CrossBoundary

Systems and Security Engineer

Mumbai, India - Full Time

Join our Digital Core and Innovation (DCI) team to improve our evolving technology and security needs.

Location:

Candidates may join our team in one of CrossBoundary’s global office locations, pending local work authorisation. Locations include Accra, Bogota, Cape Town, Dubai, Dakar, Freetown, Johannesburg, Lagos, London, Lubumbashi, Mauritius, Mumbai, Nairobi, Washington D.C.

Systems & Security Engineer  
CrossBoundary Group 

About the Firm 

CrossBoundary Group CrossBoundary Group is a mission driven investment advisory and asset management firm dedicated to unlocking the power of capital for sustainable growth and strong returns in underserved markets. CrossBoundary Advisory has advised on over US$12 billion of closed transactions in underserved markets across a broad range of impactful sectors, including agriculture, health, education, manufacturing, ICT, infrastructure, and clean power. Our investment platforms drive impact by directly deploying capital. CrossBoundary Energy develops, owns, and operates distributed renewable energy solutions for businesses, offering cheaper and cleaner energy through power purchase and lease agreements. CrossBoundary Access uses blended finance and an innovative project financing structure to unlock capital for mini-grids with a mission to bring electricity for the first time to more than 1 million people. CrossBoundary Real Estate seeks to provide affordable housing and related infrastructure in East Africa. The Fund for Nature is scaling investment into nature-based solutions in emerging and frontier markets. For additional information, visit www.crossboundary.com. 

Job Description

CrossBoundary team is recruiting a full-time Systems & Security Engineer to join our Digital Core and Innovation (DCI) team. We are seeking a resourceful, innovative, and creative problem-solver to implement solutions in response to the organization’s evolving technology and security needs. 

The Systems & Security Engineer will own and advance the organization’s end-to-end security posture, design and maintain secure cloud and hybrid infrastructure, and build automation-driven endpoint and application delivery capabilities across macOS, Windows, Android, and Apple mobile platforms. This role requires a comprehensive understanding of modern security architecture, cloud infrastructure engineering, scripting/automation, and operational excellence. 

The Systems & Security Engineer will join the DCI team and report to the Senior IT Manager, partnering closely with stakeholders across IT Compliance, Information Security, and Solution Delivery teams to implement the firm’s security objectives and long-term infrastructure strategy.   

Why join us? 

CrossBoundary operates in frontier markets that also hold immense investment opportunities. The chosen candidate will play an important role in a unique team with the opportunity to make a large impact. Team members come from diverse backgrounds, but share several qualities: curiosity, humility, integrity, a drive for excellence, and a bias for action. 

What you will do

Your primary responsibilities will be:  

  • Security Engineering & Governance 

  • Continuously improve CrossBoundary’s security posture across cloud, endpoint, identity, data, network, and application layers. 

  • Implement and enforce zero trust principles, including identity governance, conditional access, privileged access, and secure API integrations. 

  • Manage endpoint detection and response (EDR), security baselines, and system hardening. 

  • Implement data protection and governance initiatives, including DLP and information protection. 

  • Serve as the technical security lead during security incidents, from investigation to remediation. 

  • Deliver clear, executive‑ready incident summaries and improvement recommendations. 

  • Conduct application and infrastructure security risk assessments for existing and new systems 

  • Lead security awareness training sessions across CrossBoundary Group.  

  • Cloud & Infrastructure Engineering 

  • Design, deploy, and manage Microsoft Azure environments, including Azure tenancies, Azure Virtual Desktop, and Cloud PCs. 

  • Engineer and operate secure, scalable cloud and hybrid infrastructure across Azure and AWS 

  • Build and maintain core infrastructure services (e.g., server builds, file services, DHCP) in cloud and on‑prem environments. 

  • Support infrastructure lifecycle activities, including new deployments, migrations, upgrades, and performance optimization. 

  • Partner with senior stakeholders to design and recommend systems architecture, and maintain technical documentation, standards, and best practices. 

  • Ensure all solutions meet security, performance, scalability, and reliability requirements 

  • Device & Application Management 

  • Manage unified endpoint management across Windows, macOS, Android, and Apple mobile platforms using Microsoft Intune. 

  • Standardize device configurations, compliance, patching, and software deployment. 

  • Leverage AI, telemetry and automations to improve operational efficiency thus reducing reactive support through self‑healing configurations, and proactive remediation 

  • Design, package, and deploy enterprise applications using cloud-based delivery solutions. 

  • Support application delivery across Windows environments, Citrix platforms, and Azure services. 

  • Troubleshoot complex application and infrastructure issues in collaboration with cross‑functional teams. 

  • Apply a DevOps and Infrastructure‑as‑Code mindset, with exposure to Terraform, CI/CD pipelines, and repeatable deployments. 

Who You Are 

  • Excellence: You demonstrate and maintain the highest personal standards, continually pursuing opportunities for improvement.  You are not afraid to get your hands dirty to untangle a complex issue 

  • Curiosity:  You investigate signals, telemetry, and patterns to understand root causes and prevent recurrence. You enjoy staying current with threats, emerging technologies, and engineering best practices. 

  • Bias to Action: You don’t wait to be asked to add value. You are comfortable with ambiguity, accountable for outcomes, and can operate without direction in a fast-moving environment.  

  • Integrity: You set your standards above the minimum required for compliance where necessary to deliver an excellent project. Creative, upholds ethical standards and values.  

  • Collaborative: You work effectively across teams, translating complex technical inputs into clear decisions and actionable plans.  

  • Deliberate: You choose simple, robust designs over unnecessary complexity and communicate trade-offs with clarity.  

Required Qualifications 

  • BSc degree in Computer Science, Information Technology, Engineering, or related discipline is required. 

  • At least one professional certification in information security such CISSP or CISM is required. Microsoft Endpoint Administrator, Cloud and CCNP Security certifications are advantageous.  

  • 5+ years of infrastructure engineering experience with strong scripting and automation experience (PowerShell, Bash and/or Python). 

  • Demonstrated experience designing and supporting complex systems and applications, including rolling out new systems, maintaining, migrating, upgrading, and improving long-term performance. 

  • Strong understanding of network infrastructure, troubleshooting methodologies, and hardware stacks. 

  • Experience with cloud resource provisioning, configuration management, and orchestration e.g., Azure 

  • Experience implementing and operating enterprise security controls across Microsoft Defender, Entra, Purview, and endpoint security tooling. 

  • Experience securing AI platforms, APIs and third-party SaaS integrations. 

  • Practical experience with system security vulnerabilities, remediation techniques, penetration testing, intrusion detection and prevention, attack vectors, and hacker culture 

  • Good understanding of web application technologies, protocols, and security, coupled with knowledge of scripting languages and automation experience. 

  • Expertise in network security, including VPN, Firewall, URL filtering, network monitoring, Cloud, intrusion detection, application security, and wireless security 

  • A strong grasp of endpoint security solutions, including File Integrity Monitoring and Data Loss Prevention 

  • Familiarity with Security Information and Event Management (SIEM) such as Microsoft Sentinel 

Interested in applying?

Think you have what it takes but not sure you check every box? Research shows that while men apply to roles when they meet an average of 60% of the criteria, women often only apply when they meet every requirement. If you’re passionate about what we’re building, we want to hear from you! 

Equal Opportunity Employer

CrossBoundary is an equal-opportunity employer. If you need assistance and/or reasonable accommodation due to a disability during the application or the recruiting process, please send a request to [email protected].  

Apply: Systems and Security Engineer
* Required fields
First name*
Last name*
Email address*
Location
Phone number*
Resume*

Attach resume as .pdf, .doc, .docx, .odt, .txt, or .rtf (limit 5MB) or paste resume

Paste your resume here or attach resume file

Briefly describe the most significant security incident you have personally led or been the primary technical responder for. What was the threat, what actions did you take, and what was the outcome? (3–5 sentences)*
Which of the following best describes the primary industry in which you have gained your security engineering experience? (select all that apply)*
Which of the following security incident types have you personally led or had primary technical responsibility for responding to? (select all that apply)*
Which SIEM or security operations platforms have you actively built detections, queries, or playbooks in? (select all that apply)*
Which of the following describes your hands-on experience with Microsoft Entra ID? (select all that apply)*
Which of the following describes your experience with Microsoft Intune and endpoint automation? (select all that apply)*
How would you describe your scripting and automation proficiency? (select one)*
Do you currently hold at least one of the following professional certifications: CISSP (Certified Information Systems Security Professional) or CISM (Certified Information Security Manager)?*
If you answered "Yes" to the question above, please specify which certification(s)
What is your preferred location? Do you require work authorisation support from CrossBoundary to be based there?*
What is your ideal start date?*
Where did you hear about this role?*
By Clicking this Box You Agree that CrossBoundary may retain and process your personal data in connection with your application. CrossBoundary’s Data Protection Policies, as amended from time to time, will govern the processing and deletion of your personal data. CrossBoundary may anonymize your data, retain such data indefinitely, and use the same to
perform statistical analysis on its hiring practices.*
Human Check*