Network & Security Administrator-Senior Executive

Senior Executive – Network & Security Administrator

ICRISAT seeks application from motivated professionals for a role of an Senior Executive – Network & Security Administrator to be hired in Digital Solutions Unit under Corporate Services. The role involves administration and providing support in the area of network and security while ensuring consistent, reliable, high speed and secure network connection across ICRISAT. The incumbent will focus on key responsibilities such as ensuring network & security service excellence, optimizing its operations, resolving incidents and problems, and driving continuous improvement. This role also includes administering multiple platforms related to network and security. The incumbent will be based at ICRISAT, Patancheru, Hyderabad, India as an administrator of the network and security under the enterprise infrastructure portfolio of the Digital Solutions Unit.

ICRISAT is a non-profit, non-political organization that conducts agricultural research for development in Asia and sub-Saharan Africa with a wide array of partners throughout the world. Covering 6.5 million square kilometers of land in 55 countries, the semi-arid or dryland tropics have over 2 billion people and 644 million of these are the poorest of the poor. ICRISAT and its partners help empower these disadvantaged populations to overcome poverty, hunger, and a degraded environment through better agricultural production systems. Please visit – www.icrisat.org

Role:

• Plan, design, and implement network infrastructure (including wired and wireless LAN, WAN, firewalls, and VPNs) to ensure seamless access for employees and devices, providing ongoing support as needed.
• Configure and deploy routers, switches, and other networking hardware in appropriate locations, ensuring continuous support and maintenance.
• Regularly monitor network devices, apply updates and patches, and ensure network performance remains stable, reliable, and secure.
• Configure, manage and maintain firewalls, intrusion detection/prevention systems (IDS/IPS), and endpoint protection platforms.
• Continuously monitor networks for suspicious activities, apply necessary security measures, and ensure timely resolution of security incidents.
• Maintain an up-to-date inventory of network hardware and software, while keeping detailed documentation of network configurations, diagrams, and policies.

Key Responsibilities:

Network Administration

• Install, configure, and manage core and access layer switches (Juniper, Cisco, TP-Link, Netgear, etc.), including managed, unmanaged, PoE, and non-PoE switches.
• Configure and troubleshoot wired and wireless LAN/WAN networks by managing IP addressing, subnetting, and DNS/DHCP configurations to ensure optimal performance and connectivity.
• Assess requirements for new wired and wireless LAN setups, prepare the necessary Bill of Materials (BOM), and coordinate procurement.
• Extend network connectivity through proper VLAN configuration, fiber backbone integration, and access layer technologies.
• Install and configure Wireless Access Points, including mounting, realignment, and RJ45 jack crimping.
• Provide support for passive networking tasks such as laying Ethernet cables, mounting access points, and setting up RJ45 jacks with IO box crimping.
• Configure, maintain, and support IoT devices, including Alexa lamps, CCTV cameras, and network printers, while ensuring firmware upgrades for security and stability.
• Monitor wired and wireless controllers, perform log analysis and troubleshooting, and take proactive measures to ensure network stability.
• Track and document ISP link performance daily, implementing proactive measures to maintain a stable internet connection.
• Oversee and maintain UPS system health using centralized monitoring dashboards.

Security Administration

• Configure and manage modern firewall devices such as Sophos, Fortinet, and Palo Alto, with hands-on experience in key features like load balancing, rules/policies, NAT/SNAT/DNAT, DMZ, VPN, reverse proxies, and access control.
• Secure endpoints (laptops, desktops, and mobile devices) using Endpoint Protection tools and Platforms (EPP) and Endpoint Detection and Response (EDR) tools.
• Investigate and analyze security logs, respond to security breaches or incidents, conduct root cause analysis, and implement preventive measures.
• Monitor and manage Data Loss Prevention (DLP) systems to prevent unauthorized data exfiltration.
• Detect, analyze, and mitigate threats targeting endpoints and network devices.
• Stay informed about emerging security technologies and tools, providing recommendations to enhance the organization’s security posture.

Qualifications and Skills:

• Bachelor’s degree in information technology, Computer Science, computer engineering or any discipline with a minimum of 6 years of experience in a related field, or related roles.

Expertise in Networking protocols (TCP/IP, DNS, DHCP, VLANs, etc.), Security tools (firewalls, IDS/IPS, MDR, SIEM, endpoint protection), Operating systems (Windows, Linux, macOS), Cloud security (AWS, Azure, Google Cloud)

• Problem-solving and analytical thinking.
• Stay updated on emerging technologies, threats, and best practices.

Good to have –

• Cisco Certified Network Associate (CCNA).
• Juniper Networks Certified Associate (JNCIA).
• CompTIA Network+
• CompTIA Security+

Key Relationships/collaboration:

• Internal: Work closely with other IT team’s portfolios to integrate security into all aspects of the organization’s infrastructure for seamless network and security systems.
• External: Engage with technology vendors, consultants, and industry experts to explore and implement Network and Security technologies.

General:

This is a contractual position for a period of 36 months.

How to apply:

The position will remain open until as suitable candidate is hired. Applicants should apply with their latest resume and the names and contact information of three references that are knowledgeable about their professional qualifications and work experience. All applications will be acknowledged; however, only short-listed candidates will be contacted.

ICRISAT is an equal opportunity employer