Own corporate IT end to end for a 150-person AI startup in one Bengaluru office. This is a single-owner domain expert role, not a helpdesk seat.
What you will own:
- MacBook and hardware procurement, reseller negotiation, AMC, warranty, buyback and refresh cycles
- Zero-touch MDM and endpoint security across macOS and Windows: encryption, patching, EDR, remote wipe
- IT asset management in a real ITAM system, purchase to disposal, zero untracked devices
- Enterprise office WiFi and network: VLANs, 802.1X or RADIUS, guest network, firewall, ISP redundancy
- Conference room and town-hall AV that works without fiddling
- Google Workspace, SSO and SAML, joiner-mover-leaver, quarterly access reviews
- SOC 2 and ISO 27001 endpoint compliance evidence, tested backups, SaaS inventory and spend
What we are looking for:
- 6 to 11 years in corporate IT, IT operations or workplace technology, with at least 3 years owning a site or fleet end to end
- Production MDM: Jamf, Kandji, Mosyle, Hexnode or Intune
- Real network ownership: Ubiquiti UniFi, Meraki, Aruba or Ruckus
- An ITAM or ITSM system actually run: Snipe-IT, Freshservice, Jira Service Management or ServiceNow
- Conference room AV delivered and supported: Zoom Rooms, Google Meet hardware, Neat, Poly, Logitech or Crestron
- Product company or startup background strongly preferred over IT services or pure GCC support
- Bengaluru, in office
1. End-User Support (L3)
Single point of contact for all IT requests via a ticketing system (Jira Service Management, Freshservice, or similar)
L1: password resets, MFA issues, onboarding/offboarding, software installs, printer/peripheral issues
L2: OS and application troubleshooting, VPN/Wi-Fi issues, email and collaboration tool issues (Google Workspace/M365, Slack, Zoom), device enrollment
L3: root-cause analysis of recurring issues, escalated incidents, SSO/IdP problems, endpoint security incidents, scripting and automation of repetitive fixes
Maintain a knowledge base, SLAs, and a ticket-triage process
2. Identity & Access Management
Manage the IdP (Okta, Entra ID, or Google Workspace) with SSO and enforced MFA
Role-based access control, least privilege, and a joiner-mover-leaver process
Quarterly access reviews with evidence for audits
Privileged access and shared-credential management (password manager/vault)
3. Asset Management
Maintain an inventory of hardware, software, and licenses
Device lifecycle: procurement, imaging, assignment, recovery, secure disposal
MDM rollout and management (Jamf, Intune, Kandji) with disk encryption, patching, and remote wipe
License tracking and cost optimization
4. Network Infrastructure
Design, configure, and maintain office networking: firewalls, switches, access points, VLAN segmentation, guest Wi-Fi
VPN or zero-trust access (e.g., Cloudflare, Tailscale, Zscaler)
DNS, DHCP, and ISP management with redundancy
Network monitoring, logging, and documentation (diagrams, configs)
5. Cloud Security Architecture & Setup (AWS/Azure/GCP)
Landing zone setup: multi-account structure, SSO, guardrails (SCPs/policies)
IAM hardening, network segmentation (VPC design, security groups), encrypted storage and transit, key management
Centralized logging and monitoring (CloudTrail, GuardDuty, Security Hub, or equivalents) and SIEM/alerting
Backup, disaster recovery, and secrets management
Vulnerability scanning, CSPM, and infrastructure-as-code review (Terraform)
6. Compliance Programs
FrameworkResponsibilitiesSOC 2Define scope and Trust Services Criteria, implement controls, run a compliance automation tool (Vanta, Drata, Secureframe), collect evidence, coordinate readiness and the auditor for Type I/IIISO 27001Build the ISMS, risk assessment and treatment plan, Statement of Applicability, policies, internal audit, management review, certification audit supportGDPRData mapping and RoPA, lawful basis, DPAs with vendors, data subject request process, breach notification procedure, DPIAsHIPAAPHI identification, Security Rule safeguards (administrative, physical, technical), risk analysis, BAAs, audit logging, breach response, workforce training
