Infrastructure Engineer (with Active Directory and PowerShell)

Indra Philippines, Inc.; Metro Manila; On-site; PHP 1,000,000 - 1,500,000; Full time

Benefits offered by this job

Open University training

Udemy for Business access

Flexible benefits package

Clubs and sports activities

Job summary

Indra Philippines, Inc. seeks an experienced Infrastructure Security Engineer to optimize detection logic across SIEM, SOAR, WAF, and cloud platforms.

You will support Active Directory management, deploy and update infrastructure, and craft platform-specific configurations and playbooks to improve security across AWS, Azure, and GCP. You will lead incident response, automation efforts with PowerShell, and collaborate with SecOps, Governance, and cross-functional teams while mentoring junior

Qualifications

• At least 5 to 10 years in infrastructure support or security engineering.
• Proficient in cloud platforms (AWS, Azure, GCP), networking fundamentals, and OS level management.
• Exposure to cybersecurity tools and experience supporting their infrastructure components such as Endpoint, Data Security or IAM platforms
• Has strong expertise in creation of group policies (GPO) administration, and Active Directory authentication (i.e.Kerberos and NTLM), architecture (i.g. Forest, Tree and domains) and implementation (e.g. AD hardening).
• Perform migration and decommission of domain controllers in the infrastructure.
• Has experience in scripting or automation experience in Active Directory, ideally PowerShell. This skill is an advantage.

Responsibilities

• Managed and optimize detection logic, policies, and configurations across platforms such as SIEM, SOAR, WAF, Firewalls, EDR & NDR, DLP, PAM, IGA, and vulnerability management tools.
• Provide infrastructure support for Active Directory management and integration with other platforms.
• Manage infrastructure deployments/releases, and onboarding of web applications into WAF and manage advanced WAF configurations.
• Oversee firewall rule creation, review, and cleanup to maintain secure and efficient policies.
• Design and optimize rules in email security gateways to improve filtering and protection.
• Enhance and fine-tune EPP and EDR policies for better endpoint protection.
• Ensure secure, scalable, and optimized connectivity across AWS, Azure, and GCP.
• Translate security use cases into platform-specific configurations and playbooks.
• Resolve complex performance, availability, and infrastructure-related incidents.
• Support upgrades (OS/firmware), backup processes, and failover testing.
• Lead the creation of scheduled reports on platform effectiveness, detection logic performance, policy impact, configuration health, and other application related reports.
• Lead troubleshooting and incident response for application-layer security issues, networking, system dependencies and platform-level integrations.
• Collaborate closely with cross functional teams such as SecOps, Governance, and other teams and mentor junior and associate team members, if needed.
• Build and maintain automation scripts and workflows for repetitive tasks such as using PowerShell.

Skills

Cloud platforms

AD/Directory services

PowerShell

Networking fundamentals

Security tools

Incident response

Automation

Tools

SIEM

SOAR

WAF

EDR

NDR

DLP

Job description

Responsibilities:

• Managed and optimize detection logic, policies, and configurations across platforms such as SIEM, SOAR, WAF, Firewalls, EDR & NDR, DLP, PAM, IGA, and vulnerability management tools.

• Provide infrastructure support for Active Directory management and integration with other platforms.

• Manage infrastructure deployments/releases, and onboarding of web applications into WAF and manage advanced WAF configurations.

• Oversee firewall rule creation, review, and cleanup to maintain secure and efficient policies.

• Design and optimize rules in email security gateways to improve filtering and protection.

• Enhance and fine-tune EPP and EDR policies for better endpoint protection.

• Ensure secure, scalable, and optimized connectivity across AWS, Azure, and GCP.

• Translate security use cases into platform-specific configurations and playbooks.

• Resolve complex performance, availability, and infrastructure-related incidents.

• Support upgrades (OS/firmware), backup processes, and failover testing.

• Lead the creation of scheduled reports (can be weekly, monthly, quarterly, and yearly) on platform effectiveness, detection logic performance, policy impact, configuration health, and other application related reports.

• Lead troubleshooting and incident response for application-layer security issues, networking, system dependencies and platform-level integrations.

• Collaborate closely with cross functional teams such as SecOps, Governance, and other teams and mentor junior and associate team members, if needed.

• Build and maintain automation scripts and workflows for repetitive tasks such as using PowerShell.

Qualifications:

• At least 5 to 10 years in infrastructure support or security engineering.

• Proficient in cloud platforms (AWS, Azure, GCP), networking fundamentals, and OS level management.

• Exposure to cybersecurity tools and experience supporting their infrastructure components such as Endpoint, Data Security or IAM platforms

• Has strong expertise in creation of group policies (GPO) administration, and Active Directory authentication (i.e.Kerberos and NTLM), architecture (i.g. Forest, Tree and domains) and implementation (e.g. AD hardening).
• Perform migration and decommission of domain controllers in the infrastructure.
• Has experience in scripting or automation experience in Active Directory, ideally PowerShell. This skill is an advantage.

Work Arrangement: Should be amendable to work 100% onsite in Ortigas and shifting

General requirement: The candidate should be willing to work on field especially if there are deployments (Makati/BGC), if needed. Indra and client will provide transportation vehicle (i.e. van) and this will be a scheduled deployment/configuration.

Also, candidate should be willing to support other Platform operation teams and vice versa, if needed and possible

What do we have in store for you?

• A professional career adapted to your personal goals, with growth and development opportunities for all professionals

• Challenging projects with impact for leading clients in a wide range of industries

• Competitive renumeration and flexible benefits package which you may customize based on your individual needs and lifestyle

• Continuous learning and development through our Open University's virtual campus, with access to the Udemy for Business platform with more than 3,000 specialized courses

• Meaningful engagement with other employees while leading a balanced and healthy lifestyle through our clubs and various sports activities

Join Indra and have a professional career adapted to your personal goals, with continuous training in a flexible environment, and where people are the core.

Diversity is a key element of our culture. Our policies reflect our commitment to equal opportunities and recognizing the value of people and their work, and the social and natural environment wherein we operation. As such, equal opportunities, diversity, respect for people and non-discrimination (race, gender, language, religion, disability, sexual orientation, opinion, origin, economic position, birth, union membership or any other personal/social condition or circumstance) are basic principles of action for all the company's Professionals, as well as our Partners.