Workplace IT Specialist

PropertyGuru Technologies Private Limited; Bengaluru; On-site; INR 1,800,000 - 3,200,000; Full time

Job summary

PropertyGuru Technologies Private Limited is seeking a Workplace IT Specialist to elevate technology delivery across regional offices, transforming ticket‑driven IT support into an automated, engineering‑led workplace.

You will own automation of onboarding/offboarding, zero‑touch device provisioning, and end‑to‑end identity/endpoint management using M365, Entra ID, Intune, Autopilot, and related tooling while upholding security and compliance standards.

Qualifications

• 2–5 years in IT engineering, end‑user computing, modern workplace, or IT infrastructure roles.
• Engineering mindset: automate problems rather than manual fixes.
• Strong PowerShell and Microsoft Graph API skills – production‑quality automation.
• Hands‑on administration of Microsoft EntraID and Azure – identity lifecycle, CA, RBAC.
• Deep Microsoft365 administration experience (Exchange Online, Teams, SharePoint, OneDrive, Intune).
• Modern endpoint management: Intune, Autopilot, compliance policies across Windows/macOS.
• Experience with Active Directory and Group Policy, including hybrid identity environments.
• Solid networking fundamentals (TCP/IP, DNS, DHCP, VPN, Wi‑Fi).
• Excellent communication and customer empathy; explain technical decisions to non‑tech stakeholders.

Responsibilities

• Build one‑touch onboarding/offboarding workflows.
• Engineer zero‑touch device provisioning with Autopilot and Intune.
• Automate routine IT operations using PowerShell, Graph API, Power Automate, and REST APIs.
• Apply software engineering practices: version control, code review, testing; configuration‑as‑code where practical.
• Build self‑service and shift‑left capabilities to deflect tickets.
• Identify and eliminate toil through automation.
• Administer and improve Microsoft 365 services: Exchange Online, Teams, SharePoint, OneDrive, Intune, Entra ID.
• Own identity lifecycle automation in Entra ID: dynamic groups, entitlement management, SCIM provisioning, SSO.
• Design and maintain Conditional Access, MFA, and identity security policies.
• Administer Azure resources supporting workplace services (Automation Accounts, Logic Apps, Functions).
• Manage Windows and macOS fleet with Intune/MDM; patch management and vulnerability remediation.
• Drive device lifecycle management and endpoint monitoring dashboards.
• Provide Level 2/3 escalation support for issues across Windows, macOS, M365, networking, meeting room tech.
• Support collaboration and AV platforms; assist with VPN, DNS/DHCP, firewall.
• Maintain endpoint and identity compliance aligned with ISO27001; automate evidence collection.
• Document as an engineer: runbooks, architecture diagrams, SOPs; contribute to knowledge base.

Skills

PowerShell

Microsoft Graph API

REST APIs

Power Automate

Git

Intune

Autopilot

Entra ID

Azure

M365 administration

RBAC

Zero Trust

SSO

Python

Tools

Git

CI/CD pipelines

Automation tooling

Job description

About the Role

Workplace IT Specialist – transforming technology delivery across PropertyGuru’s regional offices from ticket‑driven IT support to a modern, automated, engineering‑led workplace.

What You Will Do

• Automation & Workplace Engineering (primary focus)
  • Build one‑touch employee lifecycle automation: onboarding and offboarding workflows (HR trigger → identity → licensing → groups → device → apps → access revocation) so new joiners are productive on day one and leavers are cleanly deprovisioned.
  • Engineer zero‑touch device provisioning with Windows Autopilot and Intune (and macOS equivalents), replacing manual imaging and setup.
  • Automate routine IT operations using PowerShell, Microsoft Graph API, Power Automate, and REST APIs – license management, security group management, compliance reporting, fleet health monitoring, and access reviews.
  • Apply software engineering practices: version control in Git, code review, testing, and repeatable/idempotent scripts; move configuration toward configuration‑as‑code where practical.
  • Build self‑service and shift‑left capabilities (app catalogs, automated access requests, chat‑based helpers) that deflect tickets and reduce dependence on manual support.
  • Identify and eliminate toil: continuously find manual, repetitive processes and engineer them away, measuring the hours saved.
• Microsoft 365 & Identity Engineering
  • Administer and improve Microsoft 365 services: Exchange Online, Teams, SharePoint Online, OneDrive, Intune, and Entra ID.
  • Own identity lifecycle automation in Entra ID: dynamic groups, entitlement management, access packages, SCIM provisioning, SSO/enterprise application integrations.
  • Design and maintain Conditional Access, MFA, and identity security policies aligned with Zero Trust and least‑privilege principles.
  • Administer Azure resources supporting workplace services (e.g., Automation Accounts, Logic Apps, Azure Functions) used for IT automation.
• Endpoint & Device Management
  • Manage the Windows and macOS fleet with Microsoft Intune / MDM: security baselines, compliance policies, application packaging and deployment.
  • Run patch management and vulnerability remediation programmatically (Windows Update for Business / Autopatch, Defender recommendations).
  • Drive Windows 11 upgrades, hardware refresh, and device lifecycle management with automated, data‑driven processes.
  • Build endpoint monitoring and fleet health dashboards to shift IT from reactive tickets to proactive remediation.
• Advanced Support & Operations
  • Provide Level 2/3 escalation support for complex issues across Windows, macOS, Microsoft 365, networking, meeting room technology, and enterprise applications.
  • Support regional offices onsite and remotely; participate in on‑call and major incident response when required.
  • Meet SLAs while driving down ticket volume through root‑cause elimination and automation.
  • Support collaboration and AV platforms: Microsoft Teams Rooms, Zoom Rooms, Logitech Rally; assist with networking fundamentals (VPN, Wi‑Fi, switching, DNS/DHCP, firewall).
• Security & Compliance
  • Maintain endpoint and identity compliance aligned with ISO27001; support audits and security reviews with automated evidence collection and reporting.
  • Implement least‑privilege access (RBAC, PIM) and endpoint security controls; act on Microsoft Defender and Secure Score recommendations.
• Documentation, Projects & Mentoring
  • Document as an engineer: runbooks, architecture diagrams, SOPs, and knowledge base articles kept alongside code in Git.
  • Deliver regional IT projects: office builds and relocations, M365 migrations, endpoint modernization, meeting room deployments, and automation initiatives.
  • Mentor junior engineers in scripting, automation, and modern workplace practices; raise the engineering bar across the team.

What You Bring – Required

• 2–5 years in IT engineering, end‑user computing, modern workplace, or IT infrastructure roles, with strong hands‑on depth.
• An engineering mindset: you default to automating problems away rather than resolving them manually, and can show automation you have personally built and shipped.
• Strong PowerShell and Microsoft Graph API skills – able to build production‑quality automation, not just run one‑off scripts.
• Hands‑on administration of Microsoft EntraID and Azure – identity lifecycle, Conditional Access, enterprise apps/SSO, RBAC, and Azure services used for automation.
• Deep Microsoft365 administration experience (Exchange Online, Teams, SharePoint, OneDrive, Intune) in an enterprise environment.
• Modern endpoint management expertise: Intune, Autopilot, compliance policies, application packaging across Windows10/11 and macOS.
• Experience with Active Directory and Group Policy, including hybrid identity environments.
• Solid networking fundamentals (TCP/IP, DNS, DHCP, VPN, Wi‑Fi, switching).
• Excellent communication and customer empathy; able to explain technical decisions to non‑technical stakeholders.

What You Bring – Strongly Preferred

• Track record of transforming traditional ITSM into modern workplace engineering – e.g., you have implemented one‑touch onboarding/offboarding, zero‑touch provisioning, or replaced manual runbooks with automated workflows.
• Git and modern development workflow experience: version‑controlled scripts and configurations, pull requests / code review, and ideally CI/CD pipelines (GitHub Actions, Azure DevOps) for IT automation.
• Configuration‑as‑code / infrastructure‑as‑code exposure (e.g., Terraform or Microsoft365DSC for Intune and EntraID configuration).
• Power Platform experience (PowerAutomate, PowerApps) with an understanding of governance and when low‑code vs. pro‑code is appropriate.
• Python or another general‑purpose scripting language; comfort working with REST APIs, JSON, and webhooks.
• Experience using AI tools (e.g., Copilot, Claude) to accelerate scripting, documentation, and support workflows – and helping roll such tooling out to employees.
• Experience with virtualization platforms and cloud services beyond M365.
• Certifications (advantageous, not required) – Microsoft Certified: Endpoint Administrator Associate (MD‑102), Microsoft365 Administrator Expert (MS‑102), or Microsoft Applied Skills (Intune, EntraID, Automation). ITIL Foundation, CompTIA Network+/Security+, Cisco CCNA, or Microsoft Power Platform Fundamentals.

What Success Looks Like

• Within 12 months, employee onboarding and offboarding run as one‑touch automated workflows with measurable reductions in provisioning time and manual errors.
• Device provisioning is zero‑touch; a new laptop reaches a productive, compliant state without engineer hands‑on time.
• Recurring incident categories are engineered away, reducing ticket volume while SLA performance and employee satisfaction improve.
• IT automation lives in version‑controlled repositories with documentation, and junior engineers are contributing to it.
• Endpoint compliance, patch currency, and Secure Score measurably improve, with automated reporting supporting ISO27001 audits.
• Trusted technical advisor for modern workplace decisions and a multiplier for the wider team.

Personal Attributes

• Builder’s mentality with strong ownership – you see a manual process and itch to automate it.
• Strong analytical and troubleshooting skills; rigorous about root cause.
• Continuous learner with genuine curiosity for new technology, including AI‑assisted ways of working.
• Self‑motivated, well organized, and able to prioritize in a fast‑paced regional environment.
• Collaborative team player who lifts others through mentoring and knowledge sharing.

Our Commitment to You

• Hybrid flexible working that focuses on outcomes over hours.
• Holistic rewards package covering your financial, physical & mental health.
• Multi‑directional career development across all levels.
• Inclusive benefits like equal paternity leave and support for work‑life balance.
• Top Employers Certified company that puts people at the heart of everything we do.