IT Lead -IT Engineering

LogixHealth; Coimbatore District; On-site; INR 3,800,000 - 7,000,000; Full time

Job summary

LogixHealth is seeking an IT Lead, IT Engineering to steer the Microsoft cloud and workplace platforms across the organization. You will shape the architecture, standards and multi‑year roadmaps for Entra ID, Intune, Azure, Purview data protection and ITSM tooling, while remaining hands‑on for complex work.

You will mentor the IT engineering team, drive major incidents, and translate security requirements into practical platform plans, timelines and costs for all LogixHealth locations.

Qualifications

• 9–12 years in IT infrastructure or cloud engineering
• 2–3 years as technical lead
• Hands-on with Microsoft 365 and Azure in design/build capacity
• Strong Entra ID: Conditional Access, MFA, PIM, access reviews
• Strong Intune experience: Autopilot, policies, Autopatch, Defender, macOS management
• Strong AVirtual Desktop: architecture, host pools, FSLogix, cost/monitoring
• Patch and vulnerability management ownership for endpoints/VDI
• PowerShell and Microsoft Graph; able to define roadmaps and explain cost/risk
• Willing to work from office; travel between Coimbatore and Bangalore

Responsibilities

• Own the architecture, design standards and 12–24 month roadmap for identity, endpoint management, data protection, cloud and IT tooling.
• Translate business, security and compliance requirements into options with cost, risk and timeline.
• Lead end‑to‑end projects (requirements, design, pilot, rollout, handover) and approve designs.
• Own Entra ID standards: CA framework, MFA, PIM, reviews, app integration and hybrid identity.
• Own endpoint and data protection standards: Autopilot, Autopatch, Defender for Endpoint, Purview DLP.
• Own AV Desktop design/operation and supporting Azure resources.
• Own patch and vulnerability management: SLAs, governance, monthly posture reporting.
• Lead, mentor and develop IT engineering team; manage escalations and coordinate with Security.
• Ensure ISO 27001, SOC 2 and HIPAA evidences for platform controls.

Skills

Entra ID architecture & MFA

Intune Autopilot

Azure Virtual Desktop (AVD)

Vulnerability management

PowerShell

Microsoft Graph

Azure DevOps

Git

ManageEngine ServiceDesk Plus

Terraform (IaC)

Education

B.E./B.Tech in CS/IT/EC or related

Tools

Terraform

Azure DevOps

Git

Job description

Immediate joiners or notice period of less than 30 days are needed

This Role:

The IT Lead, IT Engineering leads the engineering of LogixHealth's Microsoft cloud and workplace platforms: Microsoft Entra ID, Microsoft Intune, Microsoft Azure including Azure Virtual Desktop, Microsoft Purview data protection, ITSM tooling and automation. The role owns everything beyond day-to-day operations in a healthcare technology environment that handles Protected Health Information (PHI).

This is a strategic and technical leadership role. The Lead sets the standards and roadmap for these platforms, is the technical authority on design decisions and major incidents, stays hands-on for the most complex work, and leads and mentors the IT engineers who deliver the rest. The Lead turns business and security requirements into a practical platform plan with costs, risks and timelines for the IT Infrastructure Leadership, and serves all LogixHealth locations.

Key Responsibilities:

Strategy, Standards and Roadmap

• Own the architecture, design standards and 12 to 24 month roadmap for identity, endpoint management, data protection, cloud and virtual desktop and IT tooling; translate business, security and compliance requirements into options and investment cases with cost, risk and timeline.
• Provide input to budgeting, Azure forecasts, Microsoft licensing and tooling decisions; lead projects end to end (requirements, design, pilot, phased rollout, handover) and act as technical approver in design and change reviews.
• Own Entra ID standards: Conditional Access framework, MFA and authentication strategy, Privileged Identity Management, access reviews, application integration and hybrid identity (Entra Connect).
• Own endpoint and data protection standards: Autopilot, Autopatch, configuration and compliance policies, Defender for Endpoint, application deployment, Purview DLP and encryption, for Windows and macOS.
• Own Azure Virtual Desktop design and operation (host pools, image strategy, FSLogix, autoscaling, capacity, cost and monitoring) and the supporting Azure resources.

Security Hardening, Patch and Vulnerability Management

• Own the hardening standard (Microsoft or CIS baselines, Defender for Endpoint and ASR rules, Credential Guard, firewall, device control, encryption, Windows LAPS) and the patch programme: policy and SLAs by severity, monthly cycle, third-party patching, maintenance windows, exception governance and zero-day response.
• Own the vulnerability management programme: intake from Defender Vulnerability Management or scanners, prioritisation, remediation SLAs, exception and risk-acceptance register with Security, verified closure and monthly posture reporting with owners and dates for gaps.

ITSM Tooling and Automation

• Own the engineering of IT tooling, including ManageEngine ServiceDesk Plus design and its integrations with Intune, Entra ID and Microsoft 365, plus monitoring, reporting and self-service automation.
• Set automation and documentation standards for the team (PowerShell, Microsoft Graph, Azure DevOps or Git) and introduce Infrastructure as Code where it adds value.

Incident, Compliance and Team Leadership

• Act as technical lead on major incidents affecting these platforms and on the technical response to security incidents with Information Security; manage Microsoft and vendor escalations; own ISO 27001, SOC 2 and HIPAA evidence for the platform controls.
• Lead, mentor and develop the IT engineering team: allocate work, review designs, provide escalation support and build capability across the platforms.

Qualifications:

The following requirements are representative of the knowledge, skills, and/or ability required to perform this job successfully. Reasonable accommodation may be made to enable individuals with disabilities to perform the duties.

Required (Mandatory):

• B.E./B.Tech in Computer Science, Information Technology, Electronics or a related engineering discipline.
• 9 to 12 years in IT infrastructure or cloud engineering, including 2 to 3 years as technical lead, with at least 4 years hands-on on Microsoft 365 and Azure in a design and build (engineering) capacity rather than support-only roles.
• Strong hands-on Microsoft Entra ID: Conditional Access design, MFA and authentication methods, PIM, access reviews, enterprise application SSO and hybrid identity.
• Strong hands-on Microsoft Intune: Autopilot, compliance and configuration policies, Autopatch or update rings, Defender for Endpoint, macOS management.
• Strong hands-on Azure Virtual Desktop: architecture, host pools, image lifecycle, FSLogix, autoscaling, security and monitoring, with working knowledge of the Azure platform (networking, storage, monitoring, RBAC, cost).
• Proven ownership of patch and vulnerability management for an endpoint or VDI estate: hardening standards, Defender Vulnerability Management or Tenable, Rapid7 or Qualys, SLA-based remediation, exception governance and reporting.
• PowerShell and Microsoft Graph; proven ability to define a roadmap, lead major incidents, run design reviews and explain architecture, cost and risk to senior management.
• Work from office; shifts and on-call as required for a 24x7 healthcare operation; travel between Coimbatore and Bangalore when needed.

Preferred (Good to Have):

• Infrastructure as Code: owning a Terraform (azurerm, azuread) or Bicep practice with module standards, remote state, Git pull-request workflow, pipeline deployment and drift detection, including identity objects managed as code.
• Deeper Azure platform design (vNets, NSGs, private endpoints, Azure Files, Compute Gallery, Log Analytics) and Azure DevOps or GitHub CI/CD; Windows 365, Nerdio, Citrix or VMware Horizon to AVD migration.
• Microsoft Purview DLP and Defender XDR depth; ITSM tool design or integration (ManageEngine ServiceDesk Plus, ServiceNow or similar); experience moving from AD-dependent estates to cloud-native Entra ID and Intune; healthcare, HIPAA or other regulated environment.

Preferred Certifications (Good to Have):

Microsoft AZ-104 or AZ-305, MD-102, SC-300, AZ-140; ITIL Foundation; HashiCorp Terraform Associate.