Windows Systems Engineer

LiveRamp; Hyderabad; Presencial; INR 2.000.000 - 3.200.000; Jornada completa

Descripción de la vacante

LiveRamp is seeking a Windows platform engineer to own the Windows client and server landscape, from images to security baselines. You will design standard images, manage patching, and ensure compliant, secure endpoints across the enterprise.

You will automate lifecycle tasks with PowerShell and Python, integrate with Intune/Azure AD, and collaborate with security and IT teams to maintain reliability and scale.

Formación

• 5+ years in Windows systems engineering, administration, or IT operations in enterprise settings.
• Experience with Windows client imaging, Autopilot/OSD, and group policy.
• Hands‑on sysadmin for Windows Server roles and file/print services.
• Strong automation skills using PowerShell (and Python).
• Experience with security tooling deployment on Windows (CrowdStrike, Netskope).
• Proven ability to integrate Windows with Azure AD and on‑prem AD, ITSM, and asset systems.

Responsabilidades

• Own the Windows client and server platform, including images, baselines, and security policies.
• Design and maintain standardized Windows build images and gold images via tooling.
• Administer Windows Server instances supporting services, patching, and performance tuning.
• Ensure endpoints meet security standards, encryption, and baseline compliance.
• Manage Intune/Workspace ONE for enrollment, policies, and software deployment.
• Execute patching strategies and coordinate with security for tools on endpoints.
• Develop automations with PowerShell/Python powering Windows lifecycle tasks.
• Collaborate to connect Intune, Azure AD, on‑prem AD, ITSM, and asset systems via APIs.
• Maintain runbooks and documentation; enable self‑service and incident handling.
• Provide Tier 3–4 support; drive root cause analysis and sustainable fixes.

Conocimientos

Windows systems engineering

Windows administration

Automation

PowerShell

Python

Intune

Workspace ONE

Configuration Manager

CrowdStrike

Netskope

Azure AD

On‑prem AD

Networking basics

Google Workspace

Microsoft 365 admin

Monitoring & alerting

Herramientas

Intune

Workspace ONE

Configuration Manager

CrowdStrike

Netskope

Azure AD

On‑prem AD

Descripción del empleo

LiveRamp is shaping the future of responsible data collaboration between the world’s leading brands, retailers, financial services providers, and healthcare innovators. As consumers embrace new AI-driven experiences, the LiveRamp data collaboration network exponentially expands the breadth and accuracy of the data on which marketing AI capabilities operate, powering deeper customer insight and measurable performance on a global scale. LiveRamp is headquartered in San Francisco, California, with offices worldwide. Learn more at LiveRamp.com.

Windows platform engineering & administration

• Own the Windows client and supporting server platform for corporate IT, including standard images, configuration baselines, and security policies.

• Design, implement, and maintain standardized Windows build images and gold images (e.g., through Intune, Autopilot, Configuration Manager, or similar tools).

• Administer Windows Server instances supporting BT services (e.g., file, print, app, and infrastructure services) including patching, troubleshooting, and performance tuning.

• Ensure Windows endpoints and servers meet LiveRamp’s security standards, including encryption, endpoint protection, and compliance baselines.

Endpoint management (Windows-focused)

• Administer and optimize Microsoft Intune, Workspace ONE, or similar tools for Windows endpoint management:

  • Device enrollment and compliance

  • Configuration profiles and policies

  • Software deployment and updates

• Implement and maintain Windows Update and patch management strategies for clients and servers, balancing security and stability.

• Collaborate with Security to deploy and manage CrowdStrike, Netskope, and other security tools on Windows endpoints and servers.

• Maintain accurate, automated inventory of Windows devices and installed software, supporting license management and lifecycle planning.

Automation & integration

• Identify opportunities to automate Windows lifecycle tasks (onboarding, offboarding, group policy, software deployment, access changes, patching).

• Build and maintain automation using PowerShell, Python, or other scripting languages targeting Windows environments.

• Utilize REST APIs, Graph API, and integration platforms to connect Intune, Azure AD, on-prem AD (if applicable), ITSM, and asset management systems.

• Adopt configuration-as-code and infrastructure-as-code patterns (e.g., Git-based policy definitions, scripted server builds, policy as code).

Identity, directory, and access (Windows ecosystem)

• Work with Azure Active Directory and/or on-prem Active Directory to manage users, groups, devices, and policies.

• Support and optimize Single Sign-On (SSO) and conditional access policies in partnership with Security and Identity teams.

• Troubleshoot authentication and authorization issues impacting Windows users and services.

Incident response, troubleshooting & escalation

• Provide Tier 3–4 support for complex Windows-related incidents (OS, hardware, drivers, group policy, app compatibility, performance, and security).

• Troubleshoot issues across the Windows stack: OS, hardware, endpoint management, VPN, Wi‑Fi, identity, and line-of-business apps.

• Own complex incidents and problems end‑to‑end, driving root cause analysis and sustainable fixes through configuration and automation.

• Document troubleshooting steps, known issues, and runbooks to enable support teams and self‑service.

Optimize & innovate

• Continually assess the Windows user experience and platform health, leveraging monitoring and metrics to prioritize improvements.

• Propose and implement enhancements in areas like Autopilot, app deployment strategies, self-service, device performance, and security posture.

• Evaluate new features in Windows, Intune, Azure AD, and related tools, piloting changes and rolling them out safely at scale.

Educate & enable

• Provide guidance to users and BT teammates on Windows best practices, features, and self‑service tools.

• Develop and deliver training, workshops, and documentation focused on Windows usage, troubleshooting, and self‑help.

• Mentor junior engineers and support staff in Windows systems engineering and scripting.

Your team will

You’ll be part of the Business Technology – Client Services team, a globally distributed group responsible for:

• Delivering an exceptional desktop computer experience for all LiveRampers.

• Partnering with Security, Network Engineering, and other BT teams to keep our environment secure, performant, and reliable.

• Administering and automating key business applications and services used across the company.

• Enabling leaders and teams to move faster by removing technology friction and operational toil wherever it appears.

About you (Required Qualifications)

You possess:

• An insatiable need to help people and feel the satisfaction of delighting your customers, even while your primary focus is on systems engineering and automation.

• Incredible patience and empathy when working with users and teams who may be less technically deep, and the ability to explain Windows and infrastructure concepts clearly.

• At least 5 years of experience in Windows systems engineering, systems administration, or IT operations, with significant hands‑on responsibility for Windows platforms in an enterprise environment.

• Strong experience administering Windows client environments:

  • Standard images and Autopilot/OSD

  • Group Policy (or equivalent modern management policies)

  • Application deployment and support

• Solid experience administering Windows Server, including roles such as file/print, application, and infrastructure services.

• Deep proficiency with Microsoft Intune, Workspace ONE, Configuration Manager, or similar tools for Windows device management.

• Strong PowerShell skills (and optionally Python) for automation of Windows configuration, reporting, and lifecycle tasks.

• Experience deploying and operating security tools on Windows (e.g., CrowdStrike, Netskope, disk encryption, VPN, certificates).

• Experience designing, implementing, and maintaining automations and integrations across Windows, Azure AD, on‑prem AD (if applicable), ITSM, and asset systems.

• Experience with Google Workspace (gSuite) and Microsoft 365 administration.

• A solid understanding of networking concepts (DNS, DHCP, VPN, Wi‑Fi, routing, firewalls) as they relate to Windows clients and servers.

• Experience with monitoring, logging, and alerting for Windows endpoints and servers, and using data to drive reliability and performance improvements.

• Experience with AI tools or modern automation platforms in IT operations is a plus.

• An ISO, ITIL, or similar certification, or a strong desire to obtain them.

Preferred skills

• Experience working in a fast‑paced, high‑growth, or global technology company.

• Experience with hybrid identity models (Azure AD + on‑prem AD) and modern management transitions.

• Prior experience contributing to or leading Windows migration or modernization projects (e.g., Windows 10 to 11, on‑prem to Intune).

• Comfort working across multiple time zones and collaborating with global, cross‑functional teams.

• Experience contributing to or authoring documentation, runbooks, automation playbooks, and user‑facing help content.

• Experience with infrastructure‑as‑code or configuration‑as‑code practices (e.g., Git-backed definitions for policies and scripts).