Senior IT Infrastructure Lead

Overview

Senior IT Infrastructure Lead responsible for end-to-end technical direction across identity, cloud, endpoint, and network/security domains, acting as the escalation point for complex cross-domain incidents.

What you'll do

• Design, plan, migrate, and implement Active Directory in environments with 2,500+ users.
• Design, implement, and troubleshoot Directory Synchronization and Federation Services (Azure AD Connect / Cloud Sync, ADFS) for Microsoft Entra ID (Azure AD).
• Manage Microsoft Entra ID (Azure AD) services including users, groups, device management, Enterprise Applications, App Registrations, and Conditional Access.
• Configure SSO (SAML, OAuth2/OIDC) integrations and API/App Registrations, including service principals, API permission scopes, and certificate/secret-based authentication.
• Manage DNS records (A, CNAME, MX, TXT, including SPF/DKIM/DMARC) across internal and external DNS zones.
• Design DNS/DHCP and Group Policy, and on-premises AD with Hybrid Azure AD Sync.
• Create and maintain CASB policy, OAuth app governance, and shadow IT / cloud app discovery in Microsoft Defender for Cloud Apps.
• Onboard devices to Microsoft Defender for Endpoint and manage EDR, attack surface reduction, and vulnerability management.
• Administer enterprise firewalls, including rule management, site-to-site and remote-access VPN, NAT, and network segmentation.
• Manage Windows and macOS endpoints through Intune/MDM and Kandji, Jamf, or a similar Apple MDM, including Apple Business Manager and Automated Device Enrollment.
• Manage and maintain the Azure VDI environment, including monitoring, troubleshooting, performance optimization, and security, and maintain its documentation.
• Define and maintain standards for Conditional Access, CASB policy, EDR/MDM enrollment, and firewall change management.
• Evaluate and recommend tools and vendors (e.g., MDM platform selection, CASB/EDR tooling, firewall vendor).
• Act as technical escalation point for complex cross-domain incidents and mentor L1–L3 engineers.
• Own disaster recovery / business continuity planning for identity, directory, and endpoint management platforms.
• Partner with security, risk, and compliance teams on identity and endpoint controls, and with internal teams to plan and support large town halls and company-wide gatherings, including AV setup and live event support.
• Present technical recommendations, risk assessments, and plans to IT leadership and other stakeholders.

What you'll need

• Strong understanding of IT infrastructure, network hardware, and enterprise security architecture.
• Very good working knowledge of the Microsoft 365 / Azure (Entra ID) platform end-to-end, including Microsoft Defender for Cloud Apps and Defender for Endpoint.
• Good understanding of core networking concepts (VLANs, layer 2/3 routing, access lists, load balancing).
• Hands-on experience administering enterprise firewalls (rule management, VPN, NAT, segmentation).
• Ability to design solutions across hybrid, cross-platform environments (Windows and macOS) and to implement, administer, and troubleshoot end-to-end.
• Deep knowledge of Active Directory and Entra ID, including Group Policy, Federation, and Single Sign-On.
• Hands-on experience in multi-site / multi-domain / multi-forest Active Directory environments.
• Strong experience with AD enterprise certificate services, rights management server, AD Federation Services, and identity manager.
• Hands-on experience with email security solutions such as Microsoft Defender for Office 365 or similar, and O365 security and compliance administration.
• Hands-on experience with Windows Server 2012, 2016, 2019, and 2022.
• Strong experience with IP Address Management (IPAM) solutions.
• Hands-on experience with Veeam or similar backup and disaster recovery solutions covering Microsoft 365, virtual machines/servers, and cloud workloads.
• Proven experience with Virtualization, Storage, Compute, Cloud (Azure), Network, Backups, and Automation/Scripting (PowerShell).
• Hands-on experience managing meeting room/conferencing platforms such as Cisco Webex Room devices, Microsoft Teams Rooms, and Zoom Rooms.

Nice to have

• AWS knowledge.
• Working knowledge of Defender for Identity and/or Microsoft Sentinel.
• Experience with Active Directory consolidation/migration (Quest migration experience and ADMT).
• Working knowledge of SD-WAN technologies and ISP/circuit concepts (MPLS, broadband, leased lines, last-mile connectivity, failover and redundancy).
• Working knowledge of Zero Trust Network Access (ZTNA) solutions such as FortiClient EMS or Zscaler, or similar.
• Working knowledge of NaaS (Network as a Service), enterprise WiFi/Access Point management, and RADIUS-based authentication (802.1X).
• Certifications: Microsoft SC-300, SC-200, or AZ-500; MCSE: Server Infrastructure, or MCM/MCA in Directory Services, or equivalent hands-on experience; firewall/network security certification (e.g., PCNSE, Fortinet NSE, or CCNP Security).

Details

• Location preference: India - Chennai.