Principal Infrastructure Automation, AI Ops Engineer

This is a fully remote position, open to applicants in India.

📋 Description

• Modernize enterprise infrastructure operations across endpoint, identity, Microsoft 365, network, cloud, and IT service management.

• Establish an automation-first, API-driven, AI-assisted operating model utilizing policy-as-code, automated remediation, and intelligent operational workflows.

• Serve as the technical authority and architecture leader for Intune, Entra ID, Microsoft 365, CrowdStrike Falcon, CyberArk, Freshservice, AWS, Commvault, and Juniper NGFW.

• Take ownership of the Windows endpoint platform architecture and standards within Intune.

• Design lifecycle automation for provisioning, configuration, compliance, patching, and retirement processes.

• Engineer Windows Autopilot workflows that enforce standard-user deployment while minimizing local-admin exposure.

• Develop automated software inventory auditing and self-healing remediation techniques.

• Automate workflows for Joiners, Movers, and Leavers across Entra ID, Microsoft 365, and Freshservice.

• Advance Conditional Access from audit mode to full enforcement.

• Create AI-assisted entitlement and RBAC analysis.

• Collaborate on privileged-access automation, including onboarding, credential rotation, and session monitoring.

• Architect and automate Microsoft 365 administration through Microsoft Graph and PowerShell.

• Establish configuration baselines, drift detection, and governance for SharePoint.

• Own the enterprise-wide automation engineering practice and standards for Terraform, Bicep, and scripting frameworks.

• Build CI/CD pipelines and API-driven integrations across various infrastructure platforms.

• Deliver reusable automation modules and transform manual processes into Freshservice service catalog workflows.

• Implement production AI-assisted capabilities across endpoint, identity, network, cloud, and Service Desk.

• Execute anomaly detection, event correlation, intelligent ticket classification and routing, as well as predictive monitoring.

• Apply controls for authentication, authorization, logging, approval, rollback, and human approval gates to automated actions.

• Support Forcepoint DSE/DLP's customer-zero AI-assisted data security and remediation integration.

• Build unified telemetry across endpoint, identity, network, cloud, Microsoft 365, and ITSM.

• Implement secrets management to eliminate hardcoded credentials and standing privileged access, enforcing least-privilege RBAC with audit trails.

• Define architecture standards, lead design reviews, mentor engineers, and collaborate with cross-functional infrastructure and security teams.

• Deliver success metrics including automation of repeatable endpoint tasks, automated identity workflows, Git/CI/CD infrastructure changes, proactive compliance monitoring, and production AI Ops use cases.

⛳️ Requirements

• 10+ years of experience in infrastructure, systems, or platform engineering.

• Proven experience in designing automation within large enterprise environments.

• Expert-level knowledge of Microsoft Intune and Windows endpoint management, including Autopilot and local-admin/LAPS enforcement.

• Strong practical experience with Entra ID, including SSO, MFA, Conditional Access, Zero Trust, identity lifecycle, and SCIM/API-based provisioning.

• Advanced skills in PowerShell, Python, and/or Bash.

• Strong experience with REST API/webhook integration and Git.

• Familiarity with Terraform, Bicep, or Ansible and CI/CD pipelines.

• In-depth knowledge of Microsoft 365 administration, including Microsoft Graph API and SharePoint governance.

• Experience with EDR platforms and vulnerability/patch management reporting.

• Understanding of 802.1X, enterprise PKI/CA, certificate deployment via MDM, and NAC/authentication troubleshooting.

• Demonstrated experience with AI-assisted or event-driven production automation, including anomaly detection and automated remediation with appropriate security guardrails.

• Experience with AWS platform engineering and account hygiene.

• Direct administration and API integration experience with Freshservice, ServiceNow, or Jira Service Management.

• Familiarity with CyberArk or equivalent PAM platforms, and Commvault or equivalent backup solutions.

• Network automation experience using Python/Ansible and familiarity with observability/telemetry pipelines.

• Experience with LLM/AI agent frameworks and enterprise AI governance.

• Knowledge of Forcepoint DSE/DLP or Claude-based AI security tooling, or a keen interest in developing early customer-zero AI/data-security integration.

• Applicants must have the legal right to work in the location to which they are applying.

🏝️ Benefits

• Inclusive and diverse workplace.

• Equal employment opportunities.

• Reasonable accommodations for qualified individuals with disabilities and disabled veterans.