{"id":3397065,"url":"https://alion.io/job/onit-senior-modern-workplace-engineer","title":"Senior Modern Workplace Engineer","company":{"id":58716,"name":"Onit","domain":"onit.com","url":"https://alion.io/company/onit","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Lever","truth_index":{"grade":"A","score":86,"open_postings":4,"ghost_share":0,"stale_share":0.75,"repost_share":0,"time_to_fill_p50_days":19,"computed_at":"2026-11-01T06:10:25Z"}},"role":"Support","role_family":"Support","seniority":"senior","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Pune, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":10500,"max_usd":25000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":8},"experience_years_min":8,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Crowdstrike","optional":false},{"name":"Least Privilege","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"OneDrive","optional":false},{"name":"PowerShell","optional":false},{"name":"SharePoint","optional":false},{"name":"Windows","optional":false},{"name":"Zero Trust","optional":false},{"name":"BeyondTrust","optional":true},{"name":"GDPR","optional":true},{"name":"ISO 27001","optional":true},{"name":"SOC 2","optional":true}],"status":"live","first_seen_at":"2026-10-16T08:47:27Z","employer_posted_date":"2026-10-16","last_verified_at":"2026-11-01T22:11:45Z","board_verified":true,"closed_at":null,"days_open":16,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":16},"description":"Position Summary\nThis is a hands-on Senior Modern workplace engineer role focused on modern endpoint engineering, device identity, security, automation and lifecycle management. The role will own and evolve Microsoft's modern workplace stack with Microsoft Intune and Windows Autopilot at its core, integrated with Microsoft Entra ID, Conditional Access, endpoint security, application deployment and patching. The successful candidate should be strong enough to solve complex L3 issues independently, but broad enough to understand how endpoint, identity, security and user experience work together.\nOnit's technology environment changes quickly. The successful candidate will be evaluated not only on what they already know, but on how effectively they learn, apply and operationalize new capabilities.\nWhat This Role Is Expected to Deliver\nBuild a secure, scalable and low-touch endpoint platform for Windows devices, with increasing capability across macOS.\nReduce manual administration through PowerShell, Microsoft Graph and proactive remediation/automation.\nImprove device compliance, deployment quality, patch posture and endpoint security without creating unnecessary friction for users.\nOwn endpoint-related projects from design and pilot through production rollout, documentation, change communication and operational handover.\nEPM, SAAS Management, Shadow IT/AI and AI Governance are key projects in Pipeline.\nKey Responsibilities\nDesign, deploy and administer Microsoft Intune for device compliance, configuration profiles, security baselines, enrollment, application deployment and update management.\nOwn Windows Autopilot end to end, including device registration, hardware hashes, deployment profiles, Enrollment Status Page (ESP), user-driven and pre-provisioned scenarios, troubleshooting and lifecycle operations.\nDesign and maintain Conditional Access controls tied to compliant/corporate devices, MFA and Zero Trust access principles in partnership with security and identity stakeholders.\nManage the endpoint-related Microsoft Entra ID surface, including device identity, registration, join states, authentication dependencies and access troubleshooting.\nPackage, test and deploy Win32, Microsoft Store and line-of-business applications, including detection rules, dependencies, install/uninstall logic and remediation of failed deployments.\nBuild PowerShell and Microsoft Graph automation for reporting, compliance, device operations, configuration validation and repetitive administration.\nCreate and maintain proactive remediation/detection-remediation logic to address configuration drift, device health and recurring endpoint issues before they become tickets.\nOwn Windows patch/update strategy using Windows Update for Business, update rings and related Microsoft capabilities; support application patching and verification processes.\nImplement and improve endpoint security controls including BitLocker, LAPS, attack-surface reduction/security baselines and integration with enterprise security tooling such as CrowdStrike or Microsoft Defender concepts.\nSupport and progressively deepen macOS management capability using Jamf Pro/Apple Business Manager, ADE, FileVault and macOS compliance where applicable.\nAct as the L3 escalation point for complex enrollment failures, policy conflicts, Autopilot provisioning issues, application deployment failures and device compliance problems.\nWork across Microsoft 365 services such as OneDrive, SharePoint, Teams and Exchange Online where endpoint or identity policies intersect with the user experience.\nEvaluate new Microsoft/Apple endpoint capabilities, and recommend production adoption when they improve security, supportability or user experience.\nCreate technical documentation, SOPs and runbooks; mentor other IT team members and transfer knowledge rather than becoming a single point of dependency.\nRequired Skills - Must Have\nStrong hands-on Microsoft Intune administration in an enterprise environment.\nStrong Windows Autopilot implementation and troubleshooting experience.\nStrong understanding of compliance policies, configuration profiles, security baselines and device lifecycle management.\nHands-on application packaging/deployment using Win32 (.intunewin) or equivalent enterprise packaging methods, including detection and dependency logic.\nHands-on Microsoft Entra ID and Conditional Access experience, especially device-based access and compliance scenarios.\nStrong L3 troubleshooting ability across enrollment, policy, application deployment, authentication and compliance issues.\nStrong PowerShell scripting skills for automation and troubleshooting.\nPractical endpoint security knowledge including disk encryption, endpoint hardening, patching and least-privilege concepts.\nAbility to independently plan and execute technical changes/projects with pilots, rollback thinking, stakeholder communication and post-change validation.\nPIM, SSO concepts (SAML/OIDC), enterprise application registration and broader Entra identity administration.\nJamf Pro, Apple Business Manager/ADE, FileVault and macOS administration.\nAdjacent Skills - Good to Have / Learn Quickly\nMicrosoft Graph API automation and reporting.\nBeyondTrust Endpoint Privilege Management (EPM), Microsoft EPM or similar least-privilege tooling.\nCrowdStrike, Microsoft Defender for Endpoint or comparable endpoint security platforms.\nMicrosoft 365 migration or tenant-to-tenant migration experience.\nISO 27001, SOC 2, GDPR or similar control/compliance environments.\nWhat Success Looks Like\nTakes independent ownership of the Intune/Autopilot/Entra endpoint stack and becomes the escalation point for complex endpoint problems.\nAutomates recurring endpoint work and reduces avoidable manual administration/tickets.\nImproves compliance, patching and endpoint security posture while keeping user experience practical.\nBuilds working knowledge in adjacent areas such as Jamf/macOS, EPM and broader identity rather than remaining an Intune-only specialist.\nDemonstrates learnability: can identify a knowledge gap, self-learn, test in a lab/pilot, apply the capability in production, document it and transfer the knowledge to others.\nExperience & Qualifications\n8+ years relevant experience across enterprise IT, Microsoft 365, endpoint/security or related infrastructure disciplines.\nDemonstrated experience owning production systems and resolving complex technical problems, not only following predefined operational procedures.\nExperience working with distributed/global stakeholders and managing technical changes across business teams is preferred.\nBachelor's degree or equivalent practical experience in Information Technology, Computer Science or a related discipline.\nPreferred Certifications\nMicrosoft Certified: Endpoint Administrator Associate (MD-102)\nMicrosoft 365 Administrator / MS-102 or equivalent Microsoft 365 administration certification\nMicrosoft Identity and Access Administrator (SC-300) - preferred\nJamf certification - advantage, not mandatory","description_format":"text","description_chars":7019,"description_truncated":false,"requirements":{"experience_years_min":8,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"India","iso":"IN","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Artificial Intelligence","Cybersecurity","Document Management","Digital Signature"],"lifecycle":[{"event":"open","at":"2026-10-28T12:55:28Z"}],"visa":[],"liveness":{"score":64,"band":"ok","label":"Likely open","p_open":1,"p_active":0.847,"p_room":0.75,"age_days":15,"expected_fill_days":19,"reasons":["conf:0","velocity","win:late"],"computed_at":"2026-11-01T06:10:25Z"},"pay":null,"html_url":"https://alion.io/job/onit-senior-modern-workplace-engineer","json_url":"https://alion.io/job/onit-senior-modern-workplace-engineer.json","meta":{"generated_at":"2026-11-01T23:59:37Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":36359,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-02T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":58716},"rest":"https://alion.io/mcp/rest/get_company?id=58716"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fonit-senior-modern-workplace-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fonit-senior-modern-workplace-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fonit-senior-modern-workplace-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/onit-senior-modern-workplace-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fonit-senior-modern-workplace-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3397065}},{"tool":"search_jobs","arguments":{"company":"onit.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3397065},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}