Senior Engineer- IT Systems, Identity, Security

Department: Information Technology Location: Delhi Job Type: Permanent (Full-Time) No. of Positions: 1 Experience: 5-8 Years Position/Designation: Senior Engineer- IT Systems, Identity, Security About the Role: We are looking for a hands-on Microsoft 365 & Security Engineer to own and modernize the organization's corporate identity, Microsoft 365 environment, endpoint-management platform, and core cybersecurity controls. The role will help transition the organization from a partially managed IT environment toward a standardized, secure, and scalable digital workplace supporting approximately 300 managed knowledge workers initially and ultimately a global workforce of 1,000+ users. This is primarily a hands-on engineering role , focused on implementation, configuration, troubleshooting, security controls, and continuous improvement rather than policy-only or people-management activities. Key Responsibilities: Microsoft 365 Own administration, configuration, and continuous improvement of Microsoft 365, Exchange Online, Microsoft Teams, SharePoint Online, OneDrive for Business, and Microsoft 365 Groups. Manage Microsoft 365 licensing and service configurations. Support migration away from local storage and unmanaged file-sharing practices toward governed Microsoft platforms. Identity & Access Management Own and implement Microsoft Entra ID, Multi-Factor Authentication, Conditional Access, Single Sign-On, Enterprise Applications, and role-based access control. Manage privileged administrator accounts, user lifecycle management, guest-user governance, access reviews, authentication policies, service accounts, and break-glass accounts. Support legacy-authentication removal and development of secure authentication standards. Establish the technical foundation for automated Joiner/Mover/Leaver processes. Endpoint Management Design and manage endpoint standards through Microsoft Intune. Manage Windows enrollment, Windows Autopilot, compliance policies, configuration profiles, application deployment, update rings, and Windows Update for Business. Implement BitLocker, device restrictions, endpoint security policies, and remote device actions. Support corporate and BYOD endpoint policies. Support a primarily Windows environment with limited macOS and Linux endpoints. Endpoint Security Manage and continuously improve endpoint security using Sophos Endpoint / Intercept X / EDR and Microsoft Defender technologies where adopted. Manage Intune Endpoint Security, Windows Security, BitLocker, attack-surface-reduction controls, and security baselines. Work with external MDR/SOC providers where required. Security Engineering Implement technical controls covering MFA, device compliance, Zero Trust principles, privileged access, identity protection, endpoint hardening, data protection, approved application access, vulnerability remediation, secure remote access, and administrative account separation. Participate in…