LogixHealth
Website:
logixhealth.com
Job details:
Job Title: IT Lead -IT Engineering
Location: Bangalore/ Coimbatore
Immediate joiners or notice period of less than 30 days are needed
This Role:
The IT Lead, IT Engineering leads the engineering of LogixHealth's Microsoft cloud and workplace platforms: Microsoft Entra ID, Microsoft Intune, Microsoft Azure including Azure Virtual Desktop, Microsoft Purview data protection, ITSM tooling and automation. The role owns everything beyond day-to-day operations in a healthcare technology environment that handles Protected Health Information (PHI).
This is a strategic and technical leadership role. The Lead sets the standards and roadmap for these platforms, is the technical authority on design decisions and major incidents, stays hands-on for the most complex work, and leads and mentors the IT engineers who deliver the rest. The Lead turns business and security requirements into a practical platform plan with costs, risks and timelines for the IT Infrastructure Leadership, and serves all LogixHealth locations.
Key Responsibilities:
Strategy, Standards and Roadmap
- Own the architecture, design standards and 12 to 24 month roadmap for identity, endpoint management, data protection, cloud and virtual desktop and IT tooling; translate business, security and compliance requirements into options and investment cases with cost, risk and timeline.
- Provide input to budgeting, Azure forecasts, Microsoft licensing and tooling decisions; lead projects end to end (requirements, design, pilot, phased rollout, handover) and act as technical approver in design and change reviews.
Platform Ownership (Entra ID, Intune, Purview, Azure, AVD)
- Own Entra ID standards: Conditional Access framework, MFA and authentication strategy, Privileged Identity Management, access reviews, application integration and hybrid identity (Entra Connect).
- Own endpoint and data protection standards: Autopilot, Autopatch, configuration and compliance policies, Defender for Endpoint, application deployment, Purview DLP and encryption, for Windows and macOS.
- Own Azure Virtual Desktop design and operation (host pools, image strategy, FSLogix, autoscaling, capacity, cost and monitoring) and the supporting Azure resources.
Security Hardening, Patch and Vulnerability Management
- Own the hardening standard (Microsoft or CIS baselines, Defender for Endpoint and ASR rules, Credential Guard, firewall, device control, encryption, Windows LAPS) and the patch programme: policy and SLAs by severity, monthly cycle, third-party patching, maintenance windows, exception governance and zero-day response.
- Own the vulnerability management programme: intake from Defender Vulnerability Management or scanners, prioritisation, remediation SLAs, exception and risk-acceptance register with Security, verified closure and monthly posture reporting with owners and dates for gaps.
ITSM Tooling and Automation
- Own the engineering of IT tooling, including ManageEngine ServiceDesk Plus design and its integrations with Intune, Entra ID and Microsoft 365, plus monitoring, reporting and self-service automation.
- Set automation and documentation standards for the team (PowerShell, Microsoft Graph, Azure DevOps or Git) and introduce Infrastructure as Code where it adds value.
Incident, Compliance and Team Leadership
- Act as technical lead on major incidents affecting these platforms and on the technical response to security incidents with Information Security; manage Microsoft and vendor escalations; own ISO 27001, SOC 2 and HIPAA evidence for the platform controls.
- Lead, mentor and develop the IT engineering team: allocate work, review designs, provide escalation support and build capability across the platforms.
Qualifications:
The following requirements are representative of the knowledge, skills, and/or ability required to perform this job successfully. Reasonable accommodation may be made to enable individuals with disabilities to perform the duties.
Required (Mandatory):
- B.E./B.Tech in Computer Science, Information Technology, Electronics or a related engineering discipline.
- 9 to 12 years in IT infrastructure or cloud engineering, including 2 to 3 years as technical lead, with at least 4 years hands-on on Microsoft 365 and Azure in a design and build (engineering) capacity rather than support-only roles.
- Strong hands-on Microsoft Entra ID: Conditional Access design, MFA and authentication methods, PIM, access reviews, enterprise application SSO and hybrid identity.
- Strong hands-on Microsoft Intune: Autopilot, compliance and configuration policies, Autopatch or update rings, Defender for Endpoint, macOS management.
- Strong hands-on Azure Virtual Desktop: architecture, host pools, image lifecycle, FSLogix, autoscaling, security and monitoring, with working knowledge of the Azure platform (networking, storage, monitoring, RBAC, cost).
- Proven ownership of patch and vulnerability management for an endpoint or VDI estate: hardening standards, Defender Vulnerability Management or Tenable, Rapid7 or Qualys, SLA-based remediation, exception governance and reporting.
- PowerShell and Microsoft Graph; proven ability to define a roadmap, lead major incidents, run design reviews and explain architecture, cost and risk to senior management.
- Work from office; shifts and on-call as required for a 24×7 healthcare operation; travel between Coimbatore and Bangalore when needed.
Preferred (Good to Have):
- Infrastructure as Code: owning a Terraform (azurerm, azuread) or Bicep practice with module standards, remote state, Git pull-request workflow, pipeline deployment and drift detection, including identity objects managed as code.
- Deeper Azure platform design (vNets, NSGs, private endpoints, Azure Files, Compute Gallery, Log Analytics) and Azure DevOps or GitHub CI/CD; Windows 365, Nerdio, Citrix or VMware Horizon to AVD migration.
- Microsoft Purview DLP and Defender XDR depth; ITSM tool design or integration (ManageEngine ServiceDesk Plus, ServiceNow or similar); experience moving from AD-dependent estates to cloud-native Entra ID and Intune; healthcare, HIPAA or other regulated environment.
Preferred Certifications (Good to Have):
Microsoft AZ-104 or AZ-305, MD-102, SC-300, AZ-140; ITIL Foundation; HashiCorp Terraform Associate.
Click on Apply to know more.
