Uniphore is the Business AI company. Our sovereign, composable and secure AI platform connects enterprise data, fine-tunes AI models and deploys agentic AI across the enterprise. We empower every worker to boost productivity and help businesses grow faster, operate smarter and reduce costs. Trusted by more than 2,000 businesses globally, and recognized on the Deloitte Fast 500, Uniphore delivers on the promise of AI as a transformative force for business.
Job Description:
Role Requirement
Strong understanding of IT infrastructure, network hardware, and enterprise security architecture.
Must have very good working knowledge of the Microsoft 365 / Azure (Entra ID) platform end-to-end, including Microsoft Defender for Cloud Apps and Defender for Endpoint; AWS knowledge is an added advantage.
Good understanding of core networking concepts (VLANs, layer 2/3 routing, access lists, load balancing) and hands-on experience administering enterprise firewalls (rule management, VPN, NAT, segmentation).
Ability to think through problems and design solutions across hybrid, cross-platform environments (Windows and macOS); ability to implement, administer, and troubleshoot end-to-end.
Automate manual processes using AI tools wherever possible, to improve troubleshooting, documentation, and day-to-day infrastructure operations.
Job Requirements
Identity & Hybrid Directory Services
Designing, planning, migrating, and implementing Active Directory in environments with 2,500+ users.
Designing, implementing, and troubleshooting Directory Synchronization and Federation Services (Azure AD Connect / Cloud Sync, ADFS) for Microsoft Entra ID (Azure AD).
Managing Microsoft Entra ID (Azure AD) services including users, groups, device management, Enterprise Applications, App Registrations, and Conditional Access.
Configuring SSO (SAML, OAuth2/OIDC) integrations and API/App Registrations, including service principals, API permission scopes, and certificate/secret-based authentication.
DNS/DHCP and Group Policy design.
Hands-on experience managing DNS records (A, CNAME, MX, TXT, including SPF/DKIM/DMARC) across internal and external DNS zones.
Designing on-premises AD with Hybrid Azure AD Sync.
Active Directory hands-on experience in multi-site / multi-domain / multi-forest environments.
Deep knowledge of Active Directory and Entra ID, including Group Policy, Federation, and Single Sign-On.
Strong experience with AD enterprise certificate services, rights management server, AD Federation Services, and identity manager.
Experience with Active Directory consolidation/migration (Quest migration experience and ADMT a plus) and running AD health checks.
Strong experience with IP Address Management (IPAM) solutions.
Cloud & Endpoint Security (Microsoft Defender Suite)
Hands-on experience with Microsoft Defender for Cloud Apps (CASB) policy creation, OAuth app governance, shadow IT / cloud app discovery.
Hands-on experience with Microsoft Defender for Endpoint, device onboarding, EDR, attack surface reduction, vulnerability management.
Working knowledge of Defender for Identity and/or Microsoft Sentinel is a plus.
Hands-on experience with email security solutions such as Microsoft Defender for Office 365 or similar anti-phishing, anti-spam, safe links/attachments, and mail flow security.
O365 security and compliance administration.
Endpoint Management- Windows & Mac
Hands-on experience with O365, Intune, and MDM for Windows endpoints.
Hands-on experience managing macOS/Apple devices using Kandji, Jamf, or a similar Apple MDM, including Apple Business Manager and Automated Device Enrollment.
Hands-on experience handling servers such as Windows Server 2012, 2016, 2019, and 2022.
Cross-platform patching, security, performance, and backup/recovery best practices across Windows and macOS.
Network & Firewall
Strong experience with core networking (VLANs, layer 2/3 routing, ACLs, load balancing).
Hands-on administration of enterprise firewalls, including rule management,…