{"id":2092386,"url":"https://alion.io/job/forcepoint-principal-infrastructure-automation-ai-ops-engineer","title":"Principal Infrastructure Automation & AI Ops Engineer","company":{"id":19050,"name":"Forcepoint","domain":"forcepoint.com","url":"https://alion.io/company/forcepoint","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":null},"role":"AI/ML","role_family":"AI/ML","seniority":"lead","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Bengaluru, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":24000,"max_usd":63000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":44},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AIOps","optional":false},{"name":"Anomaly Detection","optional":false},{"name":"Ansible","optional":false},{"name":"AWS","optional":false},{"name":"Bicep","optional":false},{"name":"CI/CD","optional":false},{"name":"Crowdstrike","optional":false},{"name":"CyberArk","optional":false},{"name":"DLP","optional":false},{"name":"Falcon","optional":false},{"name":"Git","optional":false},{"name":"ITSM","optional":false},{"name":"Least Privilege","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"PKI","optional":false},{"name":"Platform Engineering","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"Rest API","optional":false},{"name":"Self-Healing","optional":false},{"name":"Service Desk","optional":false},{"name":"SharePoint","optional":false},{"name":"Terraform","optional":false},{"name":"Windows","optional":false},{"name":"Zero Trust","optional":false},{"name":"AI Agents","optional":true},{"name":"Azure","optional":true},{"name":"Claude","optional":true},{"name":"Jira","optional":true},{"name":"LLM","optional":true},{"name":"ServiceNow","optional":true}],"status":"live","first_seen_at":"2026-10-08T15:10:42Z","employer_posted_date":"2026-10-08","last_verified_at":"2026-10-22T07:49:43Z","board_verified":false,"closed_at":null,"days_open":16,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":16},"description":"Who is Forcepoint?\nForcepoint simplifies security for global businesses and governments. Forcepoint’s all-in-one, truly cloud-native platform makes it easy to adopt Zero Trust and prevent the theft or loss of sensitive data and intellectual property no matter where people are working. 20+ years in business. 2.7k employees. 150 countries. 11k+ customers. 300+ patents. If our mission excites you, you’re in the right place; we want you to bring your own energy to help us create a safer world. All we’re missing is you!\nAbout the Role\nWe are seeking a Staff/Principal Infrastructure Automation & AI Ops Engineer to modernize enterprise infrastructure operations across endpoint, identity, Microsoft 365, network, cloud, and IT service management. This is not a traditional systems administration role. The successful candidate will establish an automation-first, API-driven, AI-assisted operating model that replaces manual administration with policy-as-code, automated remediation, and intelligent operational workflows, extending the governance and security foundation already built across the environment.\nThe engineer will act as a technical authority and architecture leader, unifying Intune, Entra ID, Microsoft 365, CrowdStrike Falcon, CyberArk, Freshservice, AWS, Commvault, and Juniper NGFW infrastructure into a single automation and telemetry architecture. The ideal candidate moves fluidly between writing Python, PowerShell, and Bash, troubleshooting a production authentication issue, reviewing architecture, and defining an AI-driven remediation strategy.\nThe organization operates as customer zero for Forcepoint's Data Security Everywhere (DSE) / DLP platform, piloting AI-assisted data security and remediation workflows ahead of general availability. This engineer will help shape how that integration extends into the broader automation and AI Ops corporate architecture.\nKey Responsibilities\nEndpoint Engineering & Automation\nOwn the architecture and standards for the Windows endpoint platform in Intune. Design lifecycle automation covering provisioning, configuration, compliance, patching, and retirement, and sustain current patch and compliance rates as the fleet scales. Engineer Windows Autopilot workflows that enforce standard-user deployment and close local-admin exposure. Build automated software inventory auditing by reconciling Intune with CrowdStrike Falcon Discover, and design self-healing remediation for common failures.\nIdentity, Zero Trust & Access Automation\nServe as a technical authority for Entra ID identity architecture. Automate Joiner, Mover, and Leaver workflows across Entra ID, M365, and Freshservice. Mature Conditional Access from audit mode into full enforcement. Develop AI-assisted entitlement and RBAC analysis that surfaces excessive privilege, stale access, and segregation-of-duties risk. Partner on Beyond Trust privileged-access automation, including onboarding, credential rotation, and session monitoring.\nMicrosoft 365 Platform Engineering\nArchitect and automate Entra ID, Intune, Exchange Online, SharePoint Online, Teams, and Conditional Access administration through Microsoft Graph and PowerShell. Establish configuration baselines and drift detection, and carry forward the SharePoint governance and versioning cleanup already underway.\nInfrastructure-as-Code & Automation Engineering\nOwn the automation engineering practice enterprise-wide. Set standards for Terraform, Bicep, and scripting frameworks in place of one-off scripts. Build CI/CD pipelines and API-driven integrations across Intune, Entra ID, Freshservice, AWS, and Juniper, and deliver reusable automation modules other engineers can build on. Convert high-volume manual processes into automated Freshservice service catalog workflows.\nAI Ops & Intelligent Automation\nDeliver production AI-assisted capabilities, not pilots, across endpoint, identity, network, cloud, and Service Desk. Implement anomaly detection and event correlation, intelligent ticket classification and routing in Freshservice, and predictive models for certificate expiration, patch compliance, and firewall licensing. Ensure every automated action carries authentication, authorization, logging, approval, and rollback controls, with human approval gates on high-risk changes.\nServe as a technical partner on the organization's customer-zero engagement with Forcepoint DSE/DLP, helping define how AI-assisted data security detection and remediation workflows integrate with the broader endpoint, identity, and ITSM automation architecture.\nObservability & Security Guardrails\nBuild a unified telemetry view spanning endpoint, identity, network, cloud, M365, and ITSM. Implement secrets management through Key Vault, Secrets Manager, or Vault, eliminate hardcoded credentials and standing privileged access, and enforce least-privilege RBAC with full audit trails for every automated action.\nTechnical Leadership\nDefine the architecture standards adopted across Infrastructure & Operations. Lead design reviews, mentor engineers, and partner with Network, Cloud, Security, Identity, and Service Desk leaders, shaping standards across teams without relying on direct reporting authority.\nRequired Qualifications\n10+ years in infrastructure, systems, or platform engineering, with demonstrated experience designing automation (not just executing predefined procedures) in large enterprise environments.\nExpert-level Microsoft Intune and Windows endpoint management, including Autopilot and local-admin/LAPS enforcement.\nStrong hands-on Entra ID experience: SSO, MFA, Conditional Access, Zero Trust, identity lifecycle, SCIM/API-based provisioning.\nAdvanced PowerShell, Python, and/or Bash; strong REST API/webhook integration and Git experience; experience with Terraform, Bicep, or Ansible and CI/CD pipelines.\nDeep Microsoft 365 administration, including Microsoft Graph API and SharePoint governance.\nExperience with EDR platforms (CrowdStrike Falcon preferred) and vulnerability/patch management reporting.\nUnderstanding of 802.1X, enterprise PKI/CA, certificate deployment via MDM, and NAC/authentication troubleshooting.\nDemonstrated experience with AI-assisted or event-driven production automation, including anomaly detection and automated remediation with appropriate security guardrails.\nPreferred Qualifications\nExperience with AWS platform engineering and account hygiene.\nDirect Freshservice (or ServiceNow/Jira Service Management) administration and API integration experience.\nExperience with CyberArk or equivalent PAM platforms, and Commvault or equivalent backup platforms.\nNetwork automation using Python/Ansible; experience with observability/telemetry pipelines.\nExperience with LLM/AI agent frameworks and enterprise AI governance.\nFamiliarity with Forcepoint DSE/DLP or Claude-based AI security tooling, or interest in shaping an early customer-zero AI/data-security integration.\nMicrosoft 365 Certified: Enterprise Administrator Expert; Terraform Associate; AWS/Azure professional certification.\nSuccess Metrics (6-12 Months)\n60-80%+ of repeatable endpoint tasks automated; patch/compliance rates sustained or improved.\nAutomated Joiner/Mover/Leaver workflows live; Conditional Access moved from audit to full enforcement.\nInfrastructure changes delivered through Git/CI/CD with reusable modules adopted across teams.\nProactive certificate, firewall, and endpoint compliance monitoring in place.\nMultiple AI Ops use cases in production (ticket classification, automated low-risk remediation) with measurable reduction in mean time to detect/resolve.\nRole Positioning\nThis role is measured by outcomes, not ticket volume: tickets eliminated, processes automated, incidents prevented, risk reduced, engineering capacity created.\nThe right candidate can architect a solution, build the automation, secure it, measure it, and roll it back if needed. This is an automation and platform architect who codes fluently, not an administrator who happens to know Intune and Freshservice.\nDon’t meet every single qualification? Studies show people are hesitant to apply if they don’t meet all requirements listed in a job posting. Forcepoint is focused on building an inclusive and diverse workplace - so if there is something slightly different about your previous experience, but it otherwise aligns and you’re excited about this role, we encourage you to apply. You could be a great candidate for this or other roles on our team.\nThe policy of Forcepoint is to provide equal employment opportunities to all applicants and employees without regard to race, color, creed, religion, sex, sexual orientation, gender identity, marital status, citizenship status, age, national origin, ancestry, disability, veteran status, or any other legally protected status and to affirmatively seek to advance the principles of equal employment opportunity.\nForcepoint is committed to being an Equal Opportunity Employer and offers opportunities to all job seekers, including job seekers with disabilities. If you are a qualified individual with a disability or a disabled veteran, you may request a reasonable accommodation if you are unable or limited in your ability to use or access the Company’s career webpage as a result of your disability. You may request reasonable accommodations by sending an email to .\nApplicants must have the right to work in the location to which you have applied.","description_format":"text","description_chars":9431,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cloud Security","Information Security","Data Loss Prevention"],"lifecycle":[{"event":"open","at":"2026-10-08T15:10:42Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":15,"expected_fill_days":57,"reasons":["conf:46","win:early"],"computed_at":"2026-10-24T06:02:35Z"},"pay":null,"html_url":"https://alion.io/job/forcepoint-principal-infrastructure-automation-ai-ops-engineer","json_url":"https://alion.io/job/forcepoint-principal-infrastructure-automation-ai-ops-engineer.json","meta":{"generated_at":"2026-10-24T23:32:14Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":34633,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-25T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":19050},"rest":"https://alion.io/mcp/rest/get_company?id=19050"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fforcepoint-principal-infrastructure-automation-ai-ops-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fforcepoint-principal-infrastructure-automation-ai-ops-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fforcepoint-principal-infrastructure-automation-ai-ops-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/forcepoint-principal-infrastructure-automation-ai-ops-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fforcepoint-principal-infrastructure-automation-ai-ops-engineer"}]}