Senior Lead, Infra EUC

Northern Trust Corp; Pune District; Hybrid; INR 4,500,000 - 6,000,000; Full time

Job summary

Northern Trust Corp. seeks a Sr. Lead Engineer, End User Computing to design, implement and improve secure, resilient endpoint services for Windows, macOS and mobile platforms in a global, regulated environment.

This role blends hands-on engineering with architecture, automation, security, governance, documentation and technical leadership. The engineer will drive the EUC roadmap toward Intune-centered governance, cloud-managed provisioning and modern application delivery, while ensuring

Qualifications

• Bachelor's degree or equivalent practical experience in a related field.

Responsibilities

• Design and implement enterprise endpoint solutions across Windows, macOS, iOS, Android, Cloud PC and virtual workspaces.
• Engineer and maintain Intune, SCCM, Autopilot, Windows Update for Business, Jamf and AD/Entra ID.
• Define target-state architectures, baselines, deployment patterns, and support models.
• Lead device provisioning, configuration, patching, OS upgrades and lifecycle management.
• Develop deployment rings, pilots, rollback plans and evidence requirements for enterprise changes.
• Translate security and regulatory requirements into enforceable endpoint controls and governance.
• Develop automation using PowerShell, Microsoft Graph, REST APIs and approved tooling.
• Replace legacy scripts with version-controlled, logged, auditable solutions.
• Build endpoint-health monitoring, compliance reporting and operational dashboards.

Skills

Architectural thinking

PowerShell scripting

Microsoft Graph

REST APIs

Intune deployment

SCCM/Configuration Manager

Endpoint security

Identity and access

Automation and scripting

Cross-functional leadership

Education

Bachelor's degree in CS/IS/Engineering

Tools

Intune

Configuration Manager/SCCM

Jamf

Active Directory

Microsoft Entra ID

Group Policy

PowerShell

Microsoft Graph

REST APIs

Win32/MSIX packaging

Job description

The Sr.Lead Engineer, End User Computing is a senior technical role responsible for designing, implementing and continuously improving secure, resilient and user-centered endpoint services. The role supports Windows, macOS, mobile, browser, application-delivery and virtual workspace capabilities across a global, regulated enterprise. It combines hands‑on engineering with architecture, automation, security, governance, documentation and technical leadership.

The engineer will support the current hybrid environment while advancing the EUC roadmap toward Intune-centered governance, cloud‑managed provisioning and servicing, modern application delivery, intelligent automation, unified reporting, stronger lifecycle controls and reduced reliance on legacy infrastructure and scripting.

KEY RESPONSIBILITIES

• Design and implement enterprise endpoint solutions across Windows, macOS, iOS, Android, Cloud PC, virtual workspaces and supported device‑ownership models.
• Engineer and maintain Microsoft Intune, Configuration Manager/SCCM, Windows Autopilot, Windows Autopatch, Windows Update for Business, Jamf, Active Directory, Microsoft Entra ID, Group Policy and related services.
• Define target‑state architectures, configuration baselines, deployment patterns, technical standards, test criteria, support models and operational acceptance requirements.
• Lead device provisioning, enrollment, configuration, patching, operating‑system upgrades, driver and firmware servicing, recovery, retirement and lifecycle cleanup.
• Develop deployment‑ring strategies, controlled pilots, success criteria, rollback plans, exception processes and evidence requirements for enterprise changes.
• Translate security, risk, audit and regulatory requirements into enforceable endpoint controls, monitoring, remediation and audit‑ready evidence.
• Engineer capabilities supporting device compliance, encryption, least privilege, endpoint hardening, certificates, trust stores, application control, secure administration and vulnerability remediation.
• Develop secure and supportable automation using PowerShell, Microsoft Graph, REST APIs, proactive remediations and approved workflow tools.
• Replace fragile or legacy scripts with version‑controlled solutions that include logging, error handling, peer review, least privilege and safe rollback.
• Build endpoint‑health monitoring, compliance reporting, deployment telemetry, failure analysis and operational dashboards that improve decision‑making.
• Modernize application intake, packaging, certification, deployment, patching, retirement and self‑service delivery through Intune‑first and automation‑led practices.
• Engineer and govern enterprise browser policies, extensions, standards, lifecycle controls and controlled exceptions across Microsoft Edge, Chrome and Safari.
• Support legacy dependency remediation, including IE Mode, embedded‑browser, URL, script, certificate and application compatibility dependencies.
• Produce complete engineering documentation, including requirements, designs, implementation plans, test plans, runbooks, RACI assignments, support procedures, evidence and decision records.
• Ensure production readiness through monitoring, knowledge transfer, support ownership, recovery procedures, lifecycle plans and measurable service objectives.
• Act as a technical authority and escalation point for complex endpoint issues, high‑severity vulnerabilities, major changes and transformation initiatives.
• Mentor engineers and coordinate delivery across Security, Architecture, IAM, Network, Cloud, VDI, Service Desk, application teams, vendors and managed‑service partners.

REQUIRED QUALIFICATIONS

• Bachelor's degree in computer science, information systems, engineering or a related field, or equivalent practical experience.
• Typically 12 or more years of progressive infrastructure or EUC engineering experience, including ownership of complex enterprise implementations.
• Advanced experience with Microsoft Intune and Configuration Manager/SCCM in co‑managed, hybrid or migration environments.
• Strong knowledge of Windows endpoint architecture, provisioning, servicing, policy, security, application deployment and troubleshooting.
• Working knowledge of macOS and mobile management using Jamf and/or Intune MDM/MAM, Apple Business Manager and platform compliance capabilities.
• Experience with Microsoft Entra ID, Active Directory, Group Policy, Conditional Access dependencies, modern authentication, certificates and PKI concepts.
• Hands‑on automation experience with PowerShell, Microsoft Graph and REST APIs, plus familiarity with source control and structured release practices.
• Experience with application packaging and deployment technologies such as Win32 applications, MSI and MSIX, including detection, requirements, dependencies and supersedence.
• Knowledge of endpoint security technologies and concepts including Microsoft Defender, BitLocker, LAPS, Windows Hello for Business, application control and attack‑surface reduction.
• Experience with IT service management, change control, incident and problem management, configuration management and production support in a regulated enterprise.

PREFERRED EXPERIENCE

• Engineering endpoint services at global scale across multiple regions, business units and device types.
• Windows Autopilot, Windows Autopatch, Company Portal, Cloud Management Gateway, tenant attach, Cloud PC or virtual desktop integration.
• Browser governance, Chrome Enterprise Core, enterprise site lists, extension controls and legacy‑browser dependency remediation.
• Application packaging automation, test automation, digital employee experience, proactive remediation or self‑healing workflows.
• ServiceNow, Power BI, Azure DevOps or comparable workflow, backlog, reporting and portfolio‑management platforms.
• Cryptographic inventory, certificate and trust dependency management, crypto‑agility or post‑quantum readiness planning.
• Relevant Microsoft, Azure, security, Apple/Jamf or ITIL certifications.

PROFESSIONAL COMPETENCIES

• End‑to‑end ownership, sound risk judgment and ability to drive work from requirements through stable operational handoff.
• Strong systems thinking with the ability to assess impacts across identity, network, security, applications, support and user experience.
• Disciplined engineering practices including standards, reusable patterns, testing, peer review, documentation and measurable acceptance criteria.
• Clear written and verbal communication with the ability to explain technical decisions, risks and trade‑offs to engineers, partners and senior leaders.
• Ability to collaborate across organizational boundaries while maintaining clear accountability, decision rights and delivery commitments.
• Continuous‑improvement mindset focused on eliminating recurring issues, automating repetitive work and reducing technical debt.