Principal Infrastructure Automation & AI Ops Engineer
Forcepoint
IndiaremotePosted 14 days ago
Skill Required
Infrastructure-EngineerAutomation-EngineerAIOps-EngineerPlatform-EngineerDevOps-EngineerInfrastructure-Automation-EngineerPrincipal-Infrastructure-EngineerSenior-Infrastructure-Operations-EngineerInfrastructure-Automation-ArchitectAI-Infrastructure-LeadSenior-Principal-Automation-EngineerPrincipal-DevOps-EngineerAI EngineerInfrastructure EngineerautomationAItroubleshootingObservabilityCD pipelinesITILEngineeringCloud SecuritySharePointShell ScriptingTerraformdesigningRESTsecurityAnsiblePythondesignVaultCI/CDCloudRustAWSGitandIAMFulltime
Key highlights
- Level Required: 10+ years in infrastructure, systems, or platform engineering.
- Key benefit: Delivery of production AI-assisted capabilities rather than pilots.
- Notable requirement: Expert-level Microsoft Intune and Windows endpoint management (including Autopilot and LAPS enforcement).
- Scope detail: Organization operates as customer zero for Forcepoint's Data Security Everywhere (DSE) / DLP platform.
- Scale detail: 2.7k employees operating across 150 countries with 11k+ customers.
- Focus area: Role centers on creating a safer world through automation and AI-driven security operations.
Role overview
Forcepoint is seeking a Staff/Principal Infrastructure Automation & AI Ops Engineer to modernize enterprise infrastructure operations across endpoint, identity, Microsoft 365, network, cloud, and IT service management. The role involves establishing an automation-first, API-driven, AI-assisted operating model that replaces manual administration with policy-as-code and automated remediation while extending their existing security foundation. This position acts as a technical authority and architecture leader, unifying multiple platforms into a single automation and telemetry architecture and leading the integration of AI-assisted data security workflows within their broader automation strategy.
Responsibilities
- Own the architecture and standards for the Windows endpoint platform in Intune; design lifecycle automation covering provisioning, configuration, compliance, patching, and retirement.
- Sustain current patch and compliance rates as the fleet scales.
- Engineer Windows Autopilot workflows that enforce standard-user deployment and close local-admin exposure.
- Build automated software inventory auditing by reconciling Intune with CrowdStrike Falcon Discover.
- Design self-healing remediation for common failures.
- Serve as a technical authority for Entra ID identity architecture; automate Joiner, Mover, and Leaver workflows across Entra ID, M365, and Freshservice.
- Mature Conditional Access from audit mode into full enforcement.
- Develop AI-assisted entitlement and RBAC analysis that surfaces excessive privilege, stale access, and segregation-of-duties risk.
- Partner on Beyond Trust privileged-access automation, including onboarding, credential rotation, and session monitoring.
- Architect and automate Entra ID, Intune, Exchange Online, SharePoint Online, Teams, and Conditional Access administration through Microsoft Graph and PowerShell.
- Establish configuration baselines and drift detection; carry forward the SharePoint governance and versioning cleanup already underway.
- Own the automation engineering practice enterprise-wide; set standards for Terraform, Bicep, and scripting frameworks in place of one-off scripts.
- Build CI/CD pipelines and API-driven integrations across Intune, Entra ID, Freshservice, AWS, and Juniper.
- Convert high-volume manual processes into automated Freshservice service catalog workflows.
- Deliver production AI-assisted capabilities, not pilots, across endpoint, identity, network, cloud, and Service Desk.
- Implement anomaly detection and event correlation.
- Implement intelligent ticket classification and routing in Freshservice.
- Implement predictive models for certificate expiration, patch compliance, and firewall licensing.
- Ensure every automated action carries authentication, authorization, logging, approval, and rollback controls.
- Include human approval gates on high-risk changes.
- Serve as a technical partner on the organization's customer-zero engagement with Forcepoint DSE/DLP.
- Help define how AI-assisted data security detection and remediation workflows integrate with the broader automation and AI Ops architecture.
- Build a unified telemetry view spanning endpoint, identity, network, cloud, M365, and ITSM.
- Implement secrets management through Key Vault, Secrets Manager, or Vault.
- Eliminate hardcoded credentials and standing privileged access.
- Enforce least-privilege RBAC with full audit trails for every automated action.
- Define the architecture standards adopted across Infrastructure & Operations.
- Lead design reviews, mentor engineers, and partner with Network, Cloud, Security, Identity, and Service Desk leaders.
Requirements
- 10+ years in infrastructure, systems, or platform engineering.
- Expert-level Microsoft Intune and Windows endpoint management, including Autopilot and local-admin/LAPS enforcement.
- Strong hands-on Entra ID experience: SSO, MFA, Conditional Access, Zero Trust, identity lifecycle, SCIM/API-based provisioning.
- Advanced PowerShell, Python, and/or Bash; strong REST API/webhook integration and Git experience; experience with Terraform, Bicep, or Ansible and CI/CD pipelines.
- Deep Microsoft 365 administration, including Microsoft Graph API and SharePoint governance.
- Experience with EDR platforms (CrowdStrike Falcon preferred) and vulnerability/patch management reporting.
- Understanding of 802.1X, enterprise PKI/CA, certificate deployment via MDM, and NAC/authentication troubleshooting.
- Demonstrated experience with AI-assisted or event-driven production automation, including anomaly detection and automated remediation with appropriate security guardrails.
Nice to have
- Experience with AWS platform engineering and account hygiene.
- Direct Freshservice (or ServiceNow/Jira Service Management) administration and API integration experience.
- Experience with CyberArk or equivalent PAM platforms, and Commvault or equivalent backup platforms.
- Network automation using Python/Ansible; experience with observability/telemetry pipelines.
- Experience with LLM/AI agent frameworks and enterprise AI governance.
- Familiarity with Forcepoint DSE/DLP or Claude-based AI security tooling, or interest in shaping an early customer-zero AI/data-security integration.
- Microsoft 365 Certified: Enterprise Administrator Expert; Terraform Associate; AWS/Azure professional certification.
Additional details
- Who is Forcepoint?: Simplifies security for global businesses and governments. 20+ years in business. 2.7k employees. 150 countries. 11k+ customers. 300+ patents.
- Success Metrics (6–12 Months): 60–80%+ of repeatable endpoint tasks automated; patch/compliance rates sustained or improved; Automated Joiner/Mover/Leaver workflows live; Conditional Access moved from audit to full enforcement; Infrastructure changes delivered through Git/CI/CD with reusable modules adopted across teams; Proactive certificate, firewall, and endpoint compliance monitoring in place; Multiple AI Ops use cases in production (ticket classification, automated low-risk remediation) with measurable reduction in mean time to detect/resolve.
- Policy of Forcepoint: Provides equal employment opportunities to all applicants and employees without regard to protected status and affirms commitment to advancing equal employment opportunity.
- Applicant Eligibility: Must have the right to work in the location to which you have applied.
- Posting Location: Originally posted on Himalayas.
- Inclusion Statement: Encourages applications even if previous experience differs slightly as long as alignment exists and enthusiasm is present.