# Information Technology - Infrastructure Head

**Company:** [TerraPay](http://jobs.workable.com/companies/6bfwKyCDKzEQxELcKH4nzd.md)
**Location:** Bengaluru, India
**Workplace:** on site
**Department:** IT

[Apply for this job](http://jobs.workable.com/view/84980a06-db3f-46f8-b4d1-1bcb902c1706)

## Description

**Job Summary**

We are seeking a seasoned, strategic **Information Technology** **Infrastructure Head** to lead our global IT Infrastructure organization. The ideal candidate will be responsible for defining and executing enterprise IT strategy while driving operational excellence across Infrastructure, Cloud, Enterprise Applications, IT Compliance, IT Operations, End User Computing, AI Enablement, and Business Continuity.

The role requires a hands-on technology leader with strong expertise in cloud technologies, cybersecurity, networking, Microsoft 365, infrastructure, compliance frameworks, vendor management, and enterprise IT governance.

## Requirements

**IT Strategy & Leadership**

-   Define and execute enterprise IT strategy aligned with business objectives.
-   Lead modernization of enterprise IT infrastructure and workplace technologies.
-   Establish IT governance, policies, standards, and best practices.
-   Present technology strategy, risk posture, budgets, and operational metrics to executive leadership.
-   Drive adoption of AI and automation across IT operations.

**Datacenter Management**

-   Manage enterprise datacenter operations including compute, storage, virtualization, and networking.
-   Lead VMware vCenter administration and virtualization strategy.
-   Ensure high availability, scalability, disaster recovery, and business continuity.
-   Oversee server lifecycle management, storage infrastructure, and backup solutions.
-   Manage enterprise monitoring and capacity planning.

**Network & Security Infrastructure**

-   Design, implement, and manage enterprise networking solutions.
-   Manage Routing & Switching infrastructure.
-   Administer enterprise Firewalls and VPN solutions.
-   Ensure secure remote connectivity and Zero Trust network architecture.
-   Monitor network availability, performance, and security.

**Microsoft 365 & Digital Workplace**

Lead administration and governance of Microsoft 365 ecosystem.

Manage:

-   Exchange Online
-   Microsoft Teams
-   SharePoint Online
-   Microsoft Entra ID (Azure AD)
-   Microsoft Purview
-   Microsoft Defender Suite

-   Oversee Identity & Access Management (IAM), Conditional Access, MFA, and Endpoint Management.
-   Drive workplace collaboration and productivity initiatives.

**Endpoint Management**

-   Manage Windows and macOS environments.
-   Implement Mobile Device Management (MDM) solutions.
-   Oversee endpoint security, patch management, software deployment, and device lifecycle management.
-   Ensure endpoint compliance with organizational security standards.

**Cloud Infrastructure & Security**

-   Lead the strategy, architecture, governance, security, and operations of the enterprise AWS cloud platform across all environments.
-   Design and manage scalable, highly available, and secure cloud infrastructure leveraging AWS services including **VPC, EC2, ECS, RDS, S3, R53, ALB, Systems Manager (SSM), WAF, GuardDuty, Inspector**, and other core platform services.
-   Establish cloud governance, multi-account architecture, landing zones, Infrastructure as Code (IaC), automation, monitoring, backup, disaster recovery, and business continuity capabilities.
-   Implement cloud security best practices, including IAM, encryption, logging, vulnerability management, CSPM, and continuous security posture assessment using AWS native services and third party tools.
-   Ensure compliance with the **AWS Well-Architected Framework**, **CIS Benchmarks**, and organizational security, regulatory, and audit requirements.
-   Drive cloud cost optimization (FinOps), operational excellence, and continuous service improvement through performance monitoring, capacity planning, and automation.

**Cybersecurity**  

-   Lead the enterprise cybersecurity strategy, governance, and security operations to protect the organization's people, data, applications, and infrastructure.
-   Establish and oversee Security Operations Center (SOC), threat detection, incident response, vulnerability management, penetration testing, red teaming, and cyber resilience programs.
-   Manage enterprise security technologies including SIEM, XDR/EDR, Email Security, Identity & Access Management (IAM), and Zero Trust architecture.
-   Drive continuous security monitoring, threat intelligence, risk assessment, and security posture improvement through proactive detection and remediation.
-   Develop and implement security policies, standards, awareness programs, and incident response procedures aligned with industry best practices.
-   Ensure compliance with regulatory requirements and security frameworks while supporting internal, external, and customer security audits.

**DevOps Engineering**

-   Lead the enterprise DevOps strategy, platform engineering, and automation initiatives to enable secure, scalable, and reliable application delivery.
-   Establish and govern CI/CD pipelines, Infrastructure as Code (IaC), configuration management, release management, and DevSecOps best practices across development teams.
-   Manage and optimize enterprise DevOps platforms and tools including **GitLab, GitLab Runner, Jenkins, Ansible, Terraform, HashiCorp Vault, HashiCorp Boundary, etc,** and related automation, orchestration, and deployment technologies.
-   Drive DevSecOps by integrating security, compliance, vulnerability scanning, secrets management, and automated quality controls throughout the Software Development Life Cycle (SDLC).
-   Partner with Engineering teams to improve deployment frequency, platform reliability, scalability, observability, and operational efficiency through automation and continuous improvement.
-   Define DevOps governance, standards, and best practices to support secure software delivery, high availability, business continuity, and operational excellence.

**Database Administration**

-   Lead the enterprise database strategy, governance, and operational management across Production, Non-Production, and Disaster Recovery environments.
-   Oversee the availability, performance, scalability, security, and lifecycle management of enterprise database platforms supporting business-critical applications.
-   Establish standards for database architecture, backup and recovery, disaster recovery, high availability, replication, patch management, performance optimization, and capacity planning.
-   Ensure database security through hardening, access governance, encryption, vulnerability management, auditing, and compliance with organizational and regulatory requirements.
-   Drive database automation, monitoring, and operational excellence while partnering with Engineering, Infrastructure, and DevOps teams to support application delivery and business continuity.
-   Define database governance, policies, and best practices to ensure data integrity, reliability, resilience, and regulatory compliance.

**Information Security & Compliance**

-   Lead the organization's Governance, Risk, and Compliance (GRC) program, ensuring alignment with business objectives, regulatory requirements, and industry best practices.
-   Drive enterprise compliance initiatives across **ISO 27001, PCI DSS, SOC 2 Type II, SWIFT CSP, ISO 27701, ISO 22301, CSA STAR, DORA, FCA**, and the **Digital Personal Data Protection (DPDP) Act**.
-   Establish and maintain enterprise security policies, standards, risk management frameworks, and governance processes to strengthen the organization's security and compliance posture.
-   Lead internal and external audits, customer audits, certification programs, third-party risk management (TPRM), vendor security assessments, and customer security due diligence activities.
-   Oversee enterprise risk management, including risk assessments, risk registers, security questionnaires, compliance reporting, remediation tracking, and executive risk reporting.
-   Drive business continuity and disaster recovery governance to ensure organizational resilience and regulatory compliance.

**IT End User Support & Service Management**

-   Lead the enterprise IT Service Desk and End User Support functions, delivering a secure, reliable, and exceptional digital workplace experience across the organization.
-   Oversee IT Service Management (ITSM) processes, including Incident, Problem, Change, Release, and Service Request Management, ensuring adherence to SLAs, KPIs, and continual service improvement.
-   Manage the complete IT asset lifecycle, software licensing, endpoint provisioning, and technology refresh programs while ensuring governance and compliance.
-   Drive automation, self-service capabilities, and process optimization to improve service efficiency, user experience, and operational excellence.
-   Establish service delivery standards, performance metrics, reporting, and governance to ensure high-quality IT support and business continuity.
-   Partner with business stakeholders to continuously enhance end-user productivity, workplace technologies, and customer satisfaction.

**Monitoring & Observability**

-   Lead the enterprise monitoring and observability strategy to ensure the availability, performance, reliability, and security of infrastructure, cloud platforms, applications, and business-critical services.
-   Manage and optimize enterprise monitoring solutions including **Grafana, Prometheus, CheckMK, and AWS CloudWatch**, while establishing centralized dashboards, alerting, and reporting.
-   Define monitoring standards, service health metrics, and operational KPIs to enable proactive incident detection, capacity planning, performance optimization, and continuous service improvement.
-   Collaborate with Infrastructure, Cloud, DevOps, and Security teams to strengthen observability, operational resilience, and root cause analysis across the technology landscape.

**Vendor, Financial & Resource Management**

-   Develop and manage annual IT budgets.
-   Vendor evaluation and contract negotiations.
-   Procurement planning.
-   Software licensing optimization.
-   Managed Service Provider (MSP) governance.
-   Cost optimization initiatives.

**Leadership & People Management**

-   Build and mentor high-performing IT teams.
-   Define OKRs and KRAs for IT functions.
-   Performance management and succession planning.
-   Foster a culture of innovation, accountability, and continuous improvement.
-   Collaborate effectively with Engineering, Product, HR, Finance, Legal, Compliance, and executive leadership.

**Required Skills:**

-   **IT Leadership**
-   **Networking & Infrastructure**
-   **Microsoft 365**
-   **Cloud (AWS)**
-   **Cloud Security**
-   **Cybersecurity**
-   **DevOps & Automation**
-   **Database Administration**
-   **Monitoring & Observability**
-   **Compliance & Risk**
-   **IT Service Management**

**Qualifications**

-   Bachelor's degree in Computer Science, Information Technology, Engineering, or a related discipline.
-   Master's degree (MCA/M.Tech) is preferred.
-   15–20+ years of progressive experience in Enterprise IT, Infrastructure, Cloud, and Cybersecurity.
-   Minimum 8+ years in a senior leadership role managing enterprise IT functions.
-   Experience in SaaS, FinTech, Product Engineering, or global technology organizations is highly preferred.

**Certifications - Preferred**

-   CISM (Security)
-   CISSP (Security)
-   AWS Certified Solutions Architect – Professional – Cloud Ops
-   AWS Certified Security – Specialty – Cloud ops
-   Microsoft Certified: Azure Solutions Architect Expert – M365
-   ITIL 4 Managing Professional - ITSM
-   CCNA- Infrastructure, routing switching, networking
-   CEH – (Security)
-   ISO 27001:2022 Lead Auditor.- Training/ certification
-   CIPE/P – Data Protection & Privacy