Tech Lead - Infrastructure Services N 4C

Overview

Senior L2/L3 engineer owning complex Active Directory, Entra ID, Microsoft 365, Windows endpoint and enterprise application issues, acting as the team SME for Microsoft Intune and PagerDuty, with hands-on exposure to Azure administration.

What you'll do

• Own complex incidents from engagement through diagnosis, stakeholder communication, remediation, validation and closure, managing multiple priorities without compromising customer experience.
• Administer Active Directory and Entra ID, including users, groups, OUs, GPO troubleshooting, authentication, MFA, synchronization, access lifecycle, security-group based permissions and hybrid identity integration with Azure.
• Support Microsoft 365 services including Exchange Online, Outlook, Teams, SharePoint Online, OneDrive, groups, shared mailboxes, licensing and collaboration-related access issues.
• Create and maintain SOPs, runbooks, architecture/operational notes, support knowledge articles, configuration standards, inventories, troubleshooting guides and handover documentation.
• Partner with Security, application owners, vendors and service teams; provide complete diagnostics and recommendations for high-complexity or business-impacting issues.
• Own Intune administration for Windows endpoints, including enrollment, compliance, configuration profiles, application deployment, update rings, endpoint security policies and troubleshooting.
• Investigate device registration, policy assignment, application installation, Autopilot, certificate, conditional access and endpoint compliance issues; drive root-cause resolution.
• Maintain endpoint management standards, deployment documentation, exception records and operational reporting.
• Administer PagerDuty services, escalation policies, schedules, on-call rotations, integrations, event routing, notification rules and user access.
• Troubleshoot alert delivery and integration failures; tune routing and escalation to reduce missed or noisy alerts.
• Maintain PagerDuty configuration, ownership maps, support procedures and audit-ready documentation.
• Provide Tier 2/3 support for Windows endpoints and enterprise applications, including internal employees and external consultants accessing client environments such as Epic and customer-specific applications.
• Troubleshoot complex hardware, software, networking, authentication, profile, application and endpoint issues independently.
• Explain technical issues and solutions clearly to technical and non-technical users while maintaining strong ownership and customer service.
• Serve as primary technical contact for managed print services and coordinate replacements, repairs and escalations with COBB or the designated print vendor.
• Troubleshoot printer deployment, connectivity, drivers, queues, mappings and end-user printing; maintain inventory and lifecycle documentation.
• Create, modify and troubleshoot SMB file shares, NTFS permissions and Active Directory security groups; resolve user access and permission issues.
• Assist with migration of legacy shares to SharePoint Online, OneDrive or Azure Files; document share structures and recommend modernization improvements.
• Work with authorized US-based teams and Geo team data in accordance with access, privacy and security requirements.
• Perform day-to-day Azure administration through the Azure Portal, including resource groups, subscriptions, virtual machines, storage accounts and basic network configuration.
• Support Microsoft Entra ID and hybrid identity operations, including user and group administration, role assignments, MFA, Conditional Access awareness, access reviews and directory synchronization troubleshooting.
• Assist with Azure RBAC, resource access, monitoring and alerting, basic cost and utilization review, backup coordination and incident troubleshooting, escalating complex architecture or engineering matters to Azure specialists.
• Follow approved security, change and operational procedures and maintain accurate cloud configuration, support and troubleshooting documentation.
• Administer Delinea Privilege Manager, application control and application whitelisting policies.
• Review and troubleshoot privilege elevation requests with Security; implement least-privilege controls that support business operations.
• Resolve application compatibility issues caused by privilege restrictions and obtain required Security approvals for exceptions or changes.

What you'll need

• Approximately good years of relevant infrastructure, endpoint and enterprise support experience, including advanced L2/L3 ownership of complex cases.
• Deep hands-on expertise in Active Directory, Entra ID, Microsoft 365, Windows endpoints and Intune.
• Strong PagerDuty and Delinea administration capability.
• Good hands-on exposure to Azure administration.
• Working knowledge of PowerShell, Azure Portal, Azure Resource Groups, virtual machines, storage accounts, networking fundamentals, RBAC, monitoring, endpoint networking, authentication, application troubleshooting, SMB/NTFS permissions and cloud collaboration platforms.
• Exceptional written and verbal communication, customer service, prioritization, analytical troubleshooting and technical documentation skills.
• Bachelor's degree in Computer Engineering, Database Management, Information Systems, Information Technology or Network Engineering.
• Language: English, advanced (C1), required.

Details

• Location: Bangalore (1401-GIPL: Prestige Technology Park IV).
• Work mode: Hybrid.
• Work shift: Evening.
• Job type: Regular.