System Administrator 2

Scope Coverage

a) IT Infrastructure in Mumbai Office:

We are using Microsoft O365 & SharePoint as the predominant Business Communication Tools.

We have Active Azure IDs which are used to centrally manage the access and rights on the system

We use Microsoft O365 Premium Licenses for individual users and the systems like Microsoft Entra, ID, Intune, DLP and Defender for O365 (P1) etc.

The Data being exchanged at our premises is being monitored and supervised using a Firewall

We have @ 50+ user Laptops out of which 8 Laptops are on the Solar Plants

There are a couple of Network Printers in the office operating on the system

The Office network is a combination of Firewall, Network switches, and Aruba Wireless System

There are various SAAS Utilities being used by us like SEIT_Guard, Sharepoint, SAP Online version etc.

b) OT Infrastructure at 8 Solar Plants

The primary workstations are all windows-based SCADA or SAS Utilities

The Plant Ethernet Network is a combination of various mediums including Fiber Optics, Wifi & Cat-V/VI cables

There are various components spread across the plant, forming a network and sharing information with each other from that network

At the moment there is a single firewall, which we are bifurcating into IT & OT space and creating a DMZ in between

We are using Trendmicro system for improving immunity against virus and application whitelisting

The Internet bandwidth is available on the plants through dedicated leased lines

Scope of Work

Asset Management:

• Maintain an inventory of IT and OT assets including Hardware and Software Licenses.

• Conduct periodic checks for assurance of the Physical Inventory of the IT & OT Assets (with help of the Asset Managers)

• Maintain an End of Support / End of Warranty / Obsoletion Chart for Software & Hardwar

Rights & Privileges Management:

• Manage the access control based on the least-privilege access control and facilitate regular review of user roles based on appropriate approvals

• Manage secure remote access with VPN, MFA, and endpoint hardening as per the company policies based on the appropriate approvals

• Record all the transactions appropriately

• Ensure the antivirus/endpoint protection, and Windows Patch Management as well as Patching of Network Devices are done on a regular basis and review the functioning of the automated patching system regularly.

• Suggest any improvements in the existing system which can strengthen the security of the system

Maintain ISO 27001-compliances as required by the Standard and Policies:

• The agency shall carry out 2 internal audits themselves with help of their additional resources and confirm the compliance / find out the gaps observed

• Maintain adequate records as required by the ISMS Policies & SOP’s

• Operate the Centralized Ticketing & Asset Management System (ZOHO Manage Engine) for both IT & OT Infrastructure

Incident Management & Recovery:

• Maintain an incident log with defined roles and escalation paths.

• Conduct post-incident analysis and corrective actions.

• Support the site team for Windows Administration to back-up of the identified systems, especially in the plant for Engineering and Process Data Back-up

• Support the site team for with Windows Capability for restoration of the systems.

• Regularly Test the Data back-up and mock recovery once in a year and update the recovery procedures on the basis of this experience

• For the above 3 points, please advise the Owner with the parts / gadgets required and their compatibility

Training and Awareness

• Conduct regular training on information security and phishing awareness.

• Conduct regular training on various policies of ISMS through self-created awareness tools using Survey Monkey and its likes.

Remote Support:

• Remote Expertise of the agency will be used on need basis for Networking design, O-365 Management, System Improvements, ISMS Policy Review and improvements

• Monthly infrastructure health & event reports

• Quarterly Incident review reports

• ISO 27001 gap identification Internal review once every 6 monthsRole & responsibilities

Preferred candidate profile