Lead I - Cloud Infrastructure Services

Job Description

JOB DESCRIPTIONRole Proficiency:Resolve enterprise trouble tickets within agreed SLA and raise problem tickets for permanent resolution and/or provide mentorship (Hierarchical or Lateral) to junior associatesOutcomes:

1) Update SOP with updated troubleshooting instructions and process changes2) Mentor new team members in understanding customer infrastructure and processes3) Perform alert analysis for driving incident reduction4) Escalate high priority incidents to customer and organization stakeholders for quicker resolution5) Contribute to planning and successful migration of platforms 6) Resolve enterprise trouble tickets within agreed SLA and raise problem tickets for permanent resolution7) Provide inputs for root cause analysis after major incidents to define preventive and corrective actions

Measures of Outcomes:

1) SLA Adherence2) Time bound resolution of elevated tickets - OLA3) Manage ticket backlog timelines - OLA4) Adhere to defined process - Number of NCs in internal/external Audits5) Number of KB articles created6) Number of incidents and change ticket handled 7) Number of elevated tickets resolved8) Number of successful change tickets9) % Completion of all mandatory training requirements

Outputs Expected:Resolution:

1. Understand Priority and Severity based on ITIL practice resolve trouble ticket within agreed resolution SLA
2. Execute change control tickets as documented in implementation plan

Troubleshooting:

1. Troubleshooting based on available information from previous tickets or consulting with seniors Participate in online knowledge forums reference.
2. Covert the new steps to KB article
3. Perform logical/analytical troubleshooting

Escalation/Elevation:

1. Escalate within organization/customer peer in case of resolution delay.
2. Understand OLA between delivery layers (L1 L2 L3 etc) adhere to OLA.
3. Elevate to next level work on elevated tickets from L1

Tickets Backlog/Resolution:

1. Follow up on tickets based on agreed timelines manage ticket backlogs/last activity as per defined process.
2. Resolve incidents and SRs within agreed timelines.
3. Execute change tickets for infrastructure

Installation:

1. Install and configure tools software and patches

Runbook/KB:

1. Update KB with new findings
2. Document and record troubleshooting steps as knowledge base

Collaboration:

1. Collaborate with different towers of delivery for ticket resolution (within SLA resolve L1 tickets with help from respective tower.
2. Collaborate with other team members for timely resolution of tickets.
3. Actively participate in team/organization-wide initiatives.
4. Co-ordinate with UST ISMS teams for resolving connectivity related issues.

Stakeholder Management:

1. Lead the customer calls and vendor calls.
2. Organize meeting with different stake holders.
3. Take ownership for functions internal communications and related change management.

Strategic:

1. Define the strategy on data management policy management and data retention management.
2. Support definition of the IT strategy for the functions relevant scope and be accountable for ensuring the strategy is tracked benchmarked and updated for the area owned.

Process Adherence:

1. Thorough understanding of organization and customer defined process.
2. Suggest process improvements and CSI ideas.
3. Adhere to organization s policies and business conduct.

Process/efficiency Improvement:

1. Proactively identify opportunities to increase service levels and mitigate any issues in service delivery within the function or across functions.
2. Take accountability for overall productivity efforts within the function including coordination of function specific tasks and close collaboration with Finance.

Process Implementation:

1. Coordinate and monitor IT process implementation within the function

Compliance:

1. Support information governance activities and audit preparations within the function.
2. Act as a function SPOC for IT audits in local sites (incl. preparation interface to local organization mitigation of findings etc.) and work closely with ISRM(Information Security Risk Management). Coordinate overall objective setting preparation and facilitate process in order to achieve consistent objective setting in function .
3. Coordination Support for CSI across all services in CIS and beyond.

Training:

1. On time completion of all mandatory training requirements of organization and customer.
2. Provide On floor training and one to one mentorship for new joiners.
3. Complete certification of respective career paths.

Performance Management:

1. Update FAST Goals in NorthStar track report and seek continues feedback from peers and manager.
2. Set goals for team members and mentees and provide feedback
3. Assist new team members to understand the customer environment

Skill Examples:

1) Good communication skills (Written verbal and email etiquette) to interact with different teams and customers. 2) Modify / Create runbooks based on suggested changes from juniors or newly identified steps3) Ability to work on an elevated server ticket and solve4) Networking:a. Trouble shooting skills in static and Dynamic routing protocolsb. Should be capable of running netflow analyzers in different product lines5) Server:a. Skills in installing and configuring active directory DNS DHCP DFS IIS patch managementb. Excellent troubleshooting skills in various technologies like AD replication DNS issues etc.c. Skills in managing high availability solutions like failover clustering Vmware clustering etc.6) Storage and Back up:a. Ability to give recommendations to customers. Perform Storage & backup enhancements. Perform change management.b. Skilled in in core fabric technology Storage design and implementation. Hands on experience on backup and storage Command Line Interfacesc. Perform Hardware upgrades firmware upgrades Vulnerability remediation storage and backup commissioning and de-commissioning replication setup and management.d. Skilled in server Network and virtualization technologies. Integration of virtualization storage and backup technologiese. Review the technical diagrams architecture diagrams and modify the SOP and documentations based on business requirements.f. Ability to perform the ITSM functions for storage & backup team and review the quality of ITSM process followed by the team.7) Cloud:a. Skilled in any one of the cloud technologies - AWS Azure GCP.8) Tools:a. Skilled in administration and configuration of monitoring tools like CA UIM SCOM Solarwinds Nagios ServiceNow etcb. Skilled in SQL scriptingc. Skilled in building Custom Reports on Availability and performance of IT infrastructure building based on the customer requirements9) Monitoring:a. Skills in monitoring of infrastructure and application components10) Database:a. Data modeling and database design Database schema creation and managementb. Identify the data integrity violations so that only accurate and appropriate data is entered and maintained.c. Backup and recoveryd. Web-specific tech expertise for e-Biz Cloud etc. Examples of this type of technology include XML CGI Java Ruby firewalls SSL and so on.e. Migrating database instances to new hardware and new versions of software from on premise to cloud based databases and vice versa.11) Quality Analysis: a. Ability to drive service excellence and continuous improvement within the framework defined by IT Operations

Knowledge Examples:1) Good understanding of customer infrastructure and related CIs.

2) ITIL Foundation certification3) Thorough hardware knowledge 4) Basic understanding of capacity planning5) Basic understanding of storage and backup6) Networking:a. Hands-on experience in Routers and switches and Firewallsb. Should have minimum knowledge and hands-on with BGPc. Good understanding in Load balancers and WAN optimizersd. Advance back and restore knowledge in backup tools7) Server:a. Basic to intermediate powershell / BASH/Python scripting knowledge and demonstrated experience in script based tasksb. Knowledge of AD group policy management group policy tools and troubleshooting GPO alertsc. Basic AD object creation DNS concepts DHCP DFSd. Knowledge with tools like SCCM SCOM administration8) Storage and Backup:a. Subject Matter Expert in any of the Storage & Backup technology9) Tools:a. Proficient in the understanding and troubleshooting of Windows and Linux family of operating systems10) Monitoring:a. Strong knowledge in ITIL process and functions11) Database:a. Knowledge in general database management b. Knowledge in OS System and networking skills

Additional Comments:Job Summary We are looking for a highly skilled Network Subject Matter Expert specialising in firewall policy creation within an Operational Technology (OT) environment. As a Network Subject Matter Expert (NRA 2.0 Stage 2), your primary responsibility will be to define and implement comprehensive firewall policies to safeguard critical OT systems and networks. Your expertise in network security and in-depth understanding of OT environments will be crucial in ensuring the protection, availability, and compliance of industrial control systems. .Your role will be aligned to the NRA (Network Reference Architecture) 2.0 Deployment Program. Responsibilities 1. Create and develop comprehensive firewall policies for OT networks and systems, guaranteeing robust security and uninterrupted operations. 2. Collaborate closely with cross-functional teams to gather requirements and gain insights into the specific security challenges faced by OT systems. 3. Implement and manage firewall policies leveraging VMware NSX-T platform. 4. Provide expert guidance and support to internal stakeholders regarding firewall policy-related matters. 5. Troubleshoot and resolve complex network and security issues, thoroughly investigating and analyzing incidents as they arise. 6. Support Program Go-Live milestones and provide assistance during Hypercare periods. 7. Document firewall policies, configurations, and changes, maintaining accurate records for future reference and audits. Qualifications 1. Bachelors degree in Computer Science, Information Technology, or a related field. Relevant certifications (e.g., CCNA Security, CCNP Routing & Switching, CISSP, VMWare Certified Network Virtualisation) are advantageous. 2. Experience in defining and implementing firewall policies within OT environments. 3. The candidate must have good understanding of Routing and Switching technologies and protocols. 4. The candidate must have working experience in configuring and managing VMWare NSX-T based network technologies. Understanding other Enterprise grade firewall technologies such as Cisco ASA, Checkpoint, Palo Alto is an advantage. 5. The candidate must have working experience with Cisco Nexus 9K series datacenter switching platform. 6. Understanding of OT applications commonly used in terminal operations, including but not limited to Terminal Operating Systems (TOS), Gate Operating Systems (GOS), EDI, CCTV, Access Control systems, SCADA solutions, PLCs, etc. 7. Solid understanding of OT applications and communicaiton protocol such as MODBUS, Profinet, MQTT, etc 8. Solid understanding of common enterprise applications and communication protocols (Active Directory, DNS, NTP, Syslog, RDP, HTTP/HTTPS, database products, etc). 9. Understanding of forward and reverse proxy technologies is and advantage. 10. Strong analytical and problem-solving skills, with the ability to assess complex security issues and develop effective solutions. 11. Excellent communication and collaboration skills, able to work effectively with cross-functional teams and stakeholders at various levels. 12. Proactive mindset with a continuous learning approach to keep up-to-date with emerging technologies and security threats in the OT domain. 13. Demonstrated ability to work under pressure, prioritize tasks, and meet deadlines in a dynamic and challenging environment. 14. Strong attention to detail and a commitment to maintaining high standards of security and compliance

Keyskills :
Mqttnetwork securityRoutingDnsFirewallSyslogRdpModbusHTTP/HTTPSActive DirectoryNTPVMWare NSX-TSwitchingCisco Nexus 9Kprofinetforward and reverse proxydatabase products