Sr Lead, Infra End User Computing

185 Northern Operating Sols Pvt Ltd; Pune District; On-site; INR 3,000,000 - 5,200,000; Full time

Job summary

Northern Trust in Pune, India, seeks a Sr Lead Engineer for End User Computing to design, implement, and advance secure endpoint services across Windows, macOS, and mobile platforms. The role blends hands-on engineering with architecture, automation, governance and leadership to evolve a hybrid environment towards cloud-managed provisioning and intelligent automation.

You will build, secure and maintain enterprise endpoint controls, drive modernization, and mentor teams across Security, IAM,

Qualifications

• Bachelor's degree or equivalent practical experience.
• 12+ years of progressive EUC infra engineering experience.
• Advanced experience with Intune and SCCM in hybrid or migration environments.
• Strong Windows endpoint architecture, provisioning and security knowledge.
• MacOS and mobile management with Jamf/Intune MDM/MAM and Apple Business Manager.
• Experience with Entra ID, Active Directory, Group Policy and CA concepts.
• Hands-on automation with PowerShell, Graph, REST APIs; source control exposure.
• Experience with packaging technologies: Win32, MSI, MSIX.
• Knowledge of Defender, BitLocker, LAPS, Windows Hello for Business.
• Experience with ITSM, change control in regulated environments.

Responsibilities

• Design and implement enterprise endpoint solutions across Windows, macOS, iOS, Android, and virtual workspaces.
• Engineer and maintain Intune, SCCM, Autopilot, Entra ID, AD and GPO services.
• Define target architectures, baselines, deployment patterns and test criteria.
• Lead device provisioning, patching, OS upgrades and lifecycle management.
• Develop deployment rings, pilots, rollback plans and evidence for enterprise changes.
• Translate security and regulatory requirements into endpoint controls and audits.
• Develop automation using PowerShell, Graph, REST APIs with logging and rollback safety.
• Create health monitoring, compliance reporting and deployment telemetry dashboards.
• Modernize application intake and delivery through Intune-first approaches.
• Govern browser policies and extensions across Edge, Chrome, Safari.

Skills

Leadership

Automation

Education

Bachelor's degree in CS/IS/Engineering

Tools

Intune

Configuration Manager/SCCM

Jamf

Active Directory

Entra ID

Group Policy

Microsoft Graph

PowerShell

REST APIs

Win32/MSI/MSIX packaging

Windows Autopilot

Job description

About Northern Trust As a global leader in innovative wealth management, asset servicing, asset management and banking services, Northern Trust (Nasdaq: NTRS) is proud to guide the world’s most successful individuals, families, corporations and institutions. Since 1889, we have aligned our efforts with our three guiding Principles That Endure: Service, Expertise, and Integrity. Together, they reflect the three cornerstones of business conduct which we strive to instill in our employees, whom we call partners, and to provide to our clients and the communities we serve worldwide. With more than 135 years of financial experience and over 24,000 partners, we serve the world’s most sophisticated clients using leading technology and exceptional service.

Position : Sr Lead, Infra EUC

The Sr.Lead Engineer, End User Computing is a senior technical role responsible for designing, implementing and continuously improving secure, resilient and user-centered endpoint services. The role supports Windows, macOS, mobile, browser, application-delivery and virtual workspace capabilities across a global, regulated enterprise. It combines hands‑on engineering with architecture, automation, security, governance, documentation and technical leadership. The engineer will support the current hybrid environment while advancing the EUC roadmap toward Intune‑centered governance, cloud‑managed provisioning and servicing, modern application delivery, intelligent automation, unified reporting, stronger lifecycle controls and reduced reliance on legacy infrastructure and scripting.

KEY RESPONSIBILITIES

• Design and implement enterprise endpoint solutions across Windows, macOS, iOS, Android, Cloud PC, virtual workspaces and supported device‑ownership models.
• Engineer and maintain Microsoft Intune, Configuration Manager/SCCM, Windows Autopilot, Windows Autopatch, Windows Update for Business, Jamf, Active Directory, Microsoft Entra ID, Group Policy and related services.
• Define target‑state architectures, configuration baselines, deployment patterns, technical standards, test criteria, support models and operational acceptance requirements.
• Lead device provisioning, enrollment, configuration, patching, operating‑system upgrades, driver and firmware servicing, recovery, retirement and lifecycle cleanup.
• Develop deployment‑ring strategies, controlled pilots, success criteria, rollback plans, exception processes and evidence requirements for enterprise changes.
• Translate security, risk, audit and regulatory requirements into enforceable endpoint controls, monitoring, remediation and audit‑ready evidence.
• Engineer capabilities supporting device compliance, encryption, least privilege, endpoint hardening, certificates, trust stores, application control, secure administration and vulnerability remediation.
• Develop secure and supportable automation using PowerShell, Microsoft Graph, REST APIs, proactive remediations and approved workflow tools.
• Replace fragile or legacy scripts with version‑controlled solutions that include logging, error handling, peer review, least privilege and safe rollback.
• Build endpoint‑health monitoring, compliance reporting, deployment telemetry, failure analysis and operational dashboards that improve decision‑making.
• Modernize application intake, packaging, certification, deployment, patching, retirement and self‑service delivery through Intune‑first and automation‑led practices.
• Engineer and govern enterprise browser policies, extensions, standards, lifecycle controls and controlled exceptions across Microsoft Edge, Chrome and Safari.
• Support legacy dependency remediation, including IE Mode, embedded‑browser, URL, script, certificate and application compatibility dependencies.
• Produce complete engineering documentation, including requirements, designs, implementation plans, test plans, runbooks, RACI assignments, support procedures, evidence and decision records.
• Ensure production readiness through monitoring, knowledge transfer, support ownership, recovery procedures, lifecycle plans and measurable service objectives.
• Act as a technical authority and escalation point for complex endpoint issues, high‑severity vulnerabilities, major changes and transformation initiatives.
• Mentor engineers and coordinate delivery across Security, Architecture, IAM, Network, Cloud, VDI, Service Desk, application teams, vendors and managed‑service partners.

REQUIRED QUALIFICATIONS

• Bachelor's degree in computer science, information systems, engineering or a related field, or equivalent practical experience.
• Typically 12 or more years of progressive infrastructure or EUC engineering experience, including ownership of complex enterprise implementations.
• Advanced experience with Microsoft Intune and Configuration Manager/SCCM in co‑managed, hybrid or migration environments.
• Strong knowledge of Windows endpoint architecture, provisioning, servicing, policy, security, application deployment and troubleshooting.
• Working knowledge of macOS and mobile management using Jamf and/or Intune MDM/MAM, Apple Business Manager and platform compliance capabilities.
• Experience with Microsoft Entra ID, Active Directory, Group Policy, Conditional Access dependencies, modern authentication, certificates and PKI concepts.
• Hands‑on automation experience with PowerShell, Microsoft Graph and REST APIs, plus familiarity with source control and structured release practices.
• Experience with application packaging and deployment technologies such as Win32 applications, MSI and MSIX, including detection, requirements, dependencies and supersedence.
• Knowledge of endpoint security technologies and concepts including Microsoft Defender, BitLocker, LAPS, Windows Hello for Business, application control and attack‑surface reduction.
• Experience with IT service management, change control, incident and problem management, configuration management and production support in a regulated enterprise.

PREFERRED EXPERIENCE

• Engineering endpoint services at global scale across multiple regions, business units and device types.
• Windows Autopilot, Windows Autopatch, Company Portal, Cloud Management Gateway, tenant attach, Cloud PC or virtual desktop integration.
• Browser governance, Chrome Enterprise Core, enterprise site lists, extension controls and legacy‑browser dependency remediation.
• Application packaging automation, test automation, digital employee experience, proactive remediation or self‑healing workflows.
• ServiceNow, Power BI, Azure DevOps or comparable workflow, backlog, reporting and portfolio‑management platforms.
• Cryptographic inventory, certificate and trust dependency management, crypto‑agility or post‑quantum readiness planning.
• Relevant Microsoft, Azure, security, Apple/Jamf or ITIL certifications.

PROFESSIONAL COMPETENCIES

• End‑to‑end ownership, sound risk judgment and ability to drive work from requirements through stable operational handoff.
• Strong systems thinking with the ability to assess impacts across identity, network, security, applications, support and user experience.
• Disciplined engineering practices including standards, reusable patterns, testing, peer review, documentation and measurable acceptance criteria.
• Clear written and verbal communication with the ability to explain technical decisions, risks and trade‑offs to engineers, partners and senior leaders.
• Ability to collaborate across organizational boundaries while maintaining clear accountability, decision rights and delivery commitments.
• Continuous‑improvement mindset focused on eliminating recurring issues, automating repetitive work and reducing technical debt.

Working with Us

As a Northern Trust partner, you will be part of a flexible and collaborative work culture, which has a strong history of financial strength and stability. Movement within the organization is encouraged, senior leaders are accessible, and you can take pride in working for a company committed to an inclusive workplace and assisting the communities we serve. Philanthropy is deeply rooted in Northern Trust’s history and is an essential element of our culture. Employees around the world give their time and talent to work for the greater good of their communities.

Reasonable Accommodation

Northern Trust is committed to working with and providing adjustments to individuals with health conditions and disabilities. If you need a reasonable accommodation for any part of the employment process, please email our HR Service Center at [e-mail], or alternatively you can discuss your individual requirements with the recruiter you are working with.

About Our Pune Office

The Northern Trust Pune office, established in 2016, is now home to over 3,000 employees. The office handles various functions, including Operations for Asset Servicing and Wealth Management, as well as delivering critical technology solutions that support business operations across the globe. Our Pune team takes our commitment to service to heart. In 2024, they volunteered more than 10,000+ hours into the communities where they live and work.

Terms and Conditions

Candidate Privacy Notice California Applicant Privacy Notice Pay Transparency Nondiscrimination Provision (U.S) Transparency in Coverage Disclosure – North America Northern Trust is committed to working with and providing reasonable accommodations to individuals with disabilities. If, because of a medical condition or disability, you need a reasonable accommodation for any part of the employment process, please email our HR Service Center or call 1-800-807-0302 (North America), [phone] (Asia Pacific), 1800-425-0333 (India), [phone] (Europe, Middle East and Africa) and let us know the nature of your request and your contact information.

APAC/INDIA EEO STATEMENT

It is the policy and practice of Northern Trust to provide equal employment opportunities to all employees and applicants. Northern Trust does not discriminate on the basis of race, colour, religion or belief, nationality, ethnic or national origin, sex, marital status, sexual orientation, disability or age. All employment decisions will be made in a non‑discriminatory manner in accordance with our obligations under the law and codes of practice. This includes human resources’ decisions relating to recruitment, terms and conditions of employment, transfers, promotions and access to learning and development.

Canada EEO STATEMENT

Northern Trust is an Equal Opportunity Employer. Hiring and other employment decisions at Northern Trust are made without regard to race, colour, religion, sex, ancestry, national origin, ethnic origin, age, disability, citizenship, veteran status, sexual orientation, record of offences, marital status, family status, or any other characteristic protected by federal, provincial, or local law, regulation, or ordinance.

EMEA EEO STATEMENT

It is the policy and practice of Northern Trust to provide equal employment opportunities to all employees and applicants. Northern Trust does not discriminate on the basis of race, colour, religion or belief, nationality, ethnic or national origin, sex, marital status, sexual orientation, disability or age. All employment decisions will be made in a non‑discriminatory manner in accordance with our obligations under the law and codes of practice. This includes human resources’ decisions relating to recruitment, terms and conditions of employment, transfers, promotions and access to learning and development.

USA EEO STATEMENT

It is the policy of The Northern Trust Company to afford equal opportunity in all phases of employment without regard to an individual's age, race, color, religion, creed, gender, national origin, citizenship status, marital status, pregnancy, sexual orientation, gender identity, gender expression, genetic tests and information, physical or mental disability, protected veteran status or any other legally protected status.