Senior Infrastructure Engineer Active Directory And PowerShell

Indra Group USA; Manila; On-site; PHP 1,200,000 - 1,800,000; Full time

Job summary

Indra Group USA in Manila is seeking an experienced infrastructure and security engineer to manage and optimize detection logic, policies, and configurations across cloud and on-prem platforms. You will oversee AD management, WAF, EDR/NDR, and incident response.

The role demands hands-on scripting (PowerShell), strong networking basics, and the ability to translate security use cases into platform configurations. Onsite work in Ortigas/Mandaluyong with deployments to Makati/BGC may be required.

Qualifications

• Minimum 5–10 years in infrastructure support or security engineering.
• Fluent experience with cloud platforms (AWS/Azure/GCP) and AD administration.
• Strong scripting skills, preferably PowerShell, for automation.
• Hands-on with security tooling and platform integrations (SIEM, EDR, WAF).

Responsibilities

• Manage and optimize detection logic, policies, and configurations across multiple platforms (SIEM, SOAR, WAF, Firewalls, EDR & NDR, DLP, PAM, IGA, vulnerability tools).
• Provide infrastructure support for Active Directory management and integration with other platforms.
• Oversee deployments and onboarding of web apps into WAF and handle advanced WAF configurations.
• Lead firewall rule creation, review, and cleanup to maintain secure policies.
• Design and optimize email security gateway rules to improve filtering.
• Enhance EPP/EDR policies for better endpoint protection.
• Ensure secure connectivity across AWS, Azure, and GCP; translate use cases into configurations.
• Lead scheduled reports on platform effectiveness and policy health; drive incident response and troubleshooting.
• Collaborate with SecOps, Governance, mentor junior staff, and build automation scripts/workflows.

Skills

Cloud platforms

Active Directory

PowerShell scripting

Networking fundamentals

Security tooling (SIEM/EDR/WAF)

Incident response

Job description

Job Description:

Responsibilities

• Managed and optimize detection logic, policies, and configurations across platforms such as SIEM, SOAR, WAF, Firewalls, EDR & NDR, DLP, PAM, IGA, and vulnerability management tools.

• Provide infrastructure support for Active Directory management and integration with other platforms.

• Manage infrastructure deployments/releases, and onboarding of web applications into WAF and manage advanced WAF configurations.

• Oversee firewall rule creation, review, and cleanup to maintain secure and efficient policies.

• Design and optimize rules in email security gateways to improve filtering and protection.

• Enhance and fine-tune EPP and EDR policies for better endpoint protection.

• Ensure secure, scalable, and optimized connectivity across AWS, Azure, and GCP.

• Translate security use cases into platform-specific configurations and playbooks.

• Resolve complex performance, availability, and infrastructure-related incidents.

• Support upgrades (OS/firmware), backup processes, and failover testing.

• Lead the creation of scheduled reports (can be weekly, monthly, quarterly, and yearly) on platform effectiveness, detection logic performance, policy impact, configuration health, and other application related reports.

• Lead troubleshooting and incident response for application-layer security issues, networking, system dependencies and platform-level integrations.

• Collaborate closely with cross functional teams such as SecOps, Governance, and other teams and mentor junior and associate team members, if needed.

• Build and maintain automation scripts and workflows for repetitive tasks such as using PowerShell.

Qualifications

• At least 5 to 10 years in infrastructure support or security engineering.

• Proficient in cloud platforms (AWS, Azure, GCP), networking fundamentals, and OS level management.

• Exposure to cybersecurity tools and experience supporting their infrastructure components such as Endpoint, Data Security or IAM platforms

• Has strong expertise in creation of group policies (GPO) administration, and Active Directory authentication (i.e.Kerberos and NTLM), architecture (i.g. Forest, Tree and domains) and implementation (e.g. AD hardening).

• Perform migration and decommission of domain controllers in the infrastructure.

• Has experience in scripting or automation experience in Active Directory, ideally PowerShell. This skill is an advantage.

Work Arrangement

Should be amendable to work 100% onsite in Ortigas and shifting

General requirement

The candidate should be willing to work on field especially if there are deployments (Makati/BGC), if needed. Indra and client will provide transportation vehicle (i.e. van) and this will be a scheduled deployment/configuration.

Also, candidate should be willing to support other Platform operation teams and vice versa, if needed and possible

Requirements