Group Infrastructure Engineer 2

Location: Hyderabad & BangaloreJOB PURPOSE:The Group Infrastructure Engineer 2 is an individual contributor who designs, implements, automates, secures, and supports resilient infrastructure across Microsoft Azure and on-premises environments.

The role owns defined components of cloud services, compute, storage, networking, virtualization, operating systems, containers, monitoring, backup, disaster recovery, and infrastructure security. Working with Application, Database, Security, DevOps, Service Management, regional, and business teams, the engineer helps keep Ports and Terminals platforms scalable, reliable, secure, cost-conscious, and aligned with enterprise architecture and operational standards. Automation is a core part of the role. The engineer builds and maintains infrastructure-as-code and operational automation, contributes to platform designs and change reviews, and applies standard patterns to reduce manual effort. They also develop and coach junior engineers, building the technical depth, operational rigor, and problem-solving skills the team needs as business demands evolve. The role supports a culture of accountability, continuous learning, collaboration, and high performance. The engineer leads troubleshooting for well-scoped incidents and problems, drives root-cause analysis to permanent fixes, and supports major incident response under senior direction. They identify recurring issues and gaps in tooling, documentation, and standards, then deliver improvements that strengthen the wider estate. KEY ACCOUNTABILITIES:Infrastructure Architecture and Engineering

• Design, deploy, and support scalable hybrid-cloud infrastructure across Cloud and on-premises environments, covering compute, storage, virtualization, operating systems, networking, identity, connectivity, and platform services.
• Produce high-level and low-level designs, implementation plans, operational runbooks, standards, and support documentation for new and existing infrastructure services.
• Assess technical requirements, dependencies, capacity, resilience, security, supportability, and total cost before recommending infrastructure solutions. Cloud, Virtualization, Operating Systems, and Platforms
• Administer cloud services including Virtual Machines, Virtual Networks, subnets, Network Security Groups, load balancing, private connectivity, identity services, monitoring, backup, and automation.
• Engineer and support VMware ESXi, vCenter, vSphere, Windows Server, Linux, Active Directory, and Microsoft 365 infrastructure services.
• Deploy and support container platforms and workloads using Docker, Podman, and Kubernetes, with appropriate availability, observability, capacity, and security controls. Network and Infrastructure Security
• Design and support enterprise networking, including TCP/IP, routing, switching, DNS, DHCP, VLANs, VPNs, load balancing, segmentation, Wi-Fi, and secure cloud connectivity.
• Implement and maintain firewall, remote access, IDS/IPS, micro-segmentation, identity and access, secret management, hardening, vulnerability-remediation, and zero-trust controls.
• Ensure infrastructure changes comply with approved security, architecture, change management, audit, and governance requirements. Automation and Operational Excellence
• Automate infrastructure provisioning, configuration, compliance, and operational activities using Infrastructure as Code, Azure CLI, PowerShell, Bash, Python, and approved CI/CD tooling.
• Drive standardization, reusable templates, self-service capabilities, configuration consistency, and reduction of manual operational effort.
• Implement effective monitoring, alerting, logging, capacity management, performance optimization, asset management, and service-health reporting. Reliability, Incident Management, and Recovery
• Provide technical leadership during critical incidents, coordinate cross-functional troubleshooting, restore services within agreed priorities, and communicate clear technical status and risk.
• Lead root-cause analysis and post-incident reviews, identify corrective and preventive actions, and ensure actions are tracked through closure.
• Design, maintain, and test backup, restore, high-availability, disaster recovery, and business-continuity capabilities against approved service requirements. Technical Leadership and Collaboration
• Partner with Application, Database, Security, DevOps, Service Management, regional, and business teams to deliver infrastructure solutions and resolve complex service issues.
• Provide technical guidance, peer reviews, knowledge transfer, and mentoring to infrastructure engineers and support teams.
• Engage vendors and service providers for design validation, support escalation, product evaluation, implementation, and lifecycle planning. QUALIFICATIONS, EXPERIENCE AND SKILLSA bachelor's degree in computer science, Information Technology, Engineering, or related discipline. 4+ years of enterprise infrastructure experience Hands-on experience supporting production of Azure, VMware, Windows, Linux, networking, automation, and resilient infrastructure services, with working knowledge of Infrastructure as Code concepts. Azure experience including Virtual Machines, Virtual Networks, subnets, NSGs, service endpoints, identity services, Azure CLI, and Azure Automation. Working knowledge of VMware ESXi, vCenter, and vSphere, plus Windows Server, Linux administration, Active Directory, and Microsoft 365. Practical experience with Fortinet, Check Point, or Cisco firewalls and switches, including VPN technologies, segmentation, and Wi-Fi infrastructure. Working knowledge of Docker, Podman, and Kubernetes. Scripting and automation in PowerShell, Bash, or Python, with exposure to Infrastructure as Code and operational automation. Operational experience with monitoring, incident management, performance tuning, capacity planning, asset management, backup, disaster recovery, infrastructure hardening, vulnerability remediation, and troubleshooting. Solid grasp of networking fundamentals, including TCP/IP, routing, switching, DNS, DHCP, VLANs, VPNs, load balancing, segmentation, and secure connectivity. Understanding network security architecture, defense-in-depth, zero-trust networking, and identity-based access control, with exposure to Azure Defender, Microsoft Sentinel, Azure Firewall Manager, Key Vault, Managed Identities, and conditional access. Strong ownership, analytical problem-solving, and attention to detail, with a commitment to continuous learning. Clear written and verbal communication, including explaining technical concepts to non-technical users and producing runbooks and documentation. Collaborative approach to working with diverse teams and stakeholders. Composure in high-pressure incidents, working alongside senior engineers to restore services. Willingness to work rotating shifts and on call to support 24x7 services. Preferred certifications: Microsoft AZ-104, VMware VCP, Cisco CCNA, RHCSA, or Kubernetes CKA or CKAD.