L2 Infrastructure Support Engineer

Role Overview -

The L2 Infrastructure Support Engineer is responsible for managing, operating, and supporting the organizations server infrastructure across Windows and Linux platforms. This role includes administration of Active Directory (AD), SAN/NAS storage systems, and handson involvement in security operations such as Antivirus, Privileged Access Management (PAM), XDR/EDR, DLP, and email access security controls. The engineer will work closely with L3 and SOC teams to ensure secure, stable, and high-performing IT services.

Key Responsibilities

1. Server Management (Windows & Linux)

• Perform installation, configuration, and administration of Windows Server (2016/2019/2022) and Linux Server environments (RHEL, CentOS, Ubuntu).
• Monitor and manage server performance, system logs, patching, kernel updates, and OS-level troubleshooting.
• Maintain and manage IIS, DHCP, DNS, NTP, FTP, and other server roles.
• Troubleshoot OS issues, performance bottlenecks, disk utilization, and memory or CPU spikes.
• Support virtualization platforms (VMware/Hyper-V) for VM provisioning, snapshots, and resource allocation.

2. Active Directory (AD) Management

• Manage and maintain Active Directory users, groups, OU structure, and Group Policy Objects (GPOs).
• Perform password resets, account unlocks, security policy updates, and AD cleanup activities.
• Implement, troubleshoot, and maintain AD replication, DNS integration, FSMO roles, and AD health monitoring.
• Support Azure AD, ADFS, and hybrid identity integrations (if applicable).

3. Storage Infrastructure (SAN & NAS)

• Perform L2 operations for SAN (Storage Area Network) and NAS (Network Attached Storage) systems.
• Manage LUN allocation, zoning, masking, and storage provisioning.
• Monitor storage health, performance, capacity utilization, and backup/restoration jobs.
• Troubleshoot storage connectivity issues related to Fibre Channel, iSCSI, and NFS/SMB file shares.

4. Security Operations Support

Antivirus & Endpoint Security

• Manage enterprise antivirus solutions (e.g., Symantec, Trend Micro, McAfee, Defender).
• Monitor virus outbreaks, remediate infected endpoints, and ensure AV definitions are up to date.

PAM/PEM (Privileged Access Management)

• Support Privileged Access Management tools (CyberArk, BeyondTrust, etc.).
• Manage privileged credential checkouts, vault policies, session recordings, and PAM access requests.

XDR/EDR

• Support configuration and operations of EDR/XDR tools (CrowdStrike, SentinelOne, Sophos, Defender XDR).
• Review alerts, escalate incidents to SOC, and perform L2 triage of endpoint threats.

DLP (Data Loss Prevention)

• Monitor DLP alerts and support DLP policy enforcement on endpoints, email, and cloud apps.
• Investigate data leak events and support remediation actions.

Email Access Control

• Support Exchange/365 email security controls, transport rules, spam/quarantine management, and mailbox access control.
• Work with SOC/email security tools (Proofpoint, Mimecast, Exchange Online Protection).

5. Incident, Change, and Problem Management

• Provide L2 support for incidents related to server, storage, and security operations.
• Troubleshoot issues escalated from L1 and coordinate with L3/architect teams when required.
• Perform root cause analysis and document preventive measures.
• Participate in scheduled maintenance, planned changes, and patching activities.

6. Monitoring & Documentation

• Monitor servers, storage, and security tools using enterprise monitoring solutions (Nagios, SolarWinds, PRTG, Zabbix).
• Maintain up-to-date configurations, SOPs, knowledge base articles, server inventory, and compliance documents.
• Generate operational reports for server uptime, storage utilization, and security events.

Required Technical Skills

• Windows Server Administration (2016/2019/2022)
• Linux Server Administration (RHEL/CentOS/Ubuntu)
• Active Directory, DNS, DHCP, GPO
• VMware/Hyper-V virtualization
• SAN/NAS management (EMC, NetApp, Dell, HP, IBM or similar)
• Antivirus enterprise solutions
• PAM/PEM tools (CyberArk, BeyondTrust, etc.)
• XDR/EDR platforms
• DLP technologies
• O365/Exchange security operations
• Scripting knowledge (PowerShell, Bash) Preferred
• Understanding of ITIL processes

Soft Skills

• Strong analytical and troubleshooting abilities
• Good communication and documentation skills
• Ability to handle pressure and prioritize tasks
• Team collaboration and process adherence

Qualifications

• Bachelors degree in IT/Computer Science or equivalent
• 3–7 years of experience in L2 Infrastructure/Server Support roles
• Relevant certifications preferred:
• Microsoft (MCSA/MCSE, AZ-104)
• Red Hat RHCSA/RHCE
• VMware VCP
• ITIL Foundation
• Security certifications (Security+, CYSA+, etc.) – Optional

Key Deliverables

• High availability and performance of server and storage systems
• Timely resolution of incidents and service requests
• Accurate AD, server, and storage documentation
• Compliance with security policies and audit requirements
• Effective interaction with SOC, L1, and L3 teams for secure operations