Senior Microsoft Engineer

Greetings from Netsach Global.

About the Role

We are looking for an experienced and driven Senior Microsoft Engineer to join our growing IT Services and Security team. This role is focused on designing, implementing, and optimizing secure Microsoft cloud environments, with a deep emphasis on Microsoft Purview, Microsoft Intune, Microsoft Entra ID, Azure, and Zero Trust security architecture.

The ideal candidate will have hands-on experience in securing enterprise Microsoft environments, implementing identity and access controls, managing endpoint and device security, enabling data governance and compliance, and supporting Azure cloud security operations. The role requires both strong technical execution and advisory capability to help enterprise clients improve security, governance, compliance, and operational maturity across the Microsoft ecosystem.

Job Title: Senior Microsoft Engineer

Location: Thane, Mumbai

Exp: 4+ yrs

Type: Full-Time

Department: IT Services and Security

Please click the below link to apply for this job - https://www.netsachglobal.com/job/senior-microsoft-engineer-netsach-8ec600

Key Responsibilities

1. Microsoft Intune, Endpoint Security & Device Governance

• Design, deploy, and manage Microsoft Intune for endpoint management, device compliance, application protection, and security policy enforcement.
• Configure and maintain device enrollment profiles, compliance policies, configuration profiles, security baselines, and endpoint protection policies.
• Implement Mobile Device Management and Mobile Application Management controls for corporate and BYOD environments.
• Manage Windows, macOS, iOS, and Android device policies using Intune.
• Design and administer Intune RBAC, including role assignments, scope tags, administrative boundaries, and delegated access models.
• Implement endpoint security controls, including disk encryption, firewall policies, attack surface reduction rules, endpoint privilege controls, and Defender integration.

• Support conditional access enforcement based on device compliance, risk posture, and user identity.

1. Microsoft Purview, Compliance & Data Governance

• Design, configure, and manage Microsoft Purview solutions for data security, compliance, and governance.
• Implement and manage Data Loss Prevention policies, including Exchange, SharePoint, OneDrive, Teams, Endpoint DLP, and cloud app integrations.
• Configure and manage Sensitivity Labels, retention labels, retention policies, information protection, and data classification policies.
• Support data discovery, classification, labeling, and protection initiatives across Microsoft 365 and Azure environments.

1. Microsoft Entra ID, Identity Security & Zero Trust

Design and manage Microsoft Entra ID identity architecture, including users, groups, roles, applications, enterprise apps, and service principals.

• Implement and optimize Conditional Access policies, MFA, Identity Protection, Privileged Identity Management, and access reviews.
• Support hybrid identity integration using Entra Connect / Azure AD Connect.
• Design and implement least-privilege access models using Entra ID roles, administrative units, privileged access groups, and RBAC principles.
• Manage identity governance controls such as entitlement management, access packages, lifecycle workflows, and periodic access reviews.
• Support Zero Trust architecture by enforcing identity-driven access, device trust, application control, and risk-based authentication.
• Investigate identity-related alerts, suspicious sign-ins, risky users, risky workloads, and privilege escalation events.

1. Azure Cloud Security & Platform Administration

• Support secure design, deployment, and administration of Azure cloud environments.
• Configure and manage Azure resources, subscriptions, management groups, resource groups, policies, and role-based access controls.
• Implement Azure RBAC, Azure Policy, management group governance, tagging standards, and cloud access control models.
• Assist in securing Azure workloads, including virtual machines, storage accounts, key vaults, networking, app services, and databases.
• Implement governance and monitoring controls across Azure subscriptions to improve visibility, compliance, and operational control.
• Work with security teams to review cloud misconfigurations, excessive permissions, exposed resources, and policy violations.

Required Experience

• 4+ years of hands-on experience in enterprise IT, Microsoft cloud, security, or infrastructure engineering roles.
• Strong hands-on experience with Microsoft Purview, including DLP, sensitivity labels, retention policies, data classification, and compliance features.
• Strong hands-on experience with Microsoft Intune, including endpoint management, device compliance, security baselines, app protection, and RBAC.
• Strong knowledge of Microsoft Entra ID, including Conditional Access, MFA, PIM, Identity Protection, access reviews, and hybrid identity.
• Good understanding of Zero Trust security principles, least privilege access, endpoint governance, and identity-based security.
• Experience working with enterprise clients in implementation, migration, governance, or security improvement projects.

Must-Have Requirements

• Hands-on experience implementing and managing Microsoft Purview DLP policies, including Endpoint DLP.
• Hands-on experience with Microsoft Intune RBAC, including role assignments, scope tags, device compliance, and app/device policy enforcement.
• Strong knowledge of Microsoft Entra ID Conditional Access, MFA, PIM, and Identity Protection.
• Practical experience with Azure RBAC, Azure Policy, Defender for Cloud, and Azure monitoring tools.
• Strong documentation, troubleshooting, and client-facing communication skills.

Regards

Emily Jha

Netsach Global 

www.netsachglobal.co.in