For one of Client | IT Services | Multiple Tech roles

For one of our IT Services client based at Hyderabad :

We are hiring for the following roles :

Microsoft EUC Engineer with Intune and Application Packaging and deployment

• Design, implement, and manage

  Microsoft Intune

  and

  SCCM

  solutions for device lifecycle management.
• Lead

  application packaging

  (MSI, App-V, MSIX) and deployment strategies across diverse environments.
• Develop and maintain

  persona-based application mapping

  to ensure tailored application delivery based on user roles and profiles.
• Collaborate with security, compliance, and infrastructure teams to align endpoint strategies with organizational policies.
• Troubleshoot and resolve complex issues related to application deployment, device enrollment, and configuration.
• Create and maintain technical documentation, SOPs, and knowledge base articles.
• Provide technical leadership and mentorship to junior engineers and support staff.
• Stay updated on emerging technologies and recommend improvements to existing systems.

Windows Active Directory Remediation Engineer

• Analyze and remediate security gaps in Active Directory architecture, including:
• Domain and forest trusts
• AD relationships and delegation models
• Group Policy Objects (GPOs)
• Privileged access and role assignments
• Implement best practices for AD hardening and security baselines.
• Collaborate with cybersecurity teams to align remediation efforts with enterprise security policies.
• Conduct AD health checks and security assessments using tools like PingCastle, BloodHound, or Microsoft ATA.
• Document remediation plans, changes, and outcomes.
• Support incident response and forensic investigations related to AD.
• Provide guidance on AD design improvements to prevent future vulnerabilities.
• Automate repetitive remediation tasks using PowerShell or other scripting tools.
• Ensure compliance with regulatory and internal security standards.

Proof Point Consultants

Discovery & Assessment

- Conduct a health check of Exchange Online and Defender for Office.

- Identify mailboxes still hosted in Exchange and categorize users, shared, resources, and archive mailboxes.

- Inventory current mail flow topology including send/receive connectors, smart hosts, and transport rules.

- Review hybrid configuration and Exchange Online connector status.

- Identify dependencies such as third-party appliances, journaling, SMTP relay, scanners.

- Assess journaling, archiving, and backup integrations.

- Evaluate DNS records and TLS certificate usage.

- Validate SPF, DKIM, and DMARC configurations for all domains.

Planning & Design

- Define a cloud-first SMTP routing strategy with Proofpoint as primary ingress/egress and Exchange on-prem as secondary.

- Review and update mail flow diagrams and documentation.

- Plan DNS record changes and connector reconfigurations.

- Recommend optimizations for Defender for Office configuration as a secondary hygiene solution.

1. - Validate licensing and support implications for Exchange SE / Hybrid configurations.