Mitra Innovation is a global tech provider specializing in digital transformation and cloud solutions, servicing premier client projects alongside developing our own cutting-edge products, including a flagship internal platform that leverages Generative AI and agentic workflows to automatically de-risk and modernize legacy enterprise applications. ROLE

We are looking for a Security Engineer/ Senior Security Engineer to join our Managed Security Services team, supporting a key client engagement in the US. You will play a hands-on role in executing a structured security improvement program aligned with industry frameworks. This is a great chance for an engineer who wants to move beyond reactive security work and contribute to building a mature, well-governed security program from the ground up.

The initial focus will be a structured 9-month client engagement, after which you will continue to contribute to ongoing security work across our client portfolio. JOB SPECIFIC DUTIES & RESPONSIBILITIES

Asset & Device Management — Building and maintaining a comprehensive inventory of endpoints, servers, network devices, and cloud resources. Enrolling and managing corporate devices in Microsoft Intune, defining compliance policies, and operationalizing automated discovery and alerting

Software Governance — Cataloguing all software in use, packaging and deploying applications via Intune, and supporting the rollout of a SaaS governance process including shadow IT detection through Defender for Cloud Apps

Secure Configuration — Defining and deploying security baselines for Windows endpoints and servers aligned with industry benchmarks. Managing phased rollouts, monitoring configuration drift, and incrementally hardening critical workloads across the environment

Data Protection — Supporting data flow mapping exercises across key business processes, documenting systems, access points, and protections, and validating encryption and access controls across sensitive data flows

Account Management — Hands-on configuration and execution across Entra ID and on-premises AD: building account inventories, conducting privileged access reviews, cleaning up dormant accounts, and operationalizing lifecycle processes directly





MFA & Password Security — Deploying and enforcing phishing-resistant MFA for privileged accounts via Conditional Access including FIDO2 keys, Windows Hello for Business, and passwordless Authenticator sign-in, rolling out SSPR with password writeback to on-premises AD, and deploying Azure AD Password Protection across the domain REQUIRED EXPERIENCES AND SKILLS

2–4 years of hands-on experience in including FIDO2 keys, Windows Hello for Business, and passwordless Authenticator sign-in

Strong, hands-on execution experience with Microsoft Intune you have personally built and deployed the following, not just reviewed or governed it:

Device enrolment across Windows, macOS, iOS, and Android

Creating and managing device compliance policies and configuration profiles

Application deployment -packaging Win32 apps, deploying required and available apps, managing the Company Portal

Managing software updates via Windows Update for Business and Intune update rings

Conditional Access integration - — enforcing device compliance as a condition for corporate resource access

Intune reporting, compliance dashboards, and remediation workflows

Creating and managing device compliance policies and configuration profiles

Application deployment — packaging Win32 apps, deploying required and available apps, managing the Company Portal

Managing software updates via Windows Update for Business and Intune update rings

Conditional Access integration — enforcing device compliance as a condition for corporate resource access

Intune reporting, compliance dashboards, and remediation workflows

Strong, hands-on execution experience with Microsoft Entra ID (Azure AD) you have personally configured and managed the following in production:

User and group lifecycle management — creation, modification, deactivation, and deletion

Privileged role assignments and role-based access control (RB

AC)Conditional Access policy design and enforcement — MFA requirements, device compliance, sign-in risk, named locations





Multi-Factor Authentication — deploying and enforcing phishing-resistant MFA methods including FIDO2 security keys, Windows Hello for Business, and Microsoft Authenticator passwordless authentication

Self-Service Password Reset (SSPR) configuration, including password writeback to on-premises Active Directory

Entra ID Password Protection — banned password lists, audit and enforcement modes

Identity Protection — risk-based Conditional Access, leaked credential detection

Privileged Identity Management (PIM) concepts and just-in-time access principles

Application registrations, service principals, and managed identities

Experience with Active Directory administration in hybrid identity environments, including group policy, privileged group management, and Entra Connect Sync

Familiarity with the broader Microsoft security stack — Defender for Endpoint, Defender for Cloud Apps, Defender for Identity, and Microsoft Purview

Familiarity industry security frameworks such as NIST CSF and CIS Critical Security Controls

Strong documentation skills — you will be producing evidence, process guides, and configuration records throughout the engagement

Ability to work independently and manage your own workload across parallel workstreams

Good communication skills — you will be collaborating closely with an onshore lead and interfacing with client IT teams

Familiarity with SOC 2 or similar compliance frameworks

Experience in a Managed Services Provider (MSP) environment

Able to speak to specific policies or configurations you've personally built, not just managed or overseen

REQUIRED CERTIFICATIONS The following certifications are highly regarded for this role. Candidates who hold one or more of these will be looked upon favourably, though they are not a strict requirement:

ISC2 SSCP (Systems Security Certified Practitioner)

Microsoft 365 Certified: Endpoint Administrator Associate (MD-102)

Microsoft Certified: Identity and Access Administrator Associate (SC-300)

Microsoft Certified: Windows Server Hybrid Administrator Associate (AZ-800)

Microsoft Certified: Cybersecurity Architect Expert (SC-100) Kindly note that the working hours overlap with the US timeframe: 1:30 PM to 10:30 PM(IST).

📌 Senior Security Engineer (India)
🏢 Mitra AI
📍 India