Infrastructure Manager

Job description

Designation: Infrastructure Manager Location: Mumbai/ Navi Mumbai Years of experience: 9 to 15 Years JOB DESCRIPTION: Identity, Virtual Desktop & Endpoint Infrastructure Role Purpose: The role is responsible for the design, operation, governance, security, compliance, and continual improvement of the Bank's Identity Services, Virtual Desktop Infrastructure (VDI), Microsoft Intune, Endpoint Management, and Enterprise File Services. The position ensures high availability, regulatory compliance, cyber resilience, operational excellence, and audit readiness across critical infrastructure platforms supporting business and customer-facing services. Key Responsibilities: 1. Active Directory & Identity Services Manage enterprise Active Directory infrastructure, including forests, domains, sites, trusts, Group Policies, DNS integration, and Domain Controllers. Administer ADFS, Microsoft Entra ID, Microsoft Entra Connect, federation services, MFA, SSO, Conditional Access, and authentication platforms. Oversee identity lifecycle management, Privileged Access Management (PAM), role-based access control (RBAC), and delegated administration. Ensure compliance with Microsoft security best practices, CIS benchmarks, RBI guidelines, and internal security standards. Lead NTLM reduction, LDAPS enforcement, Kerberos hardening, and authentication modernisation initiatives. Conduct periodic reviews of privileged accounts, service accounts, Group Policy Objects, trust relationships, and Active Directory security posture. 2. Virtual Desktop Infrastructure (VDI) Manage Citrix, Azure Virtual Desktop, or enterprise VDI environments supporting internal users and automation workloads. Ensure VDI platform scalability, availability, performance optimisation, and capacity planning. Implement endpoint security controls for VDI environments. Drive automation initiatives to enhance provisioning, monitoring, and user experience. Conduct disaster recovery drills, patch management, and business continuity testing. 3. Microsoft Intune & Endpoint Management Manage Microsoft Intune, Mobile Device Management (MDM), Mobile Application Management (MAM), Windows Autopilot, compliance policies, and configuration profiles. Implement and maintain security baselines, device compliance frameworks, and endpoint protection controls. Lead mobile device governance across iOS, Android, Windows, and BYOD deployments. Support endpoint hardening initiatives including Microsoft Defender, BitLocker, Windows LAPS, and Zero Trust controls. Ensure enterprise device inventory accuracy and compliance reporting. 4. Enterprise File Services ( File Server) Manage Windows File Servers, Distributed File System (DFS), permissions, quota management, and storage governance. Design and maintain file-sharing architecture aligned with regulatory and security requirements. Implement data classification, access reviews, file server audits, and backup validation. Coordinate disaster recovery, restoration testing, and business continuity exercises. 5. Infrastructure Governance & Operations Ensure 24x7 availability of critical infrastructure services. Drive service-level agreement (SLA), key performance indicator (KPI), and service improvement initiatives. Develop and maintain operational runbooks, standard operating procedures, architecture documents, and support procedures. Manage infrastructure patching, vulnerability remediation, capacity planning, and lifecycle management. Lead root cause analysis for major incidents and ensure timely resolution. 6. Security, Risk & Compliance Ensure infrastructure alignment with the RBI Cyber Security Framework, ISO/IEC 27001, internal audit requirements, CIS Security Benchmarks, and the Bank's information security policies. Support regulatory inspections, internal audits, and external audits. Manage remediation of audit findings and security observations. Maintain infrastructure evidence repositories and compliance dashboards. 7. Vendor & Team Management Lead internal and vendor support teams. Define operational KPIs, service standards, and control requirements. Manage OEM engagements, renewals, infrastructure upgrades, and strategic projects. Mentor engineers and develop technical capabilities across the team. Required Technical Skills Must Have: 1. Microsoft Active Directory (Windows Server 2016/2019/2022) 2. ADFS and federation services 3. Microsoft Entra ID and Microsoft Entra Connect 4. Group Policy management 5. Microsoft Intune, MDM, and MAM 6. Endpoint security and compliance 7. Citrix / Azure Virtual Desktop / enterprise VDI administration 8. Windows Server administration 9. File Server and DFS technologies 10. DNS and DHCP 11. PowerShell automation 12. Public Key Infrastructure (PKI) and Certificate Services 13. MFA and Conditional Access Good to Have: 1. Microsoft Defender suite 2. Microsoft 365 administration 3. Privileged Access Management 4. Microsoft Configuration Manager (SCCM / MECM) 5. Azure infrastructure services 6. SIEM and security monitoring 7. Infrastructure automation and scripting Experience: 9-15+ years of experience in enterprise infrastructure operations. Minimum five years of experience managing Active Directory, endpoint, or VDI teams. Experience in large banking, BFSI, or other highly regulated environments. Proven experience supporting audits, regulatory reviews, cyber security assessments, and disaster recovery exercises.