Hands-on capability across both estates is essential. Backup jobs run to AWS and to Rubrik Cloud alongside the primary on-premises Rubrik platform, so the role requires practical command of AWS storage and backup services, S3 storage classes and lifecycle policy, Object Lock and immutability, IAM and KMS as they apply to backup access and encryption, cross-region and cross-account copies, and the connectivity and egress cost consequences of protecting and recovering data in cloud.The role is accountable for adherence to the set recovery time and recovery point objectives. It maintains the per-workload RTO and RPO position, escalates where the achievable position falls short of the stated requirement, and participates actively in disaster recovery drills including failover, failback and the remediation of findings. It runs a defined cadence of restoration tests across every workload type in close coordination with the infrastructure teams and the respective service and application owners, so that recoverability is demonstrated by test rather than assumed from a backup job that reports success.Reporting is a standing obligation rather than an occasional exercise. The engineer produces regular backup, restore, restoration-test, capacity and compliance reporting for IT leadership, information security, audit and the service owners whose data is protected. The role operates within a shift-based infrastructure team in Navi Mumbai, reports to the Manager IT Infrastructure for the shift worked, and hands over open work cleanly at shift boundaries. It requires the ability to work independently, document thoroughly and provide technical guidance to less experienced engineers.**ESSENTIAL DUTIES & RESPONSIBILITIES:****On-Premises Data Protection Platform Administration**· Administer the data protection estate, including Rubrik, Veeam and NetBackup, covering policy configuration, protection groups, SLA domains, job scheduling and agent or connector health.· Administer tape infrastructure, including libraries, drives, media pools, barcode and slot management, and offsite media rotation and vaulting.· Monitor backup and replication job outcomes daily, investigate failures through to root cause, and remediate rather than re-run without diagnosis.· Maintain immutable and air-gapped protection copies for ransomware resilience and verify that immutability is enforced rather than merely configured.· Maintain platform currency, including software and firmware upgrades, and manage vendor cases through to closure.· Ensure every protected workload is covered by an appropriate policy, and identify & onboard workloads that are unprotected, across both the on-premises and cloud estates.**Cloud Data Protection - AWS and Rubrik Cloud**· Administer backup and archive to Amazon Web Services, including S3 and Glacier storage classes, bucket and lifecycle policy, versioning, retention and expiry, and transition rules between tiers.· Configure and maintain immutability in cloud, including S3 Object Lock and AWS Backup Vault Lock, and verify that WORM retention is enforced rather than merely configured.· Administer AWS-native protection where used, including AWS Backup, EBS and EC2 snapshots, RDS snapshots and EFS or FSx backups, and ensure cloud workloads are covered by policy on the same basis as on-premises workloads.· Manage replication from the primary on-premises Rubrik clusters to Rubrik Cloud, including archival location configuration, replication and retention policy, seeding, bandwidth management and reconciliation of what has actually landed against what should have.· Maintain the IAM roles, policies and KMS keys that backup and restore depend on, applying least privilege and cross-account separation so that a compromise of the production account cannot destroy the protection copies.· Maintain connectivity and throughput for backup traffic, including VPC endpoints, Direct Connect or VPN capacity, and manage the impact of backup and restore windows on shared bandwidth.· Execute and test recovery from cloud, including restore from Glacier tiers with retrieval time and cost understood in advance, recovery of on-premises workloads into AWS, and recovery of cloud-native workloads.· Monitor cloud protection cost, including storage class placement, retrieval and egress charges, orphaned snapshots and unattached volumes, and report variance against budget.**Backup, Restore and Recovery Operations**· Execute restore and recovery requests across files, virtual machine, database and application workloads, meeting agreed recovery targets.· Act as second and third level support for complex data protection, storage and compute recovery issues, troubleshooting through to root cause across backup agent, array, hypervisor, database and network layers.· Perform data copy and migration activity between arrays, sites, tiers and cloud targets, including cutover planning, integrity validation and rollback.· Support legal hold, eDiscovery and audit requests requiring retrieval of retained or archived data.· Participate in priority and major incidents where data loss, corruption or platform failure is involved, and provide recovery estimates that can be relied on.**Restoration Testing Cadence and Service Coordination**· Operate a defined cadence of restoration tests across every workload type, covering file, virtual machine, database and application-level recovery, so that each type is proven within the agreed interval rather than on request.· Agree the test schedule, scope and acceptance criteria with the infrastructure teams and the respective service and application owners and secure their participation in validation of the restored data.· Document the outcome of every test, including failures, the corrective action taken and the revised recovery estimate, and re-test after remediation.· Publish restoration test results to IT leadership, information security, audit and the service owners, and hold outstanding findings visible until closed.· Maintain an evidence pack sufficient for audit, so that recoverability can be demonstrated without ad hoc reconstruction.**Disaster Recovery, RTO/RPO Adherence and DR Drills**· Maintain and improve disaster recovery capability for in-scope systems, including replication topology, failover design and runbook maintenance.· Maintain the per-workload recovery time and recovery point position against the Institute's global RTO and RPO standards and escalate formally where the achievable position falls short of the stated requirement.· Participate actively in disaster recovery drills as an executing engineer, covering failover, failback and validation, rather than observing or reporting on them.· Plan and execute DR tests with the infrastructure teams and service owners, report results with remediation actions and revised recovery estimates, and track findings to verified closure.· Author, maintain and improve runbooks for backup, restore, failover and recovery so that work is repeatable, auditable and transferable across shifts and across the team.· Follow and enforce change control, including rollback planning