Senior Infrastructure & Security Engineer

Job Title: Senior Infrastructure & Security Engineer
Role Snapshot
Location: India, remote. No relocation or datacenter visits required.
Employment: Full-time.
Hours: India hours with US overlap and a daily standup during that overlap. Occasional incidents outside normal hours; no nightly on-call rota.
Reports to: Director, Technology & Engineering Operations.
Purpose: Own the infrastructure our products depend on and its security posture. Help complete a datacenter consolidation, migrate from VMware to Proxmox, modernize established application platforms and build the infrastructure supporting our on-premise artificial intelligence platform.
You will work alongside the IT infrastructure and security team, which owns the corporate network, datacenters and physical estate.
Key Responsibilities
Administer VMware, support the Proxmox migration, and manage Windows and Linux hosts, patching and capacity.
Own SAN and NAS infrastructure, storage-path resilience and backup coverage; personally perform restores and document what you verified.
Diagnose networking faults across VLANs, routing, NAT, inter-site connectivity and firewall policy using evidence that establishes the failing layer.
Harden Active Directory and privileged access across two domains and their trust, including service accounts, access reviews and joiner/leaver controls.
Improve secrets management, certificate lifecycle, vulnerability remediation and visibility into internet exposure.
Own the infrastructure beneath IIS, .NET and SQL Server services in partnership with application owners and database administrators.
Build and operate infrastructure for GPU systems, knowledge services, authenticated gateways and isolated environments, including tested restrictions on regulated-data access.
Write automation against live system data, maintain an accurate inventory and create runbooks that enable a second person to operate each system.
Must-Have Qualifications
Windows Server and Active Directory administration: Personally built, hardened and recovered environments involving domain controllers, DNS, Group Policy, delegation, privileged accounts and service accounts.
VMware administration, storage and backup: Hands-on vSphere and vCenter administration, SAN or NAS experience, understanding of storage paths and redundancy, and an enterprise restore personally performed and verified.
Enterprise networking and firewall administration: Practical IP addressing, subnetting, VLANs, routing, NAT, DNS, TLS and HTTP knowledge, plus Fortinet or an equivalent next-generation firewall.
Tool-building ability: Strong PowerShell, Python or Bash used to build tooling against live systems and APIs. Ability to read application configuration and source where necessary to understand infrastructure behavior.
Verification as a habit: Investigate read-only first, distinguish measurements from assumptions, document changes and acknowledge what remains unconfirmed.
Working Linux proficiency covering systemd, SSH, packages, filesystems and permissions.
Working familiarity with AWS or Azure sufficient to investigate live state and make a scoped change safely.
Ability to own work independently and work India hours with US overlap.
Roughly five to eight years of relevant experience is indicative, not a screening gate. A computer science degree or a particular previous job title is not required.
Preferred Qualifications
Helpful experience includes:
Proxmox, KVM and datacenter migration or consolidation.
Entra ID, Microsoft 365, conditional access and Defender tooling.
Endpoint detection, log analysis, vulnerability scanning and monitoring improvement.
Terraform, Ansible or Bicep.
Operating managed Kubernetes deployments and rollbacks.
SQL Server backup chains, recovery and performance investigation.
PCI DSS or HIPAA control exposure.
GPU systems, NVIDIA drivers, CUDA, workload scheduling, model infrastructure, vector databases, PostgreSQL or federated workload identity.
Relevant infrastructure, networking or security certifications, or penetration-testing experience.
Using artificial intelligence agents for diagnosis, scripting and analysis while independently checking their output.
These are preferences, not additional mandatory requirements.
What We Offer
Remote work from India without relocation or datacenter travel.
Meaningful ownership with support from engineering and infrastructure colleagues.
The opportunity to improve an established estate while helping build a new on-premise artificial intelligence platform.
Work where investigation, engineering judgment and shared knowledge matter.
India working hours with US overlap, with occasional genuine incidents outside hours recognized rather than assumed.
Open compensation discussions.
Honest Challenge
You will inherit unfinished migrations, older Windows and SQL Server platforms, legacy applications, uneven security coverage and monitoring spread across several tools. Some systems are documented better than they are understood.
The first year includes substantial discovery alongside delivery. You will need to establish what is actually deployed, prove recovery works and turn knowledge held by individuals into usable runbooks. You will have support, but you are expected to carry work independently.
READY TO JUMP IN?
Click Apply to start the short application (about 5 minutes; embedded step) → [https://www.surveymonkey.com/r/6N2LSLS]
Important: Completing the embedded application step is required to be considered.
Mercola welcomes applicants of every background, identity, and life experience.

Work arrangement
Yes