{"id":3902118,"url":"https://alion.io/job/tata-consultancy-services-senior-technical-lead-secure-access-endpoint-platforms","title":"Senior Technical Lead - Secure Access & Endpoint Platforms","company":{"id":222,"name":"Tata Consultancy Services","domain":"tcs.com","url":"https://alion.io/company/tata-consultancy-services","size_band":"5000+","is_staffing_agency":false,"employer_type":"services","is_intermediary":false,"listed_via":null,"ats_vendor":"Career site","truth_index":{"grade":"A","score":100,"open_postings":114,"ghost_share":0.018,"stale_share":0,"repost_share":0.254,"time_to_fill_p50_days":9,"computed_at":"2026-11-12T10:38:37Z"}},"role":"Backend","role_family":"Backend","seniority":"lead","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["South Africa"],"countries":["ZA"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"DNS","optional":false},{"name":"Incident Management","optional":false},{"name":"ITIL","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"PKI","optional":false},{"name":"PowerShell","optional":false},{"name":"VPN","optional":false},{"name":"Zero Trust","optional":false},{"name":"Agile","optional":true}],"status":"live","first_seen_at":"2026-10-29T13:40:45Z","employer_posted_date":null,"last_verified_at":"2026-10-29T13:40:45Z","board_verified":false,"closed_at":null,"days_open":15,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":15},"description":"Introduction\nAbout Us:\n\nTata Consultancy Services (TCS) is an IT services, consulting and business solutions organization that has been partnering with many of the world’s largest businesses in their transformation journeys for over 50 years. TCS offers a consulting-led, cognitive powered, integrated portfolio of business, technology and engineering services and solutions. This is delivered through its unique Location Independent Agile™ delivery model, recognized as a benchmark of excellence in software development.\n\nA part of the Tata group, India's largest multinational business group, TCS has over 616,171 of the world’s best-trained consultants with 157 nationalities in 53 countries. For more information, visit www.tcs.com and follow TCS news at @TCS_News.\n\nDuties & Responsibilities\nJob Description:\n\nRole Purpose:\n\nThe Senior Technical Lead is accountable for the end-to-end technical assessment, implementation planning, deployment assurance, testing, stabilization and transition into Business as Usual (BAU) of secure-access and endpoint-management capabilities across Cisco Secure Access, ManageEngine Endpoint Central and Microsoft Intune.\n\nThe role will work closely with Architecture, Cyber Security, Network Operations, Security Operations, Infrastructure Hosting, End-User Computing, Service Delivery, application owners and managed-service vendors to:\n\n Understand and technically challenge the approved architecture and design.\n\n Translate approved designs into detailed, practical implementation plans.\n\n Coordinate dependencies, sequencing, technical resources, and vendor activities.\n\n Ensure that configurations and deployments are implemented, tested, and evidenced correctly.\n\n Lead technical troubleshooting and root-cause analysis across platform boundaries.\n\n Confirm operational readiness, documentation, monitoring, support arrangements and knowledge transfer.\n\n Recommend whether solutions are technically ready for production, BAU acceptance, or further remediation.\n\nThe current Cisco Secure Access scope requires validated connectivity, identity integration, application policies, client deployment, user-acceptance testing, sign-off, low-level/as-built documentation, and managed-service handover. The Intune programme similarly requires assessment, remediation, testing, service governance, knowledge transfer, and transition into a sustainable operating model.\n\nKey Responsibilities:\n\nA. Technical Assessment and Design Assurance:\n\n Assess the current Cisco Secure Access, ManageEngine and Intune environments, including configuration, integration, operational gaps, technical debt, supportability and deployment readiness.\n\n Review approved high-level and low-level designs and confirm that they are complete, implementable and aligned with Life Healthcare standards.\n\n Identify technical assumptions, constraints, dependencies, risks and unresolved design decisions.\n\n Challenge vendor designs and recommendations where they are incomplete, impractical, unsupported or inconsistent with Life Healthcare requirements.\n\n Maintain a technical gap, risk, dependency and decision register.\n\n Ensure material deviations from approved architecture are returned to the appropriate Architecture or Security authority for approval.\n\nB. Architecture-to-Implementation Planning:\n\n Convert approved architecture into detailed implementation plans containing:\n\n Technical work packages and accountable owners.\n\n Prerequisites and dependencies.\n\n Logical sequencing and deployment waves.\n\n Configuration and integration activities.\n\n Test cases, expected results and acceptance criteria.\n\n Cutover, communication, support and hypercare requirements.\n\n Risk controls, backups and rollback procedures.\n\n Operational documentation and handover deliverables.\n\n Confirm that plans cover normal, failure, recovery, security and operational-support scenarios.\n\n Establish technical readiness and go/no-go criteria before each production deployment.\n\nLife Healthcare’s change model requires documented impact assessment, approval, implementation, testing, close-out and sign-off. Managed-service changes must also include a documented rollback plan, audit ticket, implementation testing, configuration backup and completion evidence.\n\nC. Cross-Platform Implementation and Deployment Assurance:\n\nCisco Secure Access:\n\n Lead technical implementation assurance across Secure Private Access, Zero Trust access, Secure Internet Access, Cisco Secure Client, private-resource definitions, access policies, Resource Connectors, IPsec/VPN connectivity and traffic routing.\n\n Validate routing, DNS, firewall rules, certificates, application ports, FQDNs, user/group mappings, policy sequencing and connectivity paths.\n\n Troubleshoot connectivity, latency, routing, authentication, policy, certificate, client and application-access issues using available logs and telemetry.\n\nEnsure that AD group synchronisation, SAML, MFA and certificate-based authentication flows are implemented and validated.\n\nValidate software-distribution readiness, enrolment method, endpoint prerequisites, Cisco Secure Client packaging and controlled production deployment.\n\nManageEngine Endpoint Central:\n\n Review and assure application packages, scripts, policies, deployment rules, detection logic, retry/recovery behaviour and reporting.\n\n Validate pre-installation, installation and post-installation steps.\n\n Ensure reporting distinguishes successful, failed, incomplete and previously installed deployments.\n\n Lead root-cause analysis of recurring deployment failures and coordinate corrective action.\n\n Require controlled pilot testing before changes are released to broader deployment groups.\n\nThese responsibilities directly address current needs around package reliability, interrupted installations, recovery behaviour, detection logic, deployment reporting, controlled testing and knowledge transfer.\n\nMicrosoft Intune:\n\n Provide technical oversight of Intune assessment, remediation and managed-service implementation.\n\n Assure configuration profiles, compliance policies, security baselines, application deployment, device enrolment, MDM/MAM, Conditional Access integration and operational monitoring.\n\n Help define and govern the appropriate workload boundaries between Intune and ManageEngine.\n\n Coordinate identity and device-management dependencies involving Active Directory, Entra ID, Group Policy and relevant endpoint platforms.\n\n Confirm that proposed configurations are tested against the applicable user, device, shared-device and operational personas.\n\nThe Intune scope requires defined strategies for endpoint management, security and operations, as well as application deployment, policy administration, compliance monitoring, reporting and service governance.\n\nD. Testing, Quality Assurance and Technical Acceptance:\n\n Own the end-to-end technical test strategy across all three platforms.\n\n Ensure testing includes, where applicable:\n\n Configuration and connectivity validation.\n\n Authentication and authorisation testing.\n\n Application and user-journey testing.\n\n Certificate and identity-flow validation.\n\n Positive, negative and failure-path testing.\n\n Network interruption, recovery and retry behaviour.\n\n Failover, resilience and rollback testing.\n\n Pilot and phased-deployment validation.\n\n Operational-support and monitoring tests.\n\n Maintain traceability between requirements, test cases, defects, evidence and sign-off.\n\n Confirm that defects are resolved, accepted as known risks or formally deferred before recommending production deployment.\n\n Provide technical go/no-go and service-acceptance recommendations.\n\nLife Healthcare’s stated acceptance model requires assessment approval, an approved implementation plan, completed and tested remediation, validation against agreed success criteria, established runbooks and reporting, and completed knowledge transfer.\n\nE. Change Control, Hypercare and BAU Transition:\n\n Prepare or quality-assure technical change records, implementation steps, risks, impact assessments, test evidence and rollback plans.\n\n Participate in CAB and other technical-governance forums.\n\n Coordinate hypercare following material deployments, including enhanced monitoring, rapid triage, issue burn-down and vendor escalation.\n\n Define BAU entry and exit criteria.\n\n Confirm operational readiness covering:\n\n Monitoring and alerting.\n\n Support queues and escalation paths.\n\n Roles and RACI.\n\n Runbooks, SOPs and knowledge articles.\n\n Low-level and as-built documentation.\n\n Administrative access and auditability.\n\n Known errors, workarounds and unresolved risks.\n\n Vendor-service boundaries and SLAs.\n\n Coordinate formal handover and service acceptance.\n\nF. Managed-Service Vendor Oversight:\n\n Act as Life Healthcare’s senior technical interface to the Cisco Secure Access, ManageEngine and Intune managed-service providers.\n\n Review, challenge and technically assure vendor designs, implementation approaches, change plans and recommendations.\n\n Validate vendor delivery against contracted scope, approved architecture, security requirements and agreed acceptance criteria.\n\n Ensure incidents, recurring problems and cross-vendor dependencies are actively owned and escalated.\n\n Require appropriate RCA, corrective action, evidence and follow-through for significant or repeat failures.\n\n Review vendor service health, risks, incidents, problems, changes, SLA performance, technical debt and improvement actions.\n\n Ensure documentation, knowledge transfer, access handback and service history are complete before final acceptance or transition.\n\n Prevent accountability gaps between vendors by maintaining an end-to-end technical view of the service.\n\nLife Healthcare retains platform ownership while the managed-service provider performs authorised operational administration; vendor delivery must therefore remain subject to internal governance, approval and service assurance. Existing managed-service expectations include health checks, incident management, operational reviews, risk management, documentation updates and controlled changes.\n\nEssential Technical Skills:\n\n Expert-level Cisco enterprise networking, including routing, connectivity, traffic flow and complex fault isolation.\n\n Strong network-security and firewall expertise, including firewall policy, VPN/IPsec, secure web access, DNS, certificates and encrypted traffic.\n\n Hands-on Cisco Secure Access implementation and troubleshooting experience, including ZTA/Private Access, Secure Internet Access/SWG, Cisco Secure Client, Resource Connectors, tunnels, policy enforcement and user/application access.\n\n Strong understanding of:\n\n Active Directory and AD security groups.\n\n Entra ID integration.\n\n SAML, SSO and MFA.\n\n Certificate-based and user-based authentication.\n\n PKI and certificate deployment/troubleshooting.\n\n Strong ManageEngine Endpoint Central knowledge, particularly software packaging, deployment scripts, detection logic, retry behaviour and deployment reporting.\n\n Working knowledge of Microsoft Intune, including configuration, compliance, security policies, application deployment, MDM/MAM and Conditional Access integration.\n\n Practical PowerShell scripting and automation capability.\n\n Ability to interpret technical logs, network traces, endpoint diagnostics, deployment results and service telemetry.\n\n Strong technical documentation capability, including implementation plans, test plans, runbooks, low-level designs, as-built records and operational procedures.\n\nQualifications and Certifications:\n\nMandatory\n\n CCIE, or demonstrably equivalent senior Cisco expertise.\n\n Where the candidate does not hold CCIE, equivalent expertise must be demonstrated through evidence of:\n\n Senior technical accountability for complex enterprise Cisco environments.\n\n Successful delivery of significant Cisco networking and security implementations.\n\n Advanced routing, firewall, VPN, identity-integration and troubleshooting capability.\n\n Ability to techni...","description_format":"text","description_chars":14891,"description_truncated":true,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["IT Consulting & Digital Transformation","IT Outsourcing & Dedicated Teams","Systems Integrators","Management Consulting"],"lifecycle":[{"event":"open","at":"2026-11-07T00:57:45Z"}],"visa":[],"liveness":{"score":35,"band":"fade","label":"Fading","p_open":1,"p_active":0.787,"p_room":0.45,"age_days":13,"expected_fill_days":9,"reasons":["seen:13","velocity","win:tail","comp:brand"],"computed_at":"2026-11-12T10:38:37Z"},"pay":null,"html_url":"https://alion.io/job/tata-consultancy-services-senior-technical-lead-secure-access-endpoint-platforms","json_url":"https://alion.io/job/tata-consultancy-services-senior-technical-lead-secure-access-endpoint-platforms.json","meta":{"generated_at":"2026-11-13T17:45:57Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":35496,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-14T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":222},"rest":"https://alion.io/mcp/rest/get_company?id=222"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Ftata-consultancy-services-senior-technical-lead-secure-access-endpoint-platforms"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"free","price":{"credits":0,"usd":0},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Ftata-consultancy-services-senior-technical-lead-secure-access-endpoint-platforms"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Ftata-consultancy-services-senior-technical-lead-secure-access-endpoint-platforms"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/tata-consultancy-services-senior-technical-lead-secure-access-endpoint-platforms\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Ftata-consultancy-services-senior-technical-lead-secure-access-endpoint-platforms"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3902118}},{"tool":"search_jobs","arguments":{"company":"tcs.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3902118},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}