11+ Security policy Jobs in India

We are looking for a capable System Administrator to take over all aspects of the configuration and maintenance of computer systems. A System Admin should be able to diagnose and resolve problems quickly and should have the patience to communicate with a variety of interdisciplinary teams and users.

Monitoring and reporting all points mentioned below.

Ensure Security updates are installed:

• Regularly checking whether the Antivirus software is updated for users.
• Regularly monitor platforms like Google to ensure everybody is using up-to-date applications with no security issues.
• Regularly Email users about the security updates that they need to install on their laptops and PCs.

Antivirus

Centrally managed antivirus should be installed on all laptops and mobile devices. 

• Adding a purchase request for any additional licence that we might require.
• Pushing new software updates on users’ laptops.
• Keeping up-to-date with antivirus updates so all our devices are secure.
• Miradore user agent 

Mobile device and access management

• Set rules and configure settings on personal and organisation-owned devices to access data and networks.
• Deploy and authenticate apps on devices -- on-premises and mobile.
• Protect company data by controlling the way users access and share information.
• Make sure devices and apps are compliant with security requirements.
• Only provide user access to laptops (No admin access, excluding developers)
• All new software installation requests will go through the system admin to make sure nothing is installed on work laptops that poses a security risk.

Vanta compliance-related tickets

• Vanta will continue to monitor and create issues to be compliant with ISO 27K over time. The system administrator must resolve all such system-related tickets.

Access management to different user applications

• Access should be restricted to only what is necessary to perform job duties ("principle of least privilege").
• Technical access to all the company’s networks must be formally documented, including the standard role for approver, grantor, and date.
• Only authorised employees and third parties working off a signed contract or statement of work, with a business need, shall be granted access to the company’s production networks.
• The company’s guests may be granted access to guest networks after registering with office staff without a documented request - guest network management.

Removal media encryption

• Research removable media encryption and figure out if removable media should be implemented and make sure it is always encrypted.

MFA reset and debugging

As we are enabling MFA for more and more applications that we have, more people are likely to have issues with it as the business moves forward. 

• Different online applications will have different ways of handling the MFA reset; a system admin should be familiar with all.

Website watcher configuration and email issues

• Software like Website Watcher keeps having email issues, as it sends emails in huge numbers every day. The system administrator must keep an eye on the emails and fix issues promptly as and when they arise.

Office network management

• System admin can help in creating guest networks in the office and making sure that the network is as secure as possible.

Phishing emails

• Finding the optimal solution to prevent phishing emails from getting delivered.
• Verifying emails sent by our staff to check for phishing emails.

Security incidents handling

• System admin must monitor incident and event tickets and assign severity tickets.
• Continuous checks to ensure the security incident policies are being followed and up to date
• A root cause analysis report must be documented and referenced in incident tickets.
• A central "War Room" will be designated for handling security threats. This may be a physical or virtual location  (i.e., Slack channel) and managed by the system admin.
• Conducting recurring Incident Response Meetings until the incident is resolved (as per the company's established norms)

Implement password policy

• Password policy must be in place to ensure that users are using secure passwords that are not easily crackable.

Add-ons:

• Devops is a plus point

Job Responsibilities:

• Server Monitoring: Monitor server performance and respond to alerts promptly. Troubleshoot and resolve system and network issues.
• Server Disk Cleanup: Regularly analyze and clean up server storage to optimize performance and resource allocation.
• Deployment of New Linux Instances: Create and configure new Linux server instances based on project requirements. Ensure proper security measures and updates during deployment.
• DNS Management: Manage DNS records, domains, and configurations for internal and external services.
• Backing up/Archiving Logs: Implement backup and archiving strategies for server logs to maintain data integrity and facilitate auditing.
• MySQL Backups: Create and manage automated backups of MySQL databases to ensure data integrity. Develop disaster recovery plans.
• System Administration Strategies: Develop and implement system administration strategies to enhance server performance, security, and scalability. Stay updated with industry best practices and emerging technologies

Qualifications:

• Bachelor's degree in Computer Science, Information Technology, or a related field (or equivalent work experience).
• Proven experience as a Linux Administrator or similar role (5+ years).
• Proficiency in Linux server administration (CentOS, Ubuntu, etc.).
• Strong knowledge of: Server monitoring tools (e.g., Nagios, Zabbix). Configuration management tools (e.g., Ansible, Puppet). Virtualization and containerization (e.g., Docker, Kubernetes). DNS management (e.g., BIND, AWS Route 53). Backup solutions (e.g., Bacula, AWS Backup). Log management and analysis (e.g., ELK Stack, Graylog). Database administration (e.g., MySQL, MariaDB). Security best practices and firewall configuration. Scripting languages (e.g., Bash, Python). Version control systems (e.g., Git). Cloud platforms (e.g., AWS, Azure, Google Cloud). Monitoring and alerting tools (e.g., Grafana, Prometheus). Networking concepts (TCP/IP, routing). System administration strategies and documentation. Excellent problem-solving skills and the ability to work independently.

• Strong communication and teamwork skills.

What will you do?

• Oversees testing, deployment & maintenance of the Voice infrastructure.
• Performing a variety of tasks associated with user provisioning and call routing within the assigned platform 
• Build loaders for internal systems ensuring tasks are completed accurately and in a timely manner
• Participate in meetings with clients and internal departments to understand the requirements of call routing
• Document and design call flow diagrams to ensure that all call variables have been accounted for in preparing a routing plan
• Support the clients solution by correcting any issues with call routing or provisioning during the initial implementation phase, constantly communicating status of any issues with client
• Complete testing to ensure that call flow is operating properly
• Monitors and ensures compliance to standards, policies, and procedures

What are we looking for?

• 0.6~2 year’s implementation experience in Asterisk PBX, IP Telephony, SIP.
• Able to thrive in a demanding and team-oriented environment
• Basic and strong knowledge of the Linux operating system.
• Knowledge of bash and perl shell scripting is an added advantage.
• RHCE Certification is an added advantage.

DataPower With APIC Development and Admin skills with Python or shell script
Exp.level: 4 - 7 Years

• IBM Cloud Pack- API Connect Developer:

• Data Power virtual appliance on Docker containers within Kubernetes cluster.

• setup API Connect Cloud manage

• setup Portal and analytics endpoints for the APIs to give more data analytics to the application teams.

• Register and troubleshoot Gateway Service with API Connect Gateway object on Data Power appliance

• Configure Mutual Authentication mechanism by creating Identification Credentials and Validation credentials to validate the server certificates

• Create organizations in API Connect to provide the architecture to create APIs using API connect manager

• Ability to create spaces and products on APIC and support multiple teams using them

• Knowledge of concepts and implementation of these on APIC – JWT, Bearer, Basic AUTH

• Integration with LDAP and troubleshooting

• WTX, COBOL Copybook, XML, XSL, Gateway scripting

• Networking concepts and integration with AWS concepts like VPC, NLB, etc

• Cloudwatch integration

About QuestionPro:

QuestionPro is one of the leading market research platforms. We have a wide range of products in Market Research, Customer Experience, Employee Experience, Vehicle Experience. All our products are multi-tenant SAAS platforms built on the latest technologies.

Our infrastructure is spread across 6 Data Centers across the globe. The platform collects over 10Million Surveys every month. Our Customer Experience platform was named top provider in the Gartner Voice of the Customer Rankings. Ever since we launched in 2016, we have grown by over 200% YoY. All up we are on plan to hit $ 31M in 2021. We are bootstrapped and proud to get where we are without any funding or investments. 

Our operations are spread across the globe with offices in the US, Mexico, Germany, UK, UAE, and Canada. 

https://www.questionpro.com/blog/cx-top-provider-gartner-voc-rankings/

We are a bootstrapped company and proud to have not taken any funding or investment.

QuestionPro has a particularly exciting journey ahead, requiring a passionate individual to join our growing team. If you are a true technology craftsman and want to build cutting-edge software solutions, hit us!

We operate 100% remote. You will be working from any place you desire for this position.

Responsibilities

• You will be responsible for key deliverables that would help improve the quality and reliability of our infrastructure spread across 8 data centres, both cloud and hybrid. 
• Streamline Life Cycle Management activities for the Infrastructure.
• You will be interacting with DevOps & Support teams to quickly investigate and mitigate the problems impacting customers at various levels in the Infrastructure including MySQL Database and Engineered Systems technology stack. 

Skills & Requirements

   Must-Have:   

• 8+ years of experience in Linux System Administration / Development / QA roles with a thorough understanding of Software Development Life Cycle
• Excellent knowledge of Linux System administration activities
• A very good understanding of Linux kernel internals, Server Virtualization, Networking & Security layer
• Any experience in IO subsystem, Operating Systems, Storage technologies would be a definite plus
• Hands-on experience with automation of system administration activities
• Hands on experience in building OS images and testing based on standard test framework.
• Proven ability to triaging and resolve issues during patch testing & certification
• Experience in OEM, Linux OS Patching, Yum, KSplice, etc.
• Excellent Scripting skills in Bash, Perl, Python, or similar scripting languages

   Good To Have:

• Good experience on private cloud management. 
• Proxmox virtualization
• Ability to build and grow the team. 

Required Skills: 

• Prior experience in performing the same role in a SaaS security product company.  
• Minimum 10 years of industry experience. 
• Building and managing tools that power AWS cloud services. 
• Experience with managing large scale multi-tenanted SaaS applications. 
• High Availability (HA) and Disaster Recovery (DR) planning and implementation. 
• Expert knowledge of Terraform.  
• AWS SysOps Administrator or DevOps Engineer Certification. 
• Outstanding collaboration and communication skills. Ability to effectively collaborate with distributed teams.  

Nice to Have: 

• Experience going through compliance audits like SOC2, ISO 2700x.