Endpoint Security & IT Operations Engineer

Experience: 1-3 Years

Location: Gurugram

Employment Type: Full-time | Individual Contributor

About Infra360

Infra360 is a Managed Cloud Service Provider helping businesses build, secure and operate their cloud and technology environments. Our services span Cloud, DevOps, SRE, Security, FinOps and Managed Services.

We are looking for a Security & IT Operations Engineer who can manage and secure the endpoint, identity and IT environment across Infra360 and its managed-service customers.

About the Role

This is a hands-on role at the intersection of IT Operations and Cybersecurity. You will be responsible for managing endpoints, identity, access, security tools, device compliance, patching and vulnerability remediation.

The ideal candidate is someone who can go beyond traditional IT support and understands how to build, manage and secure an organization's endpoint and user environment.

You will work closely with the SOC/MDR, DevOps/SRE and Security teams to maintain a secure and reliable technology environment.

Key Responsibilities

1. Endpoint & Device Management

• Manage Windows, macOS and Linux endpoints across multiple environments.
• Manage endpoint enrollment, configuration, application deployment and device lifecycle.
• Administer UEM/MDM platforms such as Microsoft Intune, ManageEngine Endpoint Central, JumpCloud, Kaseya/Datto or similar tools.
• Maintain accurate hardware and software inventory.
• Monitor endpoint health and resolve configuration or security issues.
• Ensure devices remain managed, updated and compliant.

2. Endpoint Security

• Deploy and administer EPP/EDR solutions such as Microsoft Defender, CrowdStrike, SentinelOne, Sophos, Wazuh or equivalent.
• Configure endpoint security policies, firewall, anti-malware, anti-ransomware and device-control policies.
• Ensure encryption and other endpoint security controls are enabled.
• Monitor EDR coverage and security posture.
• Work with the SOC team to support endpoint investigation and remediation.

3. Identity & Access Management

• Manage user provisioning, deprovisioning and access lifecycle.
• Administer MFA, SSO, groups, roles and access policies.
• Support Joiner, Mover and Leaver processes.
• Manage access revocation and account changes.
• Support privileged-access management and periodic access reviews.
• Work with platforms such as Microsoft Entra ID, JumpCloud, Okta, Google Workspace or similar.

4. Device Compliance & Security Baselines

• Define and monitor endpoint compliance requirements.
• Ensure devices meet requirements for patching, encryption, EDR, firewall, screen lock and other security controls.
• Implement and maintain security baselines based on CIS Benchmarks, Microsoft security baselines and customer requirements.
• Identify and remediate non-compliant devices.

5. Patch & Vulnerability Management

• Monitor endpoint vulnerabilities and prioritize critical/high-risk issues.
• Coordinate OS and third-party application patching.
• Track patch compliance and remediation.
• Identify unsupported or end-of-life software.
• Work with the SOC and DevOps/SRE teams to coordinate remediation where required.

6. IT Security Operations

• Maintain visibility of users, devices, applications, licenses and security controls.
• Support IT security configuration and operational processes.
• Manage security exceptions and remediation activities.
• Maintain documentation, configurations and operational runbooks.
• Support customer environments in accordance with defined SLAs.

7. Automation

• Automate repetitive IT and security tasks using PowerShell, Bash, Python, UEM scripting or APIs.
• Automate activities such as software deployment, compliance checks, onboarding/offboarding, patch remediation and reporting.

8. Incident Remediation Support

• Support the SOC/MDR team during endpoint security incidents.
• Isolate or reconfigure compromised devices.
• Remove malicious software and apply required security controls.
• Patch vulnerable endpoints and validate remediation before returning devices to service.

What We're Looking For

Must Have:

• 1-3 years of experience in IT Operations, Endpoint Management, UEM/MDM or IT Security.
• Strong Windows administration experience.
• Hands-on experience with UEM/MDM platforms.
• Experience administering EPP/EDR solutions.
• Good understanding of IAM, MFA, SSO and access controls.
• Experience with patch and vulnerability management.
• Good understanding of endpoint security.
• Working knowledge of macOS and Linux.
• Strong troubleshooting and problem-solving skills.
• Good documentation and operational discipline.

Good to Have:

• MSP/MSSP or managed-services experience.
• Microsoft Intune and Entra ID experience.
• ManageEngine Endpoint Central, JumpCloud or Kaseya/Datto experience.
• PowerShell, Python or Bash scripting.
• Knowledge of CIS Benchmarks.
• DLP/device-control experience.
• Exposure to ISO 27001 or SOC 2.

What Success Looks Like

In this role, success means maintaining a secure, compliant and well-managed endpoint environment with strong device visibility, EDR coverage, patch compliance and controlled user access.

You will help Infra360 build standardized, scalable and security-focused IT operations for both internal and customer environments.