Job Title: IT Lead -IT Engineering

Location: Bangalore/ Coimbatore

Immediate joiners or notice period of less than 30 days are needed

This Role:

The IT Lead, IT Engineering leads the engineering of LogixHealth's Microsoft cloud and workplace platforms: Microsoft Entra ID, Microsoft Intune, Microsoft Azure including Azure Virtual Desktop, Microsoft Purview data protection, ITSM tooling and automation. The role owns everything beyond day-to-day operations in a healthcare technology environment that handles Protected Health Information (PHI).

This is a strategic and technical leadership role. The Lead sets the standards and roadmap for these platforms, is the technical authority on design decisions and major incidents, stays hands-on for the most complex work, and leads and mentors the IT engineers who deliver the rest. The Lead turns business and security requirements into a practical platform plan with costs, risks and timelines for the IT Infrastructure Leadership, and serves all LogixHealth locations.

Key Responsibilities:

Strategy, Standards and Roadmap

- Own the architecture, design standards and 12 to 24 month roadmap for identity, endpoint management, data protection, cloud and virtual desktop and IT tooling; translate business, security and compliance requirements into options and investment cases with cost, risk and timeline.
- Provide input to budgeting, Azure forecasts, Microsoft licensing and tooling decisions; lead projects end to end (requirements, design, pilot, phased rollout, handover) and act as technical approver in design and change reviews.

Platform Ownership (Entra ID, Intune, Purview, Azure, AVD)

- Own Entra ID standards: Conditional Access framework, MFA and authentication strategy, Privileged Identity Management, access reviews, application integration and hybrid identity (Entra Connect).
- Own endpoint and data protection standards: Autopilot, Autopatch, configuration and compliance policies, Defender for Endpoint, application deployment, Purview DLP and encryption, for Windows and macOS.
- Own Azure Virtual Desktop design and operation (host pools, image strategy, FSLogix, autoscaling, capacity, cost and monitoring) and the supporting Azure resources.

Security Hardening,



Patch and Vulnerability Management

- Own the hardening standard (Microsoft or CIS baselines, Defender for Endpoint and ASR rules, Credential Guard, firewall, device control, encryption, Windows LAPS) and the patch programme: policy and SLAs by severity, monthly cycle, third-party patching, maintenance windows, exception governance and zero-day response.
- Own the vulnerability management programme: intake from Defender Vulnerability Management or scanners, prioritisation, remediation SLAs, exception and risk-acceptance register with Security, verified closure and monthly posture reporting with owners and dates for gaps.

ITSM Tooling and Automation

- Own the engineering of IT tooling, including ManageEngine ServiceDesk Plus design and its integrations with Intune, Entra ID and Microsoft 365, plus monitoring, reporting and self-service automation.
- Set automation and documentation standards for the team (PowerShell, Microsoft Graph, Azure DevOps or Git) and introduce Infrastructure as Code where it adds value.

Incident, Compliance and Team Leadership

- Act as technical lead on major incidents affecting these platforms and on the technical response to security incidents with Information Security; manage Microsoft and vendor escalations; own ISO 27001, SOC 2 and HIPAA evidence for the platform controls.
- Lead, mentor and develop the IT engineering team: allocate work, review designs, provide escalation support and build capability across the platforms.

Qualifications: The following requirements are representative of the knowledge, skills, and/or ability required to perform this job successfully. Reasonable accommodation may be made to enable individuals with disabilities to perform the duties.

Required (Mandatory):

- B.E./B.Tech in Computer Science, Information Technology, Electronics or a related engineering discipline.




- 9 to 12 years in IT infrastructure or cloud engineering, including 2 to 3 years as technical lead, with at least 4 years hands-on on Microsoft 365 and Azure in a design and build (engineering) capacity rather than support-only roles.
- Robust hands-on Microsoft Entra ID: Conditional Access design, MFA and authentication methods, PIM, access reviews, enterprise application SSO and hybrid identity.
- Strong hands-on Microsoft Intune: Autopilot, compliance and configuration policies, Autopatch or update rings, Defender for Endpoint, macOS management.
- Strong hands-on Azure Virtual Desktop: architecture, host pools, image lifecycle, FSLogix, autoscaling, security and monitoring, with working knowledge of the Azure platform (networking, storage, monitoring, RBAC, cost).
- Proven ownership of patch and vulnerability management for an endpoint or VDI estate: hardening standards, Defender Vulnerability Management or Tenable, Rapid7 or Qualys, SLA-based remediation, exception governance and reporting.
- PowerShell and Microsoft Graph; proven ability to define a roadmap, lead major incidents, run design reviews and explain architecture, cost and risk to senior management.
- Work from office; shifts and on-call as required for a 24×7 healthcare operation; travel between Coimbatore and Bangalore when needed.

Preferred (Good to Have):

- Infrastructure as Code: owning a Terraform (azurerm, azuread) or Bicep practice with module standards, remote state, Git pull-request workflow, pipeline deployment and drift detection, including identity objects managed as code.
- Deeper Azure platform design (vNets, NSGs, private endpoints, Azure Files, Compute Gallery, Log Analytics) and Azure DevOps or GitHub CI/CD; Windows 365, Nerdio, Citrix or VMware Horizon to AVD migration.
- Microsoft Purview DLP and Defender XDR depth; ITSM tool design or integration (ManageEngine ServiceDesk Plus, ServiceNow or similar); experience moving from AD-dependent estates to cloud-native Entra ID and Intune; healthcare, HIPAA or other regulated environment.

Preferred Certifications (Good to Have): Microsoft AZ-104 or AZ-305, MD-102, SC-300, AZ-140; ITIL Foundation; HashiCorp Terraform Associate.

📌 IT Lead -IT Engineering (Coimbatore)
🏢 LogixHealth
📍 Coimbatore