IT Lead -IT Engineering

Job Title: IT Lead -IT Engineering
Location: Bangalore/ Coimbatore
Immediate joiners or notice period of less than 30 days are needed
This Role:
The IT Lead, IT Engineering leads the engineering of LogixHealth's Microsoft cloud and workplace platforms: Microsoft Entra ID, Microsoft Intune, Microsoft Azure including Azure Virtual Desktop, Microsoft Purview data protection, ITSM tooling and automation. The role owns everything beyond day-to-day operations in a healthcare technology environment that handles Protected Health Information (PHI).
This is a strategic and technical leadership role. The Lead sets the standards and roadmap for these platforms, is the technical authority on design decisions and major incidents, stays hands-on for the most complex work, and leads and mentors the IT engineers who deliver the rest. The Lead turns business and security requirements into a practical platform plan with costs, risks and timelines for the IT Infrastructure Leadership, and serves all LogixHealth locations.
Key Responsibilities:
Strategy, Standards and Roadmap
Own the architecture, design standards and 12 to 24 month roadmap for identity, endpoint management, data protection, cloud and virtual desktop and IT tooling; translate business, security and compliance requirements into options and investment cases with cost, risk and timeline.
Provide input to budgeting, Azure forecasts, Microsoft licensing and tooling decisions; lead projects end to end (requirements, design, pilot, phased rollout, handover) and act as technical approver in design and change reviews.
Platform Ownership (Entra ID, Intune, Purview, Azure, AVD)
Own Entra ID standards: Conditional Access framework, MFA and authentication strategy, Privileged Identity Management, access reviews, application integration and hybrid identity (Entra Connect).
Own endpoint and data protection standards: Autopilot, Autopatch, configuration and compliance policies, Defender for Endpoint, application deployment, Purview DLP and encryption, for Windows and macOS.
Own Azure Virtual Desktop design and operation (host pools, image strategy, FSLogix, autoscaling, capacity, cost and monitoring) and the supporting Azure resources.
Security Hardening, Patch and Vulnerability Management
Own the hardening standard (Microsoft or CIS baselines, Defender for Endpoint and ASR rules, Credential Guard, firewall, device control, encryption, Windows LAPS) and the patch programme: policy and SLAs by severity, monthly cycle, third-party patching, maintenance windows, exception governance and zero-day response.
Own the vulnerability management programme: intake from Defender Vulnerability Management or scanners, prioritisation, remediation SLAs, exception and risk-acceptance register with Security, verified closure and monthly posture reporting with owners and dates for gaps.
ITSM Tooling and Automation
Own the engineering of IT tooling, including ManageEngine ServiceDesk Plus design and its integrations with Intune, Entra ID and Microsoft 365, plus monitoring, reporting and self-service automation.
Set automation and documentation standards for the team (PowerShell, Microsoft Graph, Azure DevOps or Git) and introduce Infrastructure as Code where it adds value.
Incident, Compliance and Team Leadership
Act as technical lead on major incidents affecting these platforms and on the technical response to security incidents with Information Security; manage Microsoft and vendor escalations; own ISO 27001, SOC 2 and HIPAA evidence for the platform controls.
Lead, mentor and develop the IT engineering team: allocate work, review designs, provide escalation support and build capability across the platforms.
Qualifications:
The following requirements are representative of the knowledge, skills, and/or ability required to perform this job successfully. Reasonable accommodation may be made to enable individuals with disabilities to perform the duties.
Required (Mandatory):
B.E./B.Tech in Computer Science, Information Technology, Electronics or a related engineering discipline.
9 to 12 years in IT infrastructure or cloud engineering, including 2 to 3 years as technical lead, with at least 4 years hands-on on Microsoft 365 and Azure in a design and build (engineering) capacity rather than support-only roles.
Strong hands-on Microsoft Entra ID: Conditional Access design, MFA and authentication methods, PIM, access reviews, enterprise application SSO and hybrid identity.
Strong hands-on Microsoft Intune: Autopilot, compliance and configuration policies, Autopatch or update rings, Defender for Endpoint, macOS management.
Strong hands-on Azure Virtual Desktop: architecture, host pools, image lifecycle, FSLogix, autoscaling, security and monitoring, with working knowledge of the Azure platform (networking, storage, monitoring, RBAC, cost).
Proven ownership of patch and vulnerability management for an endpoint or VDI estate: hardening standards, Defender Vulnerability Management or Tenable, Rapid7 or Qualys, SLA-based remediation, exception governance and reporting.
PowerShell and Microsoft Graph; proven ability to define a roadmap, lead major incidents, run design reviews and explain architecture, cost and risk to senior management.
Work from office; shifts and on-call as required for a 24×7 healthcare operation; travel between Coimbatore and Bangalore when needed.
Preferred (Good to Have):
Infrastructure as Code: owning a Terraform (azurerm, azuread) or Bicep practice with module standards, remote state, Git pull-request workflow, pipeline deployment and drift detection, including identity objects managed as code.
Deeper Azure platform design (vNets, NSGs, private endpoints, Azure Files, Compute Gallery, Log Analytics) and Azure DevOps or GitHub CI/CD; Windows 365, Nerdio, Citrix or VMware Horizon to AVD migration.
Microsoft Purview DLP and Defender XDR depth; ITSM tool design or integration (ManageEngine ServiceDesk Plus, ServiceNow or similar); experience moving from AD-dependent estates to cloud-native Entra ID and Intune; healthcare, HIPAA or other regulated environment.
Preferred Certifications (Good to Have):
Microsoft AZ-104 or AZ-305, MD-102, SC-300, AZ-140; ITIL Foundation; HashiCorp Terraform Associate.

Work arrangement
No