Network Engineer

Job Category: Corporate

Job Type: Full Time

Job Location: Pune

Description: For Cloud, Security & IT Infrastructure

About the role

Our client is looking for a hands-on Network Engineer who can own the company’s complete IT backbone – network, firewall, cloud, Microsoft 365, web hosting, endpoint security and IT operations. This is a single-owner role in a mid-sized engineering services company, so the person must be comfortable working across all these areas rather than in one narrow specialisation.

The right candidate has built and run this kind of environment before, fixes problems on their own, automates repetitive work, and keeps services secure and available with minimal supervision.

Key responsibilities

Network, firewall and DNS

• Manage FortiGate firewalls, VPN, internet access controls and network security rules.
• Manage Cloudflare – DNS, CDN, SSL/TLS, WAF, caching and security rules for all public websites and applications.
• Own domain registration, DNS records and SSL certificates across Cloudflare, AWS Route 53 and HostGator.
• Troubleshoot connectivity, DNS, routing, proxy, SSL and application access issues.
• Coordinate with ISPs, ILL/telecom providers and hosting vendors on network and connectivity issues.

Cloud and hosting infrastructure

• Manage AWS infrastructure – EC2, S3, VPC, RDS/Aurora, IAM and IAM Identity Center, Route 53, Lambda, EventBridge and Systems Manager.
• Manage HostGator/cPanel hosting – websites, domains, email, FTP/SFTP, SSL and backups.
• Manage Windows servers, IIS, SQL Server/MySQL and production application environments.
• Run monitoring, backup, patching, capacity planning and disaster recovery.

Microsoft 365 and identity

• Administer the Microsoft 365 tenant – Exchange Online, Entra ID, Intune, Teams and SharePoint.
• Manage licensing (Microsoft CSP), user lifecycle, mailboxes, access control and security policies.
• Set up SSO, app registrations, OAuth and enterprise application integrations on Entra ID.
• Support Teams app integrations, Adaptive Cards and approval workflows with the development team.

Cybersecurity and endpoints

• Manage endpoint security with Intune, Microsoft Defender and Trellix EDR/XDR.
• Maintain Group Policy, Windows hardening, attack-surface reduction and device compliance.
• Maintain email security, anti-phishing, DLP and vulnerability remediation.

IT operations, vendors and automation

• Manage IT assets, laptop lifecycle, onboarding/offboarding and equipment returns.
• Handle incidents, changes and service requests; maintain IT documentation and network diagrams.
• Manage vendors (AWS, Microsoft, Cloudflare, HostGator, ISPs, hardware and security vendors) – quotes, renewals, licences and support contracts.
• Work with Finance and Procurement on invoices, purchase orders and timely renewals so that critical services never lapse.
• Automate routine work (server schedules, reporting, user administration) using PowerShell, AWS Lambda/EventBridge and basic Python.

Required technical skills

Network & security

FortiGate firewall, VPN, Cloudflare (DNS, CDN, WAF, SSL/TLS), DNS, routing, proxy

Cloud

AWS – EC2, S3, VPC, RDS/Aurora, IAM, IAM Identity Center, Route 53, Lambda, EventBridge, SSM

Microsoft 365

Exchange Online, Entra ID (SSO/OAuth), Intune, Teams, SharePoint, CSP licensing

Endpoint security

Microsoft Defender, Trellix EDR/XDR, Group Policy, Windows hardening, DLP

Servers & hosting

Windows Server, Active Directory, IIS, SQL Server, MySQL; HostGator/cPanel hosting

Automation

PowerShell (strong), AWS Lambda/EventBridge, basic Python

Applications

REST APIs, SSO/OAuth, Teams apps, Adaptive Cards, web application infrastructure

IT operations

Asset management, licensing, vendor management, incident/change management

What we look for

• Proven experience running all of the above in a live company environment – not just one or two of these areas.
• Strong troubleshooting skills across network, DNS, SSL, cloud and application layers.
• Security-first mindset; comfortable applying least-privilege and compliance controls.
• Self-driven; can plan, document and execute changes without daily supervision.
• Clear communication with vendors, finance teams and non-technical staff.
• Certifications such as AWS Solutions Architect / SysOps, Fortinet NSE, Microsoft MS-102 / AZ-104 are a plus.

Key performance objectives

• High availability of network, cloud, hosting and Microsoft 365 services.
• Secure and compliant endpoints, servers, identities and internet-facing applications.
• Fewer recurring incidents through monitoring, automation and root-cause analysis.
• Lower infrastructure and licence costs through optimisation and timely renewals.

Experience:

5+ years in network, cloud and IT infrastructure roles

Salary:

As per industry standards