Principal Infrastructure Automation, AI Ops Engineer

Forcepoint

. Modernize enterprise infrastructure operations across endpoint, identity, Microsoft 365, network, cloud, and IT service management .

Posted 10/8/2026full-timeRemote • IndiaLeadWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive expertise in infrastructure and platform engineering with a focus on automation, identity management, and Microsoft 365 administration. Proficient in implementing AI-assisted operational workflows and managing endpoint security and compliance.

Highest-signal resume keywords

Microsoft Intune ManagementAutomation EngineeringPowerShell ScriptingMicrosoft 365 AdministrationEntra ID Experience

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Windows Endpoint ManagementAutomation DesignREST API IntegrationTerraformBicepPythonGitAnomaly DetectionConditional AccessVulnerability Management

Soft Skills

LeadershipMentoringCollaboration

Tools & Technologies

Microsoft 365FreshserviceCrowdStrike FalconAWSCommvaultCyberArkJuniper NGFWServiceNowJira Service ManagementForcepoint DSE/DLP

Certifications & Qualifications

Microsoft 365 Certified: Enterprise Administrator ExpertTerraform AssociateAWS Professional CertificationAzure Professional Certification

Industry Keywords

API-Driven AutomationPolicy-as-CodeIdentity Lifecycle ManagementZero TrustEnterprise AI Governance

Tech Stack

Tools & technologies

AnsibleAWSAzureCloudITSMPythonServiceNowTerraform

About the role

Key responsibilities & impact

Modernize enterprise infrastructure operations across endpoint, identity, Microsoft 365, network, cloud, and IT service management
Establish an automation-first, API-driven, AI-assisted operating model using policy-as-code, automated remediation, and intelligent operational workflows
Act as a technical authority and architecture leader across Intune, Entra ID, Microsoft 365, CrowdStrike Falcon, CyberArk, Freshservice, AWS, Commvault, and Juniper NGFW
Own Windows endpoint platform architecture and lifecycle automation for provisioning, configuration, compliance, patching, and retirement
Engineer Windows Autopilot workflows enforcing standard-user deployment and reducing local-admin exposure
Build software inventory auditing and self-healing remediation for common endpoint failures
Automate Joiner, Mover, and Leaver workflows across Entra ID, Microsoft 365, and Freshservice
Mature Conditional Access from audit mode to full enforcement
Develop AI-assisted entitlement and RBAC analysis for excessive privilege, stale access, and segregation-of-duties risks
Automate Microsoft 365 administration through Microsoft Graph and PowerShell, including configuration baselines, drift detection, and SharePoint governance
Own the enterprise automation engineering practice and establish standards for Terraform, Bicep, and scripting frameworks
Build CI/CD pipelines and API-driven integrations across Intune, Entra ID, Freshservice, AWS, and Juniper
Convert high-volume manual processes into automated Freshservice service catalog workflows
Deliver production AI-assisted capabilities including anomaly detection, event correlation, intelligent ticket classification/routing, and predictive monitoring
Implement authentication, authorization, logging, approval, rollback, and human approval controls for automated actions
Support Forcepoint DSE/DLP customer-zero AI-assisted data security detection and remediation integrations
Build unified telemetry across endpoint, identity, network, cloud, Microsoft 365, and ITSM
Implement secrets management and enforce least-privilege RBAC with full audit trails
Define architecture standards, lead design reviews, mentor engineers, and partner with cross-functional infrastructure and security teams
Deliver success metrics including 60–80%+ automation of repeatable endpoint tasks, live identity lifecycle workflows, Git/CI/CD infrastructure changes, proactive compliance monitoring, and production AI Ops use cases

Requirements

What you’ll need

10+ years in infrastructure, systems, or platform engineering
Demonstrated experience designing automation in large enterprise environments
Expert-level Microsoft Intune and Windows endpoint management, including Autopilot and local-admin/LAPS enforcement
Strong hands-on Entra ID experience: SSO, MFA, Conditional Access, Zero Trust, identity lifecycle, and SCIM/API-based provisioning
Advanced PowerShell, Python, and/or Bash
Strong REST API/webhook integration and Git experience
Experience with Terraform, Bicep, or Ansible and CI/CD pipelines
Deep Microsoft 365 administration, including Microsoft Graph API and SharePoint governance
Experience with EDR platforms; CrowdStrike Falcon preferred
Vulnerability and patch management reporting experience
Understanding of 802.1X, enterprise PKI/CA, certificate deployment via MDM, and NAC/authentication troubleshooting
Demonstrated experience with AI-assisted or event-driven production automation, including anomaly detection and automated remediation with appropriate security guardrails
Experience with AWS platform engineering and account hygiene preferred
Direct Freshservice or ServiceNow/Jira Service Management administration and API integration experience preferred
Experience with CyberArk or equivalent PAM platforms, and Commvault or equivalent backup platforms preferred
Network automation using Python/Ansible and observability/telemetry pipelines preferred
Experience with LLM/AI agent frameworks and enterprise AI governance preferred
Familiarity with Forcepoint DSE/DLP or Claude-based AI security tooling, or interest in shaping an early customer-zero AI/data-security integration preferred
Microsoft 365 Certified: Enterprise Administrator Expert, Terraform Associate, or AWS/Azure professional certification preferred
Applicants must have the right to work in the location to which they have applied

Benefits

Comp & perks

Inclusive and diverse workplace
Equal employment opportunities
Reasonable accommodations for qualified individuals with disabilities and disabled veterans