Senior Infrastructure Engineer (Active Directory and PowerShell)

Indra Group; Philippines; On-site; PHP 900,000 - 1,800,000; Full time

Benefits offered by this job

Transportation for deployments

Job summary

Indra Group is seeking a Senior Infrastructure Engineer focused on Active Directory and PowerShell to join our cybersecurity team in the PH. The role involves on-site work in Ortigas with deployments across Makati/Global sites as needed.

You will optimize AD, build automation, and integrate security tooling across AWS, Azure, and GCP. The position requires 5–10 years in infra/security, strong scripting, and familiarity with WAF, SIEM, EDR, and PAM platforms.

Qualifications

• Minimum 5–10 years in infrastructure support or security engineering.
• Proficient in cloud platforms (AWS, Azure, GCP).
• Exposure to cybersecurity tools and supporting their infrastructure components.
• Strong expertise in Active Directory, GPO administration, and AD architecture.

Responsibilities

• Manage and optimize detection logic, policies, and configurations across security platforms.
• Provide infrastructure support for Active Directory management and integration with other platforms.
• Manage deployments/releases, and onboarding of web apps into WAF with advanced configurations.

Skills

PowerShell scripting

Active Directory

Cloud platforms

Networking fundamentals

Scripting & automation

Education

Bachelor's degree in CS/IS

Tools

WAF

SIEM

EDR/NDR

PAM

Job description

Senior Infrastructure Engineer (Active Directory and PowerShell)

Location: PH

Profile: Cybersecurity

Required experience:

Working mode: On-site

Responsibilities

• Managed and optimise detection logic, policies, and configurations across platforms such as SIEM, SOAR, WAF, Firewalls, EDR & NDR, DLP, PAM, IGA, and vulnerability management tools.
• Provide infrastructure support for Active Directory management and integration with other platforms.
• Manage infrastructure deployments/releases, and onboarding of web applications into WAF and manage advanced WAF configurations.
• Oversee firewall rule creation, review, and cleanup to maintain secure and efficient policies.
• Design and optimise rules in email security gateways to improve filtering and protection.
• Enhance and fine-tune EPP and EDR policies for better endpoint protection.
• Ensure secure, scalable, and optimized connectivity across AWS, Azure, and GCP.
• Translate security use cases into platform-specific configurations and playbooks.
• Resolve complex performance, availability, and infrastructure-related incidents.
• Support upgrades (OS/firmware), backup processes, and failover testing.
• Lead the creation of scheduled reports (can be weekly, monthly, quarterly, and yearly) on platform effectiveness, detection logic performance, policy impact, configuration health, and other application related reports.
• Lead troubleshooting and incident response for application-layer security issues, networking, system dependencies and platform-level integrations.
• Collaborate closely with cross functional teams such as SecOps, Governance, and other teams and mentor junior and associate team members, if needed.
• Build and maintain automation scripts and workflows for repetitive tasks such as using PowerShell.

Qualifications

• At least 5 to 10 years in infrastructure support or security engineering.
• Proficient in cloud platforms (AWS, Azure, GCP), networking fundamentals, and OS level management.
• Exposure to cybersecurity tools and experience supporting their infrastructure components such as Endpoint, Data Security or IAM platforms
• Has strong expertise in creation of group policies (GPO) administration, and Active Directory authentication (i.e.Kerberos and NTLM), architecture (i.g. Forest, Tree and domains) and implementation (e.g. AD hardening).
• Perform migration and decommission of domain controllers in the infrastructure.
• Has experience in scripting or automation experience in Active Directory, ideally PowerShell. This skill is an advantage.

Work Arrangement

Should be amendable to work 100% onsite in Ortigas and shifting

General requirement

The candidate should be willing to work on field especially if there are deployments (Makati/BGC), if needed. Indra and client will provide transportation vehicle (i.e. van) and this will be a scheduled deployment/configuration.

Also, candidate should be willing to support other Platform operation teams and vice versa, if needed and possible