Overview :

We're looking for a Senior IT Support Engineer who thrives in complex environments and enjoys solving deep technical problems across infrastructure, endpoints, identity, and security. This is not a traditional support role - you'll operate at L2/L3, own critical systems, and play a key role in strengthening our modern workplace built on Microsoft technologies, Zero Trust principles, and secure infrastructure design.

What You'll Own :

Infrastructure & Server Operations :

- Manage and optimize Windows Server environments (AD, DC, DNS, DHCP, GPO) with a focus on reliability, scalability, and security.

- Proactively monitor, patch, and tune servers; resolve complex issues across authentication, replication, and system performance.

- Lead backup and disaster recovery strategies, including validation and periodic restore testing.

- Drive server lifecycle activities, including upgrades, migrations, and hardening aligned with CIS and industry standards.

Modern Endpoint Management (Intune) :

- Own Microsoft Intune end-to-end : device lifecycle, compliance, configuration, and application management.

- Design and enforce security baselines across Windows, iOS, and Android devices.

- Implement Autopilot and zero-touch provisioning for seamless onboarding.

- Troubleshoot deeply using logs, diagnostics, and policy analysis to resolve complex deployment issues.

Identity & Access (Microsoft Entra ID) :

- Architect and manage Conditional Access, MFA, and Zero Trust policies.

- Administer SSO integrations across SaaS platforms using modern authentication protocols.

- Implement identity governance (access reviews, PIM, lifecycle workflows).

- Investigate and resolve advanced authentication and access issues.

Apple Device Management :

- Manage Apple Business Manager (ABM) and integrate with MDM (Intune or equivalent).

- Enable automated device enrollment and enforce security/compliance controls.

- Handle complex enrollment and device management challenges with vendor coordination when needed.

Network & Security Engineering :

- Configure and manage firewalls, VPNs, and secure access controls.

- Troubleshoot network issues across switching, VLANs, routing, DNS, and connectivity layers.

- Strengthen network segmentation and enforce least-privilege access.

- Monitor and respond to network and security events using logs and analysis tools.

Security Operations :

- Own endpoint and email security platforms (EDR/MDR, anti-phishing, DLP, encryption).

- Investigate and respond to security incidents across endpoints, identity, and network layers.

- Drive vulnerability management and patching initiatives.

- Implement and enforce security frameworks (CIS, NIST, ISO 27001) and Zero Trust principles.

Microsoft 365 Administration :

- Manage M365 services (Exchange Online, Teams, SharePoint, OneDrive).

- Configure advanced email security (SPF, DKIM, DMARC, Safe Links/Attachments).

- Troubleshoot complex mail flow, access, and integration issues.

- Support compliance features like retention, eDiscovery, and audit.

Advanced Support (L2/L3 Escalations) :

- Handle critical escalations from L1 teams with deep technical ownership.

- Perform root cause analysis and implement long-term fixes - not just quick resolutions.

- Improve system stability by identifying recurring issues and eliminating them.

Process, Automation & Leadership :

- Build and maintain high-quality documentation, SOPs, and runbooks.

- Automate repetitive tasks using PowerShell or similar tools.

- Mentor junior engineers and elevate team capability.

- Contribute to change management, CAB reviews, and continuous improvement initiatives.

What You Bring :

Experience :

- 8 - 12 years in IT infrastructure and support, with strong L2/L3 ownership.

- Solid hands-on experience across Windows Server, Intune, Entra ID, and enterprise networking.

- Proven track record managing production environments and handling critical incidents.

Technical Strength :

- Deep expertise in : Windows Server (AD, DNS, DHCP, GPO), Microsoft Intune and endpoint security, Microsoft Entra ID (Conditional Access, MFA, SSO, Identity Governance), and Network fundamentals (firewalls, VPNs, switching, routing).

- Strong experience with EDR/MDR, email security, and vulnerability management.

- Familiarity with Apple device management via ABM and MDM platforms.

Mindset :

- Strong problem-solver who digs into root causes, not just symptoms.

- Security-first approach with a clear understanding of Zero Trust.

- Comfortable owning systems end-to-end in a fast-paced environment.

- Clear communicator who can document, explain, and mentor effectively.

Must Have :

- Microsoft certifications (AZ-104, SC-300, MD-102).

- Networking certifications (CCNA, Network+).

- Security certifications (Security+, etc.).

- ITIL Foundation.

Share below details :

CTC : Exp CTC : NP : Total experience : Thank you, Sahana