Network Engineering Internship

Internship Overview

This internship opportunity is designed to provide hands-on experience with mature but undocumented network and engineering environments. The selected intern will contribute to discovering, documenting, and validating the company's existing infrastructure, while supporting security and operational controls. Our organization specializes in developing AI-driven custom accounting and bookkeeping software.

Role Tracks

Candidates must choose one of two specialized tracks upon application:

Track A: Infrastructure, Identity, and Workplace

• Physically tracing and documenting the entire network, resulting in the creation of the company’s first network diagram, IP address plan, VLAN scheme, firewall rule inventory, and hardware asset register.
• Cataloging server hardware details, including CPU sockets, physical cores, memory allocations, server roles, operating system editions, and warranty information to avoid licensing errors.
• Detailing storage configurations such as controllers, RAID setups, available bays, disk models, and endurance metrics prior to any hardware changes.
• Assessing out-of-band and emergency 'break-glass' access protocols, witnessing tests that demonstrate recovery of administrative access using documentation and secured credentials alone.
• Documenting Active Directory including its structure, group models, and time synchronization.
• Implementing multi-factor authentication for all users, managing exception registers with time-bound allowances, and conducting observation-phase analyses before enforcement.
• Monitoring data loss prevention and web control in observation mode, managing exception request procedures.
• Verifying backup procedures, patch management, and endpoint protection compliance; documenting results and supervising the first practical data restore test.
• Analyzing readiness for security incidents and identifying log retention gaps.
• Creating policies and operational runbooks that can be executed successfully by peers using only the documentation produced.

Track B: Engineering Platform (Linux, Containers, and Web Servers)

• Inventorying Azure cloud resources including subscriptions, virtual machines, sizes, patch levels, public exposure statuses, backup details, and associated costs.
• Developing repeatable, documented procedures for patching, upgrading, and resizing Azure servers.
• Assessing Jenkins installations honestly for versioning, plugin vulnerabilities (CVEs), authentication mechanisms, internet exposure, credential storage, and backup integrity, followed by remediation assistance.
• Conducting comprehensive audits of GitHub private repositories and user access, especially focusing on 2FA enforcement across organizational and personal accounts, producing detailed access maps and evidence.
• Identifying all long-lived secrets accessible by users and assisting the migration of these secrets to more secure vaults.
• Planning and rehearsing engineering platform continuity by assessing downtime duration and recovery processes.

Common Responsibilities

• Mapping all systems accessible by employees, including overlooked access paths such as mailbox delegation, personal access tokens, deployment keys, machine accounts, forwarding rules, and out-of-band management accounts.
• Executing baseline reconciliation of user accounts against current staffing to detect and verify removal of inappropriate access.
• Ensuring verifiable evidence by direct observation rather than relying on closed tickets or screenshots.

Work Methodology and Compliance

All deliverables must be verifiable through simulation before enforcement, with tests witnessed by designated colleagues. Documentation is produced in editable formats to enable seamless knowledge transfer. Honest reporting, including issues reflecting on prior in-house work, is required. This role is strictly not for penetration testing, ethical hacking, or helpdesk support functions.

Confidentiality and Security

An NDA must be signed prior to joining. Access is granted via named accounts only, with no shared or standing privileged access. Company and customer data must not be stored on personal devices or accounts. Interns’ access will be subjected to routine review and termination under the same policies applied to permanent staff.

Eligibility Criteria

Applicants must be available for full-time in-office engagement, able to commence between August 27, 2026, and October 1, 2026, and commit to the full six-month duration. Relevant technical skills and a Computer Science Engineering background are required.

Stipend and Perks

Remuneration will range from INR 4,999 to INR 5,000 per month. Additional benefits include certificates, letters of recommendation, and flexible working hours.