Track Manager - MS System Center Configuration Manager (SCCM)

HCL Technologies Limited; Bengaluru; On-site; INR 1,500,000 - 2,300,000; Full time

Job summary

HCL Technologies Limited is seeking a hands-on MDE Platform Engineer to administer Microsoft Defender for Endpoint across Windows and Linux server estates. You will own the MDE platform in our Azure/M365 tenant, ensuring secure onboarding and offboarding of servers at scale, and manage EDR policies, exceptions, ASR, sensor health, and agent update rings.

The ideal candidate brings deep operational experience with MDE on servers, an automation-first mindset, and strong collaboration with Infra,

Qualifications

• Experience administering Defender for Endpoint on Windows and Linux servers.
• Strong automation and scripting skills in PowerShell/Bash.
• Experience coordinating with SOC/IR and platform teams during incidents.

Responsibilities

• Design and operate scalable onboarding/offboarding processes for servers.
• Define/maintain AV policies, EDR in block mode, ASR rules, and network protections.
• Collaborate with Infra and SOC for incident containment, evidence capture and post-incident hardening actions.

Skills

MDE Platform Administration

Automation scripting

Azure Defender/M365 Defender

Incident response collaboration

Tools

Azure Automation

GitHub Actions

M365 Defender/Graph APIs

Job description

Track Manager - MS System Center Configuration Manager (SCCM) Track Manager - MS System Center Configuration Manager (SCCM) India Job Description Track Manager - MS System Center Configuration Manager (SCCM) Bengaluru, Karnataka

Job Summary

MDE Platform Administration (Tenant-Level) 2) Server Onboarding & Offboarding (Windows & Linux) a. Design and operate scalable onboarding processes: i. Windows Server: MECM/SCCM, GPO, Intune, Azure Arc, scripts; ensure Sense EDR sensor and Defender Antivirus are properly configured (including passive mode transitions if 3rd-party AV present). ii. Linux Server: Package-based installs (mdatp via apt/yum/zypper), onboarding scripts, repo configuration, proxy settings, and service validation. b. Maintain golden images / AMIs with pre-onboarding steps, device tagging, and machine groups. c. Operate offboarding flows (offboarding package/keys) for decom, M&A carve-outs, and cloud auto-scale lifecycles; reconcile stale/duplicate devices. d. Track coverage: % of in-scope servers onboarded, health status, and remediation of inactive/unhealthy devices. 3) Policy, Exclusions & Hardening a. Define/maintain AV policies, EDR in block mode, Attack Surface Reduction (ASR) rules, Network Protection, Controlled Folder Access (where server-appropriate). b. Implement file/path/process exclusions with risk-based justification, balancing performance and detection efficacy; periodic review, attestation, and removal of stale exceptions. c. Manage Indicators (IOCs), custom URL/Domain/IP indicators, and controlled testing with robust change control. 4) Operations & Support a. Operate day-to-day MDE tool support: ticket queue, troubleshooting onboarding/health/AV conflicts, performance tuning, and sensor/engine update issues. b. Partner with SOC/IR on incidents; drive endpoint containment, isolation support, evidence capture, and post-incident hardening actions. 5) Automation & Scale a. Build automation with PowerShell, Bash, Azure Automation, Azure DevOps/GitHub Actions, M365 Defender/Graph APIs Profile We’re seeking a hands-on MDE Platform Engineer to administer Microsoft Defender for Endpoint across Windows and Linux server estates. You will own the MDE platform in our Azure/M365 tenant, ensure secure and compliant onboarding/offboarding of servers at scale, and manage EDR + Defender Antivirus policies, exceptions, ASR, EDR in block mode, sensor health and agent update rings. The ideal candidate brings deep operational experience with MDE on servers, automation-first mindset, and strong collaboration with Infra, SOC, and platform teams.

Key Responsibilities

MDE Platform Administration (Tenant-Level) 2) Server Onboarding & Offboarding (Windows & Linux) a. Design and operate scalable onboarding processes: i. Windows Server: MECM/SCCM, GPO, Intune, Azure Arc, scripts; ensure Sense EDR sensor and Defender Antivirus are properly configured (including passive mode transitions if 3rd-party AV present). ii. Linux Server: Package-based installs (mdatp via apt/yum/zypper), onboarding scripts, repo configuration, proxy settings, and service validation. b. Maintain golden images / AMIs with pre-onboarding steps, device tagging, and machine groups. c. Operate offboarding flows (offboarding package/keys) for decom, M&A carve-outs, and cloud auto-scale lifecycles; reconcile stale/duplicate devices. d. Track coverage: % of in-scope servers onboarded, health status, and remediation of inactive/unhealthy devices. 3) Policy, Exclusions & Hardening a. Define/maintain AV policies, EDR in block mode, Attack Surface Reduction (ASR) rules, Network Protection, Controlled Folder Access (where server-appropriate). b. Implement file/path/process exclusions with risk-based justification, balancing performance and detection efficacy; periodic review, attestation, and removal of stale exceptions. c. Manage Indicators (IOCs), custom URL/Domain/IP indicators, and controlled testing with robust change control. 4) Operations & Support a. Operate day-to-day MDE tool support: ticket queue, troubleshooting onboarding/health/AV conflicts, performance tuning, and sensor/engine update issues. b. Partner with SOC/IR on incidents; drive endpoint containment, isolation support, evidence capture, and post-incident hardening actions. 5) Automation & Scale a. Build automation with PowerShell, Bash, Azure Automation, Azure DevOps/GitHub Actions, M365 Defender/Graph APIs Profile We’re seeking a hands-on MDE Platform Engineer to administer Microsoft Defender for Endpoint across Windows and Linux server estates. You will own the MDE platform in our Azure/M365 tenant, ensure secure and compliant onboarding/offboarding of servers at scale, and manage EDR + Defender Antivirus policies, exceptions, ASR, EDR in block mode, sensor health and agent update rings. The ideal candidate brings deep operational experience with MDE on servers, automation-first mindset, and strong collaboration with Infra, SOC, and platform teams.

Skill Requirements

MDE Platform Administration (Tenant-Level) 2) Server Onboarding & Offboarding (Windows & Linux) a. Design and operate scalable onboarding processes: i. Windows Server: MECM/SCCM, GPO, Intune, Azure Arc, scripts; ensure Sense EDR sensor and Defender Antivirus are properly configured (including passive mode transitions if 3rd-party AV present). ii. Linux Server: Package-based installs (mdatp via apt/yum/zypper), onboarding scripts, repo configuration, proxy settings, and service validation. b. Maintain golden images / AMIs with pre-onboarding steps, device tagging, and machine groups. c. Operate offboarding flows (offboarding package/keys) for decom, M&A carve-outs, and cloud auto-scale lifecycles; reconcile stale/duplicate devices. d. Track coverage: % of in-scope servers onboarded, health status, and remediation of inactive/unhealthy devices. 3) Policy, Exclusions & Hardening a. Define/maintain AV policies, EDR in block mode, Attack Surface Reduction (ASR) rules, Network Protection, Controlled Folder Access (where server-appropriate). b. Implement file/path/process exclusions with risk-based justification, balancing performance and detection efficacy; periodic review, attestation, and removal of stale exceptions. c. Manage Indicators (IOCs), custom URL/Domain/IP indicators, and controlled testing with robust change control. 4) Operations & Support a. Operate day-to-day MDE tool support: ticket queue, troubleshooting onboarding/health/AV conflicts, performance tuning, and sensor/engine update issues. b. Partner with SOC/IR on incidents; drive endpoint containment, isolation support, evidence capture, and post-incident hardening actions. 5) Automation & Scale a. Build automation with PowerShell, Bash, Azure Automation, Azure DevOps/GitHub Actions, M365 Defender/Graph APIs Profile We’re seeking a hands-on MDE Platform Engineer to administer Microsoft Defender for Endpoint across Windows and Linux server estates. You will own the MDE platform in our Azure/M365 tenant, ensure secure and compliant onboarding/offboarding of servers at scale, and manage EDR + Defender Antivirus policies, exceptions, ASR, EDR in block mode, sensor health and agent update rings. The ideal candidate brings deep operational experience with MDE on servers, automation-first mindset, and strong collaboration with Infra, SOC, and platform teams.

Other Requirements

MDE Platform Administration (Tenant-Level) 2) Server Onboarding & Offboarding (Windows & Linux) a. Design and operate scalable onboarding processes: i. Windows Server: MECM/SCCM, GPO, Intune, Azure Arc, scripts; ensure Sense EDR sensor and Defender Antivirus are properly configured (including passive mode transitions if 3rd-party AV present). ii. Linux Server: Package-based installs (mdatp via apt/yum/zypper), onboarding scripts, repo configuration, proxy settings, and service validation. b. Maintain golden images / AMIs with pre-onboarding steps, device tagging, and machine groups. c. Operate offboarding flows (offboarding package/keys) for decom, M&A carve-outs, and cloud auto-scale lifecycles; reconcile stale/duplicate devices. d. Track coverage: % of in-scope servers onboarded, health status, and remediation of inactive/unhealthy devices. 3) Policy, Exclusions & Hardening a. Define/maintain AV policies, EDR in block mode, Attack Surface Reduction (ASR) rules, Network Protection, Controlled Folder Access (where server-appropriate). b. Implement file/path/process exclusions with risk-based justification, balancing performance and detection efficacy; periodic review, attestation, and removal of stale exceptions. c. Manage Indicators (IOCs), custom URL/Domain/IP indicators, and controlled testing with robust change control. 4) Operations & Support a. Operate day-to-day MDE tool support: ticket queue, troubleshooting onboarding/health/AV conflicts, performance tuning, and sensor/engine update issues. b. Partner with SOC/IR on incidents; drive endpoint containment, isolation support, evidence capture, and post-incident hardening actions. 5) Automation & Scale a. Build automation with PowerShell, Bash, Azure Automation, Azure DevOps/GitHub Actions, M365 Defender/Graph APIs Profile We’re seeking a hands-on MDE Platform Engineer to administer Microsoft Defender for Endpoint across Windows and Linux server estates. You will own the MDE platform in our Azure/M365 tenant, ensure secure and compliant onboarding/offboarding of servers at scale, and manage EDR + Defender Antivirus policies, exceptions, ASR, EDR in block mode, sensor health and agent update rings. The ideal candidate brings deep operational experience with MDE on servers, automation-first mindset, and strong collaboration with Infra, SOC, and platform teams.

Why HCLTech?

At HCLTech, you'll supercharge your potential. You'll find your career. And you'll find your spark. All at a place that knows that helping its customers stay on top starts by putting its people first.

HCLTech is a global technology company, home to more than 223,000 people across 60 countries, delivering industry-leading capabilities centered around digital, engineering, cloud and AI, powered by a broad portfolio of technology services and products. We work with clients across all major verticals, providing industry solutions for Financial Services, Manufacturing, Life Sciences and Healthcare, Technology and Services, Telecom and Media, Retail and CPG, and Public Services. Consolidated revenues as of 12 months ending June 2026totaled $14.8billion.

• Opens in a new tab.
• Opens in a new tab.
• Opens in a new tab.
• Opens in a new tab.
• Opens in a new tab.
• Opens in a new tab.

Copyright © 2026 HCL Technologies Limited

• Disclaimer
• Privacy Statement
• Terms of use
• Sitemap
• Raise a Grievance

We use cookies on our site. Please read more about cookies policy here.