IT Systems & Network Engineer

Help increase the GDP of the internet as part of our Technology team service account inventory in GCP — ensure all service accounts have named human owners and minimum necessary permissions Saa S Tool Administration: Administer and secure all company Saa S tools — Google Workspace, Slack, Notion, Git Hub, Jira, Scrut,and others Maintain an approved Saa S tool register — track what tools are in use, who owns them, what data they hold, and their security configuration Enforce SSO and MFA on every Saa S tool where the platform supports it Identify and remove shadow IT — tools being used by teams without IT awareness or approval GCP & Cloud Security : Work alongside Dev Ops to implement and maintain GCP security configurations: VPC firewall rules, IAM policies, org-level security policies, and Cloud Audit Logs Connect GCP and Modal.com to Scrut's Cloud module and maintain automated security posture scanning — track and remediate misconfigurations Ensure encryption at rest is enabled on all GCS buckets containing customer data and model weights Maintain centralised logging in GCP Cloud Logging — confirm audit logs are enabled across all projects, retained for 12 months, and tamper-protected Run regular vulnerability scans using GCP Security Command Center or equivalent — document findings and track remediation to closure Network & Office Security : Manage office network security at both the HSR Layout (Bengaluru) office — VLAN segmentation, guest Wi-Fi isolation, DNS filtering Deploy and maintain VPN for remote access to internal systems and production infrastructure Configure and maintain web filtering (Cloudflare Gateway or equivalent) covering both office and remote workers Maintain network diagrams and data flow diagrams as required by Scrut control AST-04 Security Controls & Audit Evidence : Own all technical controls in Scrut across the Endpoint Security, Identification & Authentication, Network Security, Cloud Security, and Asset Management domains — 60+ controls directly under your remit Collect, upload, and maintain evidence in Scrut for every assigned control — screenshots, exports, scan reports, configuration files Respond to evidence requests from the GRC Lead and external auditors during ISO 27001 Stage 1/Stage 2 audits and SOC 2 assessment Implement and test the remote wipe procedure for lost or stolen devices — document test results as audit evidence What We're Looking For : 5+ years of experience in an IT admin, IT operations, or junior security engineer role Hands-on experience with at least one MDM platform — Jamf, Kandji, Microsoft Intune, or equivalent Experience administering Google Workspace or Microsoft 365 at an organisational level — user management, group policies, security settings Familiarity with GCP or AWS — comfortable navigating IAM, VPC, storage, and audit log configurations Experience with identity providers and SSO — Okta, Google Workspace, Azure AD Understanding of endpoint security fundamentals — disk encryption, EDR, antivirus, patch management Comfortable working in a fast-moving startup where you will own problems end-to-end without a large team behind you Nice to Have : Experience supporting a SOC 2 or ISO 27001 audit — collecting evidence, responding to auditor requests Familiarity with a GRC platform (Scrut.io, Vanta, Drata, or equivalent) Google Workspace Administrator certification or GCP Associate Cloud Engineer certification Experience with CI/CD security tooling — Git Hub Actions security, container image scanning, SAST integration Knowledge of network security fundamentals — VLANs, firewall rules, DNS filtering, VPN Scripting ability (Python or Bash) for automating IT operations tasks — account provisioning, compliance reporting Prior experience at a startup or high-growth tech company