Role Overview

We are looking for a commercially minded, hands-on Senior IT Engineer to take ownership of One Retail Group's Microsoft 365 environment, cybersecurity, global IT estate and employee technical support.

Based in our Bengaluru office, you will support approximately 100 colleagues across the UK, India, China and UAE. We are bringing IT operations in-house and need someone who can independently own and improve our environment as we transition away from an outsourced provider.

This is not a traditional helpdesk role, nor is it a purely strategic infrastructure role. You should be comfortable both managing Intune and security policies and troubleshooting an employee's laptop. We need practical judgement, root-cause investigation, clear communication and responsibility for the outcome.

Key Responsibilities

Microsoft 365, Identity & Security

• Own Microsoft 365 administration across Exchange Online, Teams, SharePoint and OneDrive.
• Administer Entra ID, identities, permissions, groups, MFA and Conditional Access.
• Manage and improve Intune enrolment, configuration, compliance, application deployment and device security.
• Manage Defender, endpoint protection, encryption, patching and security alerts.
• Take operational responsibility for preventing and responding to phishing, compromised accounts, ransomware and data loss, including monitoring, escalation, recovery testing and clear incident procedures.
• Review access, identify vulnerabilities, coordinate incident responses and test backup and recovery arrangements.
• Keep the environment secure, efficient, cost-effective and appropriately documented.

Global Devices & Employee Support

• Manage our Windows and macOS laptop estate from procurement and setup through support, replacement and disposal.
• Provide responsive IT support across international offices, diagnosing hardware, software, application and connectivity problems.
• Own technology onboarding and offboarding, including provisioning, account access and secure equipment returns.
• Maintain accurate device and asset records and consistent configuration standards.
• Work with HR and local office teams to coordinate practical support and equipment delivery.

IT Policies & Governance

• Develop, maintain and implement practical IT policies and procedures covering information security, acceptable use, device management, access controls, data protection and employee onboarding and offboarding.
• Ensure policies are consistently applied across our international offices without creating unnecessary bureaucracy.

Automation & Continuous Improvement

• Automate repetitive IT tasks using PowerShell, Microsoft Graph and appropriate AI-assisted tools, while retaining responsibility for security and quality.
• Identify root causes and permanently reduce recurring tickets and manual work.
• Review Microsoft licences and SaaS subscriptions for unnecessary costs.
• Improve documentation, support processes, employee experience and business continuity.

Bring IT Ownership In-House

• Help transition IT operations from our external provider, reviewing existing configuration, access and documentation.
• Take long-term ownership of Microsoft 365, Intune, device management, security and technical support.
• Work closely with HR, Finance, leadership and other teams on business application access and technical issues.
• Collaborate with our separate software, data engineering and Business Central specialists; this role does not own development of those systems.

What We're Looking For

Essential

• Strong practical experience in IT infrastructure or systems engineering, ideally 5+ years in hands-on roles.
• Proven Microsoft 365, Entra ID, Intune, Defender and endpoint management experience.
• Experience with Conditional Access, MFA, device compliance and secure administration.
• Confident supporting Windows and macOS, including general networking, DNS, Wi-Fi and VPN troubleshooting.
• Track record of independently resolving complex issues and supporting employees.
• Clear written and spoken English, sound technical judgement and a proactive, service-minded approach.
• Comfortable working from our Bengaluru office five days per week, with sufficient working-hours overlap to support our UK-based colleagues.
• Willing to provide occasional out-of-hours support for critical IT incidents, security emergencies or planned maintenance, recognising that we operate across multiple international time zones. This is not a routine 24/7 on-call role; any out-of-hours arrangements will be agreed in advance, with appropriate time off in lieu.

We value evidence of independent ownership and practical problem-solving more than certifications alone.

Highly Desirable

• Intune implementation, Windows Autopilot and Microsoft 365 Business Premium.
• PowerShell, Microsoft Graph, IT automation and AI-assisted workflows.
• Microsoft Defender for Endpoint, security incident response and information protection.
• Supporting multiple countries, managing IT assets and licensing, and transitioning from an outsourced IT provider.
• Relevant Microsoft certifications (such as MD-102, MS-102 or SC-300).

What Success Looks Like

Within six months, you will have taken clear ownership of our Microsoft environment and global support operations. Devices will be securely managed, employees will receive reliable support, onboarding and offboarding will be consistent, and security controls and recovery processes will be tested and documented.

You will have reduced recurring issues, automated useful processes and helped establish a reliable, secure and cost-effective in-house IT function. This is a chance to own and improve a global business's IT environment, not simply operate one part of a large corporate IT department.