About TGH Software Solutions

TGH Software Solutions is an IT consulting and technology services company delivering enterprise technology solutions across integration, data engineering, quality engineering, automation, and digital platforms. We work with customers and partners to solve complex technology challenges through skilled teams, strong delivery practices, and a customerfocused approach.

Role Overview :

We are looking for a senior Contemporary Workplace Engineer, on a contract basis, to harden a customer's Microsoft 365, Intune and Entra ID environment and build the capability of the internal endpoint and identity team to operate it independently. The role combines hands-on configuration with structured knowledge transfer to the internal team.

Key Responsibilities

Assessment & Remediation Planning • Assess the current Intune, Entra ID, Defender, Mimecast and Teams configuration and deliver a prioritized remediation plan within the first 30 days. Identity & Conditional Access (Microsoft Entra ID)

- Design and implement Conditional Access policy, including authentication strength, device compliance, break glass accounts and staged enforcement. Endpoint & Device Management (Intune)

- Standardize device provisioning through Windows Autopilot, enrollment restrictions and compliance and configuration profiles.

- Design and operate Windows update management, including update rings, feature update policy, deployment reporting and conflict resolution.

- Implement web and application control across Defender for Endpoint, Mimecast and Intune, defining which platform owns each control and removing overlapping or conflicting policy.

- Apply device hardening, including security baselines, BitLocker,



Windows LAPS and removal of standing local administrator rights. Email Security (Mimecast)

- Integrate Mimecast with Microsoft 365 and Entra ID, covering email security policy, authentication and coexistence with Defender for Office 365. Microsoft Teams & Teams Phone

- Configure and secure Microsoft Teams, including meeting and messaging policy, external and guest access, and management of Teams Rooms and Teams phone devices through Intune.

Design and automate Teams Phone user provisioning, covering licensing, number assignment, voice routing and calling policy, and resolve synchronization issues between Teams and the NTT calling service.

- Support the AudioCodes session border controller configuration for Direct Routing, including call routing to NTT and telephony handoff to the CRM. Configuration as Code & Change Management

- Establish configuration as code, source control and drift detection for Intune and Entra ID policy.

- Define the change process for endpoint and identity policy, covering pilot deployment, peer review, monitoring and rollback.

Documentation & Knowledge Transfer • Deliver runbooks and configuration documentation for each control area.

- Coach associates through paired delivery,



moving ownership of each control area to the internal team by the end of the engagement, and provide a capability assessment of each team member.

Required Skills & Experience

- 7+ years of experience in enterprise Microsoft endpoint and identity management.

- Demonstrated delivery across Intune, Entra ID Conditional Access, Windows Autopilot, Microsoft Teams administration and Defender for Endpoint in organizations of 1,000 or more users.

- Experience with Teams Phone delivered through Direct Routing, including user and number provisioning automation.

- Experience operating Mimecast alongside Microsoft 365 security tooling.

- Experience managing Windows feature upgrades at enterprise scale.

- Working knowledge of Microsoft365DSC, Graph API and PowerShell automation.

- Track record of formal knowledge transfer to internal teams.

Good-to-Have Skills

- Microsoft certifications such as MD-102 (Endpoint Administrator), SC-300 (Identity and Access Administrator) or SC100 (Cybersecurity Architect).

- Experience configuring AudioCodes session border controllers.

- Experience integrating Teams telephony with CRM or contact center platforms.

- Experience in financial services or other regulated environments, including SEC registered advisers.

- Familiarity with CIS benchmarks and Microsoft security baselines.

Deliverables

- Assessment report and remediation plan.

- Hardened configuration across all control areas, documented and held in source control.

- Endpoint and identity change procedure.

- Runbooks for each control area.

- Team capability assessment and handover plan.

Pay: ₹575,000.00 - ₹1,960,000.00 per year

Work Location: Remote

📌 Senior Modern Workplace Engineer (India)
🏢 TGH Software Solutions Private
📍 India