Mitra Innovation is a global tech provider specializing in digital transformation and cloud solutions, servicing premier client projects alongside developing our own cutting-edge products, including a flagship internal platform that leverages Generative AI and agentic workflows to automatically de-risk and modernize legacy enterprise applications.

ROLE

We are looking for a Security Engineer/ Senior Security Engineer to join our Managed Security Services team, supporting a key client engagement in the US. You will play a hands-on role in executing a structured security improvement program aligned with industry frameworks. This is a great opportunity for an engineer who wants to move beyond reactive security work and contribute to building a mature, well-governed security program from the ground up. The initial focus will be a structured 9-month client engagement, after which you will continue to contribute to ongoing security work across our client portfolio.

JOB SPECIFIC DUTIES & RESPONSIBILITIES

- Asset & Device Management — Building and maintaining a comprehensive inventory of endpoints, servers, network devices, and cloud resources. Enrolling and managing corporate devices in Microsoft Intune, defining compliance policies, and operationalizing automated discovery and alerting
- Software Governance — Cataloguing all software in use, packaging and deploying applications via Intune, and supporting the rollout of a SaaS governance process including shadow IT detection through Defender for Cloud Apps
- Secure Configuration — Defining and deploying security baselines for Windows endpoints and servers aligned with industry benchmarks. Managing phased rollouts, monitoring configuration drift, and incrementally hardening critical workloads across the environment
- Data Protection — Supporting data flow mapping exercises across key business processes, documenting systems, access points, and protections, and validating encryption and access controls across sensitive data flows
- Account Management — Hands-on configuration and execution across Entra ID and on-premises AD: building account inventories, conducting privileged access reviews, cleaning up dormant accounts, and operationalizing lifecycle processes directly




- MFA & Password Security — Deploying and enforcing phishing-resistant MFA for privileged accounts via Conditional Access including FIDO2 keys, Windows Hello for Business, and passwordless Authenticator sign-in, rolling out SSPR with password writeback to on-premises AD, and deploying Azure AD Password Protection across the domain

REQUIRED EXPERIENCES AND SKILLS

- 2–4 years of hands-on experience in including FIDO2 keys, Windows Hello for Business, and passwordless Authenticator sign-in
- Strong, hands-on execution experience with Microsoft Intune you have personally built and deployed the following, not just reviewed or governed it:
- Device enrolment across Windows, macOS, iOS, and Android
- Creating and managing device compliance policies and configuration profiles
- Application deployment -packaging Win32 apps, deploying required and available apps, managing the Company Portal
- Managing software updates via Windows Update for Business and Intune update rings
- Conditional Access integration - — enforcing device compliance as a condition for corporate resource access
- Intune reporting, compliance dashboards, and remediation workflows
- Creating and managing device compliance policies and configuration profiles
- Application deployment — packaging Win32 apps, deploying required and available apps, managing the Company Portal
- Managing software updates via Windows Update for Business and Intune update rings
- Conditional Access integration — enforcing device compliance as a condition for corporate resource access
- Intune reporting, compliance dashboards, and remediation workflows
- Strong, hands-on execution experience with Microsoft Entra ID (Azure AD) you have personally configured and managed the following in production:
- User and group lifecycle management — creation, modification, deactivation, and deletion
- Privileged role assignments and role-based access control (RB
- AC)Conditional Access policy design and enforcement — MFA requirements, device compliance, sign-in risk, named locations




- Multi-Factor Authentication — deploying and enforcing phishing-resistant MFA methods including FIDO2 security keys, Windows Hello for Business, and Microsoft Authenticator passwordless authentication
- Self-Service Password Reset (SSPR) configuration, including password writeback to on-premises Active Directory
- Entra ID Password Protection — banned password lists, audit and enforcement modes
- Identity Protection — risk-based Conditional Access, leaked credential detection
- Privileged Identity Management (PIM) concepts and just-in-time access principles
- Application registrations, service principals, and managed identities
- Experience with Active Directory administration in hybrid identity environments, including group policy, privileged group management, and Entra Connect Sync
- Familiarity with the broader Microsoft security stack — Defender for Endpoint, Defender for Cloud Apps, Defender for Identity, and Microsoft Purview
- Familiarity industry security frameworks such as NIST CSF and CIS Critical Security Controls
- Robust documentation skills — you will be producing evidence, process guides, and configuration records throughout the engagement
- Ability to work independently and manage your own workload across parallel workstreams
- Good communication skills — you will be collaborating closely with an onshore lead and interfacing with client IT teams
- Familiarity with SOC 2 or similar compliance frameworks
- Experience in a Managed Services Provider (MSP) environment
- Able to speak to specific policies or configurations you've personally built, not just managed or overseen

REQUIRED CERTIFICATIONS

- The following certifications are highly regarded for this role. Candidates who hold one or more of these will be looked upon favourably, though they are not a strict requirement:
- ISC2 SSCP (Systems Security Certified Practitioner)
- Microsoft 365 Certified: Endpoint Administrator Associate (MD-102)
- Microsoft Certified: Identity and Access Administrator Associate (SC-300)
- Microsoft Certified: Windows Server Hybrid Administrator Associate (AZ-800)
- Microsoft Certified: Cybersecurity Architect Expert(SC-100)

Kindly note that the working hours overlap with the US timeframe: 1:30 PM to 10:30 PM(IST).

📌 Senior Security Engineer (India)
🏢 Mitra AI
📍 India