Job Details

Job Title: Senior Microsoft Engineer
Location: Thane, Mumbai
Type: Full-Time
Department: IT Services and Security
It is Work from Office & 24X7 Rotational Shift

Key Responsibilities
1. Microsoft Intune, Endpoint Security & Device Governance
• Design, deploy, and manage Microsoft Intune for endpoint management, device compliance, application protection, and security policy enforcement.
• Configure and maintain device enrollment profiles, compliance policies, configuration profiles, security baselines, and endpoint protection policies.
• Implement Mobile Device Management and Mobile Application Management controls for corporate and BYOD environments.
• Manage Windows, macOS, iOS, and Android device policies using Intune.
• Design and administer Intune RBAC, including role assignments, scope tags, administrative boundaries, and delegated access models.
• Implement endpoint security controls, including disk encryption, firewall policies, attack surface reduction rules, endpoint privilege controls, and Defender integration.
• Support conditional access enforcement based on device compliance, risk posture, and user identity.

2. Microsoft Purview, Compliance & Data Governance
• Design, configure, and manage Microsoft Purview solutions for data security, compliance, and governance.
• Implement and manage Data Loss Prevention policies, including Exchange, SharePoint, OneDrive, Teams, Endpoint DLP, and cloud app integrations.
• Configure and manage Sensitivity Labels, retention labels, retention policies, information protection, and data classification policies.
• Support data discovery, classification, labeling, and protection initiatives across Microsoft 365 and Azure environments.

3. Microsoft Entra ID, Identity Security & Zero Trust
• Design and manage Microsoft Entra ID identity architecture, including users, groups, roles, applications, enterprise apps, and service principals.
• Implement and optimize Conditional Access policies, MFA, Identity Protection, Privileged Identity Management, and access reviews.
• Support hybrid identity integration using Entra Connect / Azure AD Connect.
• Design and implement least-privilege access models using Entra ID roles, administrative units, privileged access groups, and RBAC principles.
• Manage identity governance controls such as entitlement management, access packages, lifecycle workflows, and periodic access reviews.
• Support Zero Trust architecture by enforcing identity-driven access, device trust, application control, and risk-based authentication.
• Investigate identity-related alerts, suspicious sign-ins, risky users, risky workloads, and privilege escalation events.

4. Azure Cloud Security & Platform Administration
• Support secure design, deployment, and administration of Azure cloud environments.
• Configure and manage Azure resources, subscriptions, management groups, resource groups, policies, and role-based access controls.
• Implement Azure RBAC, Azure Policy, management group governance, tagging standards, and cloud access control models.
• Assist in securing Azure workloads, including virtual machines, storage accounts, key vaults, networking, app services, and databases.
• Implement governance and monitoring controls across Azure subscriptions to improve visibility, compliance, and operational control.
• Work with security teams to review cloud misconfigurations, excessive permissions, exposed resources, and policy violations.

Required Experience
• 4+ years of hands-on experience in enterprise IT, Microsoft cloud, security or infrastructure engineering roles.
• Strong hands-on experience with Microsoft Purview, including DLP, sensitivity labels, retention policies, data classification, and compliance features.
• Strong hands-on experience with Microsoft Intune, including endpoint management, device compliance, security baselines, app protection, and RBAC.
• Strong knowledge of Microsoft Entra ID, including Conditional Access, MFA, PIM, Identity Protection, access reviews, and hybrid identity.
• Good understanding of Zero Trust security principles, least privilege access, endpoint governance, and identity-based security.
• Experience working with enterprise clients in implementation, migration, governance, or security improvement projects.

Must-Have Requirements
• Hands-on experience implementing and managing Microsoft Purview DLP policies, including Endpoint DLP.
• Hands-on experience with Microsoft Intune RBAC, including role assignments, scope tags, device compliance, and app/device policy enforcement.
• Strong knowledge of Microsoft Entra ID Conditional Access, MFA, PIM, and Identity Protection.
• Practical experience with Azure RBAC, Azure Policy, Defender for Cloud, and Azure monitoring tools.
• Strong documentation, troubleshooting, and client-facing communication skills.