Principal Infrastructure Automation, AI Ops Engineer

Forcepoint

. Modernize enterprise infrastructure operations across endpoint, identity, Microsoft 365, network, cloud, and IT service management .

Posted 10/8/2026full-timeRemote • IndiaLeadWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in automation engineering and infrastructure operations, with a strong focus on Microsoft Intune, Entra ID, and Microsoft 365 administration. Proficient in developing AI-assisted automation solutions and implementing security best practices across enterprise environments.

Highest-signal resume keywords

Microsoft Intune ExpertiseAutomation EngineeringPowerShell ScriptingEntra ID ManagementMicrosoft 365 Administration

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Automation DesignWindows Endpoint ManagementREST API IntegrationTerraformBicepPythonGitAnomaly DetectionCI/CD PipelinesEvent-Driven Automation

Soft Skills

LeadershipMentoringCollaboration

Tools & Technologies

Microsoft 365FreshserviceAWSCyberArkCommvaultServiceNowJira Service ManagementForcepoint DSE/DLPJuniper NGFWMicrosoft Graph

Industry Keywords

Infrastructure EngineeringIdentity Lifecycle ManagementZero TrustConditional AccessEnterprise AI GovernanceSecurity GuardrailsTelemetryPatch ManagementVulnerability ManagementPolicy-as-Code

Tech Stack

Tools & technologies

AnsibleAWSCloudITSMPythonServiceNowTerraform

About the role

Key responsibilities & impact

Modernize enterprise infrastructure operations across endpoint, identity, Microsoft 365, network, cloud, and IT service management
Establish an automation-first, API-driven, AI-assisted operating model using policy-as-code, automated remediation, and intelligent operational workflows
Act as technical authority and architecture leader across Intune, Entra ID, Microsoft 365, CrowdStrike Falcon, CyberArk, Freshservice, AWS, Commvault, and Juniper NGFW
Own Windows endpoint platform architecture and standards in Intune
Design lifecycle automation for provisioning, configuration, compliance, patching, and retirement
Engineer Windows Autopilot workflows enforcing standard-user deployment and reducing local-admin exposure
Build automated software inventory auditing and self-healing remediation
Automate Joiner, Mover, and Leaver workflows across Entra ID, Microsoft 365, and Freshservice
Mature Conditional Access from audit mode into full enforcement
Develop AI-assisted entitlement and RBAC analysis
Partner on privileged-access automation, including onboarding, credential rotation, and session monitoring
Architect and automate Microsoft 365 administration through Microsoft Graph and PowerShell
Establish configuration baselines, drift detection, and SharePoint governance
Own the enterprise-wide automation engineering practice and standards for Terraform, Bicep, and scripting frameworks
Build CI/CD pipelines and API-driven integrations across infrastructure platforms
Deliver reusable automation modules and convert manual processes into Freshservice service catalog workflows
Deliver production AI-assisted capabilities across endpoint, identity, network, cloud, and Service Desk
Implement anomaly detection, event correlation, intelligent ticket classification and routing, and predictive monitoring
Apply authentication, authorization, logging, approval, rollback controls, and human approval gates to automated actions
Support Forcepoint DSE/DLP customer-zero AI-assisted data security and remediation integration
Build unified telemetry across endpoint, identity, network, cloud, Microsoft 365, and ITSM
Implement secrets management, eliminate hardcoded credentials and standing privileged access, and enforce least-privilege RBAC with audit trails
Define architecture standards, lead design reviews, mentor engineers, and partner with cross-functional infrastructure and security teams
Deliver success metrics including automation of repeatable endpoint tasks, automated identity workflows, Git/CI/CD infrastructure changes, proactive compliance monitoring, and production AI Ops use cases

Requirements

What you’ll need

10+ years in infrastructure, systems, or platform engineering
Demonstrated experience designing automation in large enterprise environments
Expert-level Microsoft Intune and Windows endpoint management, including Autopilot and local-admin/LAPS enforcement
Strong hands-on Entra ID experience, including SSO, MFA, Conditional Access, Zero Trust, identity lifecycle, and SCIM/API-based provisioning
Advanced PowerShell, Python, and/or Bash
Strong REST API/webhook integration and Git experience
Experience with Terraform, Bicep, or Ansible and CI/CD pipelines
Deep Microsoft 365 administration, including Microsoft Graph API and SharePoint governance
Experience with EDR platforms and vulnerability/patch management reporting
Understanding of 802.1X, enterprise PKI/CA, certificate deployment via MDM, and NAC/authentication troubleshooting
Demonstrated experience with AI-assisted or event-driven production automation, including anomaly detection and automated remediation with appropriate security guardrails
Experience with AWS platform engineering and account hygiene
Direct Freshservice, ServiceNow, or Jira Service Management administration and API integration experience
Experience with CyberArk or equivalent PAM platforms, and Commvault or equivalent backup platforms
Network automation using Python/Ansible and experience with observability/telemetry pipelines
Experience with LLM/AI agent frameworks and enterprise AI governance
Familiarity with Forcepoint DSE/DLP or Claude-based AI security tooling, or interest in shaping an early customer-zero AI/data-security integration
Applicants must have the right to work in the location to which they have applied

Benefits

Comp & perks

Inclusive and diverse workplace
Equal employment opportunities
Reasonable accommodations for qualified individuals with disabilities and disabled veterans