Principal Infrastructure Automation & AI Ops Engineer

Overview

Staff/Principal Infrastructure Automation & AI Ops Engineer to modernize enterprise infrastructure operations across endpoint, identity, Microsoft 365, network, cloud, and IT service management, establishing an automation-first, API-driven, AI-assisted operating model and acting as technical authority and architecture leader.

What you'll do

• Own the architecture and standards for the Windows endpoint platform in Intune, and design lifecycle automation covering provisioning, configuration, compliance, patching, and retirement.
• Sustain current patch and compliance rates as the fleet scales.
• Engineer Windows Autopilot workflows that enforce standard-user deployment and close local-admin exposure.
• Build automated software inventory auditing by reconciling Intune with CrowdStrike Falcon Discover, and design self-healing remediation for common failures.
• Serve as technical authority for Entra ID identity architecture.
• Automate Joiner, Mover, and Leaver workflows across Entra ID, M365, and Freshservice.
• Mature Conditional Access from audit mode into full enforcement.
• Develop AI-assisted entitlement and RBAC analysis that surfaces excessive privilege, stale access, and segregation-of-duties risk.
• Partner on BeyondTrust privileged-access automation, including onboarding, credential rotation, and session monitoring.
• Architect and automate Entra ID, Intune, Exchange Online, SharePoint Online, Teams, and Conditional Access administration through Microsoft Graph and PowerShell.
• Establish configuration baselines and drift detection, and carry forward the SharePoint governance and versioning cleanup already underway.
• Own the automation engineering practice enterprise-wide, setting standards for Terraform, Bicep, and scripting frameworks in place of one-off scripts.
• Build CI/CD pipelines and API-driven integrations across Intune, Entra ID, Freshservice, AWS, and Juniper, and deliver reusable automation modules other engineers can build on.
• Convert high-volume manual processes into automated Freshservice service catalog workflows.
• Deliver production AI-assisted capabilities across endpoint, identity, network, cloud, and Service Desk, including anomaly detection, event correlation, intelligent ticket classification and routing in Freshservice, and predictive models for certificate expiration, patch compliance, and firewall licensing.
• Ensure every automated action carries authentication, authorization, logging, approval, and rollback controls, with human approval gates on high-risk changes.
• Serve as technical partner on the customer-zero engagement with Forcepoint DSE/DLP, helping define how AI-assisted data security detection and remediation workflows integrate with the broader endpoint, identity, and ITSM automation architecture.
• Build a unified telemetry view spanning endpoint, identity, network, cloud, M365, and ITSM.
• Implement secrets management through Key Vault, Secrets Manager, or Vault, eliminate hardcoded credentials and standing privileged access, and enforce least-privilege RBAC with full audit trails for every automated action.
• Define architecture standards adopted across Infrastructure & Operations, lead design reviews, mentor engineers, and partner with Network, Cloud, Security, Identity, and Service Desk leaders.

What you'll need

• 10+ years in infrastructure, systems, or platform engineering, with demonstrated experience designing automation (not just executing predefined procedures) in large enterprise environments.
• Expert-level Microsoft Intune and Windows endpoint management, including Autopilot and local-admin/LAPS enforcement.
• Strong hands-on Entra ID experience: SSO, MFA, Conditional Access, Zero Trust, identity lifecycle, SCIM/API-based provisioning.
• Advanced PowerShell, Python, and/or Bash.
• Strong REST API/webhook integration and Git experience.
• Experience with Terraform, Bicep, or Ansible and CI/CD pipelines.
• Deep Microsoft 365 administration, including Microsoft Graph API and SharePoint governance.
• Experience with EDR platforms (CrowdStrike Falcon preferred) and vulnerability/patch management reporting.
• Understanding of 802.1X, enterprise PKI/CA, certificate deployment via MDM, and NAC/authentication troubleshooting.
• Demonstrated experience with AI-assisted or event-driven production automation, including anomaly detection and automated remediation with appropriate security guardrails.

Nice to have

• Experience with AWS platform engineering and account hygiene.
• Direct Freshservice (or ServiceNow/Jira Service Management) administration and API integration experience.
• Experience with CyberArk or equivalent PAM platforms, and Commvault or equivalent backup platforms.
• Network automation using Python/Ansible; experience with observability/telemetry pipelines.
• Experience with LLM/AI agent frameworks and enterprise AI governance.
• Familiarity with Forcepoint DSE/DLP or Claude-based AI security tooling, or interest in shaping an early customer-zero AI/data-security integration.
• Microsoft 365 Certified: Enterprise Administrator Expert; Terraform Associate; AWS/Azure professional certification.

Details

• Location: Home Office - Bengaluru.
• Applicants must have the right to work in the location to which they have applied.