Senior IT Infrastructure Lead

Uniphore is the Business AI company. Our sovereign, composable and secure AI platform connects enterprise data, fine-tunes AI models and deploys agentic AI across the enterprise. We empower every worker to boost productivity and help businesses grow faster, operate smarter and reduce costs. Trusted by more than 2,000 businesses globally, and recognized on the Deloitte Fast 500, Uniphore delivers on the promise of AI as a transformative force for business. Job Description:  Role Requirement Strong understanding of IT infrastructure, network hardware, and enterprise security architecture. Must have very good working knowledge of the Microsoft 365 / Azure (Entra ID) platform end-to-end, including Microsoft Defender for Cloud Apps and Defender for Endpoint; AWS knowledge is an added advantage. Good understanding of core networking concepts (VLANs, layer 2/3 routing, access lists, load balancing) and hands-on experience administering enterprise firewalls (rule management, VPN, NAT, segmentation). Ability to think through problems and design solutions across hybrid, cross-platform environments (Windows and macOS); ability to implement, administer, and troubleshoot end-to-end. Automate manual processes using AI tools wherever possible, to improve troubleshooting, documentation, and day-to-day infrastructure operations. Job Requirements Identity & Hybrid Directory Services Designing, planning, migrating, and implementing Active Directory in environments with 2,500+ users. Designing, implementing, and troubleshooting Directory Synchronization and Federation Services (Azure AD Connect / Cloud Sync, ADFS) for Microsoft Entra ID (Azure AD). Managing Microsoft Entra ID (Azure AD) services including users, groups, device management, Enterprise Applications, App Registrations, and Conditional Access. Configuring SSO (SAML, OAuth2/OIDC) integrations and API/App Registrations, including service principals, API permission scopes, and certificate/secret-based authentication. DNS/DHCP and Group Policy design. Hands-on experience managing DNS records (A, CNAME, MX, TXT, including SPF/DKIM/DMARC) across internal and external DNS zones. Designing on-premises AD with Hybrid Azure AD Sync. Active Directory hands-on experience in multi-site / multi-domain / multi-forest environments. Deep knowledge of Active Directory and Entra ID, including Group Policy, Federation, and Single Sign-On. Strong experience with AD enterprise certificate services, rights management server, AD Federation Services, and identity manager. Experience with Active Directory consolidation/migration (Quest migration experience and ADMT a plus) and running AD health checks. Strong experience with IP Address Management (IPAM) solutions. Cloud & Endpoint Security (Microsoft Defender Suite) Hands-on experience with Microsoft Defender for Cloud Apps (CASB) policy creation, OAuth app governance, shadow IT / cloud app discovery.