Principal Infrastructure Automation, AI Ops Engineer

This is a fully remote position, open to applicants in India.

📋 Description

• Transform enterprise infrastructure operations encompassing endpoint, identity, Microsoft 365, network, cloud, and IT service management.

• Implement an automation-centric, API-driven, AI-supported operating model utilizing policy-as-code, automated remediation, and intelligent operational workflows.

• Serve as a technical authority and architectural leader for Intune, Entra ID, Microsoft 365, CrowdStrike Falcon, CyberArk, Freshservice, AWS, Commvault, and Juniper NGFW.

• Oversee the architecture and lifecycle automation of the Windows endpoint platform regarding provisioning, configuration, compliance, patching, and decommissioning.

• Design Windows Autopilot workflows that enforce standard-user deployment and minimize local-admin exposure.

• Create software inventory auditing and self-healing remediation strategies for common endpoint failures.

• Automate Joiner, Mover, and Leaver workflows across Entra ID, Microsoft 365, and Freshservice.

• Advance Conditional Access from audit mode to full enforcement.

• Conduct AI-assisted entitlement and RBAC analysis to identify excessive privilege, stale access, and segregation-of-duties risks.

• Streamline Microsoft 365 administration through Microsoft Graph and PowerShell, including configuration baselines, drift detection, and SharePoint governance.

• Lead the enterprise automation engineering practice and establish standards for Terraform, Bicep, and scripting frameworks.

• Develop CI/CD pipelines and API-driven integrations across Intune, Entra ID, Freshservice, AWS, and Juniper.

• Transform high-volume manual processes into automated Freshservice service catalog workflows.

• Deploy production AI-assisted capabilities such as anomaly detection, event correlation, intelligent ticket classification/routing, and predictive monitoring.

• Implement controls for authentication, authorization, logging, approval, rollback, and human approval for automated actions.

• Assist with Forcepoint DSE/DLP customer-zero AI-assisted data security detection and remediation integrations.

• Create unified telemetry across endpoint, identity, network, cloud, Microsoft 365, and ITSM.

• Establish secrets management and enforce least-privilege RBAC with comprehensive audit trails.

• Define architectural standards, conduct design reviews, mentor engineers, and collaborate with cross-functional infrastructure and security teams.

• Provide success metrics demonstrating 60–80%+ automation of repeatable endpoint tasks, live identity lifecycle workflows, Git/CI/CD infrastructure changes, proactive compliance monitoring, and production AI Ops use cases.

⛳️ Requirements

• Over 10 years of experience in infrastructure, systems, or platform engineering.

• Proven track record in designing automation solutions within large enterprise environments.

• Expert-level knowledge in Microsoft Intune and Windows endpoint management, including Autopilot and local-admin/LAPS enforcement.

• Strong hands-on expertise in Entra ID: SSO, MFA, Conditional Access, Zero Trust, identity lifecycle, and SCIM/API-based provisioning.

• Advanced proficiency in PowerShell, Python, and/or Bash.

• Strong experience with REST API/webhook integrations and Git.

• Familiarity with Terraform, Bicep, or Ansible and CI/CD pipeline development.

• Extensive knowledge of Microsoft 365 administration, including Microsoft Graph API and SharePoint governance.

• Experience with EDR platforms, preferably CrowdStrike Falcon.

• Knowledge of vulnerability and patch management reporting.

• Understanding of 802.1X, enterprise PKI/CA, certificate deployment via MDM, and NAC/authentication troubleshooting.

• Proven experience in AI-assisted or event-driven production automation, including anomaly detection and automated remediation with security guardrails.

• Preferred experience with AWS platform engineering and account hygiene.

• Direct experience with Freshservice or ServiceNow/Jira Service Management administration and API integration is preferred.

• Experience with CyberArk or equivalent PAM platforms, and Commvault or equivalent backup platforms is preferred.

• Familiarity with network automation using Python/Ansible and observability/telemetry pipelines is preferred.

• Experience with LLM/AI agent frameworks and enterprise AI governance is preferred.

• Familiarity with Forcepoint DSE/DLP or Claude-based AI security tooling, or a keen interest in shaping an early customer-zero AI/data-security integration is preferred.

• Microsoft 365 Certified: Enterprise Administrator Expert, Terraform Associate, or AWS/Azure professional certification is preferred.

• Candidates must possess the legal right to work in the location they are applying for.

🏝️ Benefits

• An inclusive and diverse workplace.

• Equal employment opportunities.

• Reasonable accommodations for qualified individuals with disabilities and disabled veterans.