Senior IT Engineer (Microsoft 365)

One Retail Group; Bengaluru; On-site; INR 900,000 - 1,500,000; Full time

Job summary

One Retail Group in Bengaluru seeks a commercially minded, hands-on Senior IT Engineer to own the Microsoft 365 environment, cybersecurity, global IT estate and employee technical support. Based in Bengaluru, you will support ~100 colleagues across the UK, India, China and UAE as IT operations move in-house.

This role combines practical IT operations with strategic governance, including Intune, Defender, Entra ID and device management, while coordinating with HR and Finance.

Qualifications

• 5+ years in hands-on IT infrastructure or systems engineering.
• Proven Microsoft 365, Entra ID, Intune, Defender and endpoint management.
• Experience with Conditional Access, MFA and device compliance.
• Fluent English, clear communication and proactive service mindset.
• Based in Bengaluru with overlap to UK hours and occasional after-hours support.

Responsibilities

• Own Microsoft 365 administration across Exchange Online, Teams, SharePoint and OneDrive.
• Manage Entra ID identities, permissions, MFA, and Conditional Access.
• Oversee Intune enrollment, config, compliance, deployment and device security.
• Handle Defender, encryption, patching, and security alerts.
• Lead security incident handling, backup tests, and recovery procedures.
• Oversee Windows/macOS laptop estate from provisioning to disposal.
• Provide international IT support and onboarding/offboarding processes.
• Develop IT policies covering security, data protection and acceptable use.
• Automate repetitive tasks using PowerShell and Graph with AI-assisted tools.
• Transition IT operations in-house and own Microsoft 365, Intune and device management.

Skills

Microsoft 365

Entra ID

Intune

Defender

Endpoint management

Conditional Access

MFA

PowerShell

Microsoft Graph

AI-assisted workflows

Windows Autopilot

Tools

PowerShell

Microsoft Graph

Windows Autopilot

AI-assisted tooling

Job description

Role Overview

We are looking for a commercially minded, hands-on Senior IT Engineer to take ownership of One Retail Group's Microsoft 365 environment, cybersecurity, global IT estate and employee technical support.

Based in our Bengaluru office, you will support approximately 100 colleagues across the UK, India, China and UAE. We are bringing IT operations in-house and need someone who can independently own and improve our environment as we transition away from an outsourced provider.

This is not a traditional helpdesk role, nor is it a purely strategic infrastructure role. You should be comfortable both managing Intune and security policies and troubleshooting an employee's laptop. We need practical judgement, root-cause investigation, clear communication and responsibility for the outcome.

Key Responsibilities

Microsoft 365, Identity & Security

• Own Microsoft 365 administration across Exchange Online, Teams, SharePoint and OneDrive.
• Administer Entra ID, identities, permissions, groups, MFA and Conditional Access.
• Manage and improve Intune enrolment, configuration, compliance, application deployment and device security.
• Manage Defender, endpoint protection, encryption, patching and security alerts.
• Take operational responsibility for preventing and responding to phishing, compromised accounts, ransomware and data loss, including monitoring, escalation, recovery testing and clear incident procedures.
• Review access, identify vulnerabilities, coordinate incident responses and test backup and recovery arrangements.
• Keep the environment secure, efficient, cost-effective and appropriately documented.

Global Devices & Employee Support

• Manage our Windows and macOS laptop estate from procurement and setup through support, replacement and disposal.
• Provide responsive IT support across international offices, diagnosing hardware, software, application and connectivity problems.
• Own technology onboarding and offboarding, including provisioning, account access and secure equipment returns.
• Maintain accurate device and asset records and consistent configuration standards.
• Work with HR and local office teams to coordinate practical support and equipment delivery.

IT Policies & Governance

• Develop, maintain and implement practical IT policies and procedures covering information security, acceptable use, device management, access controls, data protection and employee onboarding and offboarding.
• Ensure policies are consistently applied across our international offices without creating unnecessary bureaucracy.

Automation & Continuous Improvement

• Automate repetitive IT tasks using PowerShell, Microsoft Graph and appropriate AI-assisted tools, while retaining responsibility for security and quality.
• Identify root causes and permanently reduce recurring tickets and manual work.
• Review Microsoft licences and SaaS subscriptions for unnecessary costs.
• Improve documentation, support processes, employee experience and business continuity.

Bring IT Ownership In-House

• Help transition IT operations from our external provider, reviewing existing configuration, access and documentation.
• Take long-term ownership of Microsoft 365, Intune, device management, security and technical support.
• Work closely with HR, Finance, leadership and other teams on business application access and technical issues.
• Collaborate with our separate software, data engineering and Business Central specialists; this role does not own development of those systems.

What We're Looking For

Essential

• Strong practical experience in IT infrastructure or systems engineering, ideally 5+ years in hands-on roles.
• Proven Microsoft 365, Entra ID, Intune, Defender and endpoint management experience.
• Experience with Conditional Access, MFA, device compliance and secure administration.
• Confident supporting Windows and macOS, including general networking, DNS, Wi-Fi and VPN troubleshooting.
• Track record of independently resolving complex issues and supporting employees.
• Clear written and spoken English, sound technical judgement and a proactive, service-minded approach.
• Comfortable working from our Bengaluru office five days per week, with sufficient working-hours overlap to support our UK-based colleagues.
• Willing to provide occasional out-of-hours support for critical IT incidents, security emergencies or planned maintenance, recognising that we operate across multiple international time zones. This is not a routine 24/7 on-call role; any out-of-hours arrangements will be agreed in advance, with appropriate time off in lieu.

We value evidence of independent ownership and practical problem-solving more than certifications alone.

Highly Desirable

• Intune implementation, Windows Autopilot and Microsoft 365 Business Premium.
• PowerShell, Microsoft Graph, IT automation and AI-assisted workflows.
• Microsoft Defender for Endpoint, security incident response and information protection.
• Supporting multiple countries, managing IT assets and licensing, and transitioning from an outsourced IT provider.
• Relevant Microsoft certifications (such as MD-102, MS-102 or SC-300).

What Success Looks Like

Within six months, you will have taken clear ownership of our Microsoft environment and global support operations. Devices will be securely managed, employees will receive reliable support, onboarding and offboarding will be consistent, and security controls and recovery processes will be tested and documented.

You will have reduced recurring issues, automated useful processes and helped establish a reliable, secure and cost-effective in-house IT function. This is a chance to own and improve a global business's IT environment, not simply operate one part of a large corporate IT department.