Information Technology System Engineer

Here is the beautifully reformatted, clean, and highly scannable version of the job description for Metadome.ai.

Location: Bengaluru, India (On-site)

Department: IT & Information Security

Employment Type: Full-time

Experience: 5+ years in IT systems / infrastructure

Reports To: Engineering Leadership

• Directory Ownership: Manage the JumpCloud directory end-to-end, including user lifecycle (joiner / mover / leaver), groups, and organizational structure.
• Access Control: Administer SSO, enforce MFA, and configure conditional and device-based access policies across all SaaS applications.
• MDM Policies: Manage cross-platform device policies (macOS, Windows, Linux) via JumpCloud, including disk encryption and compliance baselines.
• Authentication: Integrate RADIUS / LDAP for Wi-Fi and application authentication.
• Automation: Automate onboarding and offboarding to guarantee least-privilege access and clean, auditable deprovisioning.

• Tenant Management: Administer users, groups, organizational units, and email routing.
• Security Controls: Enforce 2-Step Verification, context-aware access, DLP rules, and sharing/visibility policies.
• Data Governance: Manage retention, eDiscovery, and legal holds through Google Vault.
• Cost Optimization: Optimize licensing and SaaS spend across Workspace and other portals.

• Deployment: Configure and manage Sophos Central (Intercept X / XDR) across all endpoints and servers.
• Incident Response: Monitor alerts, triage threats, and lead incident detection, response, and remediation.
• Hardening: Maintain endpoint encryption, web / application control, and device-hardening standards.
• Network Security: Manage Sophos Firewall policies, IPS, and secure remote access where applicable.

• Architecture: Design, configure, and maintain firewalls, VLAN segmentation, VPN, and secure remote access.
• Infrastructure: Administer enterprise Wi-Fi and wired networks (switches, access points) utilizing RADIUS-backed authentication.
• Connectivity: Manage LAN / WAN connectivity, ISP relationships, network performance, and uptime.
• Monitoring: Implement network monitoring, intrusion detection, and centralized logging.

• Lifecycle Management: Own procurement, provisioning/imaging, maintenance, repair, and decommissioning of hardware.
• Fleet Support: Support a mixed fleet of macOS, Windows, and Android devices, including high-performance workstations and XR / VR hardware.
• Inventory: Maintain an accurate hardware/software inventory and asset register.
• Compliance: Manage software deployment, patch management, and license compliance.

• ISMS Ownership: Operate and continuously improve the company's Information Security Management System (ISMS).
• Audit Readiness: Drive day-to-day compliance for GDPR, SOC 2 (Type II), and ISO/IEC 27001, including control implementation and evidence collection.
• Assessments: Conduct risk assessments, internal audits, periodic access reviews, and vendor security / DPA assessments.
• Point of Contact: Serve as the primary lead during external audits and customer security reviews.
• Documentation: Maintain security policies, records of processing (RoPA), DPIAs, and incident/breach-response runbooks.
• Culture: Drive security-awareness and phishing-simulation programs across the organization.

• High Availability: Ensure 24x7 availability of core systems to meet defined uptime and SLA metrics.
• Escalation Support: Provide advanced troubleshooting across macOS, Windows, and Android.
• Disaster Recovery: Manage backups, disaster recovery, and business-continuity testing.
• Project & Budget: Coordinate internal teams and vendors to deliver IT projects on time. Own and report on the IT budget and asset allocation.

• Experience: 5+ years in IT systems / infrastructure engineering with direct, hands-on ownership (not purely supervisory).
• JumpCloud: Demonstrated expertise across identity, SSO, MFA, and device management.
• Google Workspace: Deep admin-console experience including security, DLP, and Vault.
• Sophos: Hands-on endpoint / XDR administration and threat response.
• Networking: Strong fundamentals in firewall configuration, Wi-Fi, VLANs, VPN, LAN/WAN, and RADIUS/LDAP.
• Compliance: Direct experience taking an organization through at least one full audit/certification cycle for GDPR, SOC 2, or ISO 27001.
• Cross-platform Support: Proven troubleshooting across macOS, Windows, and Android in a 24x7 environment.
• Education: B.Sc. / B.Tech in Information Technology, Computer Science, or a related discipline.

• Certifications: ISO 27001 Lead Implementer/Auditor, CompTIA Security+/Network+, or vendor-specific certs (JumpCloud/Sophos).
• Tools: Experience with compliance-automation platforms like Sprinto, Vanta, or Drata.
• Automation: Scripting experience for IT operations (Bash, PowerShell, or Python).
• Environment: Experience in a fast-paced SaaS/tech company supporting creative, 3D, or XR workflows.

Metadome.ai is an immersive 3D & XR technology company that enables cloud-based, photorealistic customer experiences for global brands. Our flagship automotive platform, Autodome, empowers brands to launch products virtually and drive engagement across the entire pre-retail funnel.

We are trusted partners to leading global brandsincluding Unilever, MG Motor, Lexus, Asian Paints, Tata Motors, and Royal Enfieldand collaborate with top-tier firms like TCS, SAP, and PwC.

You will completely own the systems and security posture of a company building category-defining immersive technology. This is a high-trust, high-ownership role with the autonomy to design systems properly and the visibility that comes with keeping a compliance-first business running flawlessly.

To apply, please send your rsum and a brief note detailing a compliance program (GDPR, SOC 2, or ISO 27001) you have personally implemented to:

• hr@metadome.ai