System Administrator (Enterprise Security & IT Operations)

Company Description

Gentle.money redefines personal finance by creating a meaningful and connected financial journey for individuals. Through multi-asset portfolio tracking, AI-driven analysis, and personalized discovery, Gentle empowers users to make informed financial decisions. With an emphasis on trust and credibility, the platform breaks barriers and bridges gaps, transforming financial management into an intuitive and insightful experience.

Gentle is committed to fostering financial education and simplifying complexity for its users.

Role Description

We are looking for a highly responsible and security-focused System Administrator to manage and enforce end-to-end IT infrastructure, device management, and multi-layer security architecture across the organization.

This role is critical to ensuring secure operations, compliance with SOPs, and seamless IT support for both technical and non-technical teams.

Key Responsibilities1. IT Infrastructure & Device Management

• Manage and maintain all company devices (laptops, desktops, mobile devices)
• Implement device lifecycle management:
• Procurement → Configuration → Tagging → Allocation → Maintenance → Decommissioning
• Ensure all systems are:
• Updated
• Securely configured
• Performance optimized
• Maintain asset inventory with laptop tagging & tracking system
• 7-Layer Security Implementation & MonitoringLayer 1: Physical Security
• Control access to office premises and server rooms
• Monitor CCTV and access logs
• Ensure secure device storage and movement tracking

Layer 2: Device Security

• Enforce:
• Disk encryption (BitLocker or equivalent)
• Antivirus / EDR solutions
• USB & peripheral restrictions
• Implement remote lock/wipe capabilities

Layer 3: Network Security

• Manage:
• Firewalls
• VPN access
• Office network segmentation
• Monitor traffic and unauthorized access attempts

Layer 4: Identity & Access Management (IAM)

• Manage:
• Microsoft Entra ID (Azure AD)
• Role-Based Access Control (RBAC)
• Enforce:
• Least privilege access
• MFA across systems

Layer 5: Application Security

• Manage licenses and access for:
• Outlook, Microsoft 365, and other SaaS tools
• Monitor usage and revoke unauthorized access

Layer 6: Data Security

• Ensure:
• Secure file storage (OneDrive/SharePoint/Drive)
• Backup policies and recovery processes
• Prevent data leakage

Layer 7: Monitoring & Compliance

• Implement logging and monitoring systems
• Ensure adherence to all internal SOPs
• Conduct periodic security audits
• User Lifecycle ManagementOnboarding
• Setup new employees:
• Device allocation & configuration
• Email & system accounts
• Access provisioning as per role
• Coordinate with HR & Tech teams

Offboarding

• Revoke all access immediately
• Recover company assets
• Ensure secure data wipe
• Email, Cloud & SaaS Administration
• Manage:
• Microsoft 365 (Outlook, Teams, OneDrive)
• Google Workspace (if applicable)
• Handle:
• License allocation
• Email security policies
• Spam and phishing protection
• Network, Domain & DNS Management
• Manage:
• DNS configurations
• Domain records
• Hosting-level settings
• Ensure uptime and security of services
• Mobile & Remote Workspace Management
• Configure and manage:
• Remote work environments
• Secure device access policies
• Enforce BYOD policies (if applicable)
• SOP Execution & Compliance
• Strictly follow and enforce all IT SOPs:
• Device security SOP
• IAM SOP
• Patch management SOP
• Backup SOP
• Document processes and maintain logs
• Continuously improve SOPs
• IT Support & Troubleshooting
• Provide L1/L2 support for:
• Hardware issues
• Software issues
• Network problems
• Ensure minimal downtime for employees

Required Skills & QualificationsTechnical Skills

• Strong experience with:
• Microsoft 365 & Azure (Entra ID)
• Firewall & network management
• Endpoint security tools (EDR, Antivirus)
• Knowledge of:
• DNS, domains, hosting
• VPN and remote access systems
• Device management tools (MDM)

Security Expertise

• Understanding of:
• Multi-layer security architecture
• RBAC & IAM policies
• Data protection practices

Operational Skills

• Ex