Uniphore is the Business AI company. Our sovereign, composable and secure AI platform connects enterprise data, fine-tunes AI models and deploys agentic AI across the enterprise. We empower every worker to boost productivity and help businesses grow faster, operate smarter and reduce costs. Trusted by more than 2,000 businesses globally, and recognized on the Deloitte Fast 500, Uniphore delivers on the promise of AI as a transformative force for business.
Job Description:
Role Requirement
- Strong understanding of IT infrastructure, network hardware, and enterprise security architecture.
- Must have very good working knowledge of the Microsoft 365 / Azure (Entra ID) platform end-to-end, including Microsoft Defender for Cloud Apps and Defender for Endpoint; AWS knowledge is an added advantage.
- Good understanding of core networking concepts (VLANs, layer 2/3 routing, access lists, load balancing) and hands-on experience administering enterprise firewalls (rule management, VPN, NAT, segmentation).
- Ability to think through problems and design solutions across hybrid, cross-platform environments (Windows and macOS); ability to implement, administer, and troubleshoot end-to-end.
- Automate manual processes using AI tools wherever possible, to improve troubleshooting, documentation, and day-to-day infrastructure operations.
Job Requirements
Identity & Hybrid Directory Services
- Designing, planning, migrating, and implementing Active Directory in environments with 2,500+ users.
- Designing, implementing, and troubleshooting Directory Synchronization and Federation Services (Azure AD Connect / Cloud Sync, ADFS) for Microsoft Entra ID (Azure AD).
- Managing Microsoft Entra ID (Azure AD) services including users, groups, device management, Enterprise Applications, App Registrations, and Conditional Access.
- Configuring SSO (SAML, OAuth2/OIDC) integrations and API/App Registrations, including service principals, API permission scopes, and certificate/secret-based authentication.
- DNS/DHCP and Group Policy design.
- Hands-on experience managing DNS records (A, CNAME, MX, TXT, including SPF/DKIM/DMARC) across internal and external DNS zones.
- Designing on-premises AD with Hybrid Azure AD Sync.
- Active Directory hands-on experience in multi-site / multi-domain / multi-forest environments.
- Deep knowledge of Active Directory and Entra ID, including Group Policy, Federation, and Single Sign-On.
- Strong experience with AD enterprise certificate services, rights management server, AD Federation Services, and identity manager.
- Experience with Active Directory consolidation/migration (Quest migration experience and ADMT a plus) and running AD health checks.
- Strong experience with IP Address Management (IPAM) solutions.
Cloud & Endpoint Security (Microsoft Defender Suite)
- Hands-on experience with Microsoft Defender for Cloud Apps (CASB) policy creation, OAuth app governance, shadow IT / cloud app discovery.
- Hands-on experience with Microsoft Defender for Endpoint, device onboarding, EDR, attack surface reduction, vulnerability management.
- Working knowledge of Defender for Identity and/or Microsoft Sentinel is a plus.
- Hands-on experience with email security solutions such as Microsoft Defender for Office 365 or similar anti-phishing, anti-spam, safe links/attachments, and mail flow security.
- O365 security and compliance administration.
Endpoint Management- Windows & Mac
- Hands-on experience with O365, Intune, and MDM for Windows endpoints.
- Hands-on experience managing macOS/Apple devices using Kandji, Jamf, or a similar Apple MDM, including Apple Business Manager and Automated Device Enrollment.
- Hands-on experience handling servers such as Windows Server 2012, 2016, 2019, and 2022.
- Cross-platform patching, security, performance, and backup/recovery best practices across Windows and macOS.
Network & Firewall
- Strong experience with core networking (VLANs, layer 2/3 routing, ACLs, load balancing).
- Hands-on administration of enterprise firewalls, including rule management, site-to-site and remote-access VPN, NAT, and network segmentation.
- Working knowledge of SD-WAN technologies and ISP/circuit concepts (MPLS, broadband, leased lines, last-mile connectivity, failover and redundancy).
- Working knowledge of Zero Trust Network Access (ZTNA) solutions such as FortiClient EMS or Zscaler, or similar.
- Working knowledge of NaaS (Network as a Service), enterprise WiFi/Access Point management, and RADIUS-based authentication (802.1X).
Collaboration & Meeting Room Technology
- Hands-on experience managing meeting room/conferencing platforms such as Cisco (Webex Room devices), Microsoft Teams Rooms, and Zoom Rooms.
- Configuring and managing collaboration hardware from Logitech and Cisco (room cameras, speakers, controllers) across meeting spaces.
- Willing to partner with internal teams (facilities, events, business stakeholders) to plan and support large town halls and company-wide gatherings, including AV setup and live event support.
Cloud Infrastructure, Virtualization & VDI
- Proven experience with Virtualization, Storage, Compute, Cloud (Azure), Network, Backups, and Automation/Scripting (PowerShell).
- Hands-on experience with backup and disaster recovery solutions such as Veeam or similar, covering Microsoft 365, virtual machines/servers, and cloud workloads.
- Experience creating and maintaining documentation for the Azure VDI environment, including architecture diagrams, configuration guides, and standard operating procedures.
- Managing and maintaining the Azure VDI environment, including monitoring, troubleshooting, performance optimization, and security.
- Staying current with industry trends and best practices in VDI and cloud computing, and applying them to improve the environment.
Technical Leadership & Escalation
- Own end-to-end technical direction and standards across identity, cloud, endpoint, and network/security domains — not execution within a single domain only.
- Define and maintain standards for Conditional Access, CASB policy, EDR/MDM enrollment, and firewall change management.
- Evaluate and recommend tools and vendors (e.g., MDM platform selection, CASB/EDR tooling, firewall vendor).
- Act as the technical escalation point for complex, cross-domain incidents beyond L2/L3 support; mentor and guide L1–L3 engineers.
- Work closely with other IT and security teams to ensure identity, endpoint, and network systems are integrated with other systems and applications.
- Partner with security, risk, and compliance teams (e.g., ISO 27001/SOC 2, as applicable) on identity and endpoint controls.
- Ready to collaborate with teams across different regions, understanding their business needs and driving them through to a solution.
- Present technical recommendations, risk assessments, and plans to IT leadership and other stakeholders.
- Own disaster recovery / business continuity planning for identity, directory, and endpoint management platforms.
- Knowledge of AWS is an added advantage.
Certification (any of the following preferred):
- Microsoft SC-300 (Identity and Access Administrator) and/or SC-200 (Security Operations Analyst) and/or AZ-500 (Azure Security Engineer)
- MCSE: Server Infrastructure, or MCM/MCA in Directory Services, or equivalent hands-on experience
- Firewall/network security certification (e.g., PCNSE, Fortinet NSE, or CCNP Security) is a plus
Location preference:
Uniphore is an equal opportunity employer committed to diversity in the workplace. We evaluate qualified applicants without regard to race, color, religion, sex, sexual orientation, disability, veteran status, and other protected characteristics.
For more information on how Uniphore uses AI to unify—and humanize—every enterprise experience, please visit www.uniphore.com.
Skills Required
- Strong understanding of IT infrastructure, network hardware, and enterprise security architecture
- Advanced working knowledge of Microsoft 365 and Microsoft Entra ID, including Defender for Cloud Apps and Defender for Endpoint
- Enterprise networking and firewall administration experience, including VLANs, routing, ACLs, load balancing, VPN, NAT, and segmentation
- Experience designing, implementing, migrating, and troubleshooting Active Directory environments supporting 2,500 or more users
- Experience with Azure AD Connect or Cloud Sync, AD FS, Microsoft Entra ID, Conditional Access, SSO, and application registrations
- Experience with DNS, DHCP, Group Policy, enterprise certificate services, rights management, federation, and IPAM
- Experience with Active Directory consolidation or migration and AD health checks
- Hands-on experience with Microsoft Defender for Cloud Apps, Defender for Endpoint, endpoint detection and response, attack surface reduction, and vulnerability management
- Experience with Microsoft 365 security and compliance administration and email security controls
- Hands-on experience with Intune or MDM for Windows endpoints and Kandji, Jamf, or similar Apple MDM platforms
- Experience administering Windows Server 2012, 2016, 2019, and 2022
- Experience managing Windows and macOS patching, security, performance, backup, and recovery
- Experience with SD-WAN, ISP and circuit concepts, ZTNA, enterprise Wi-Fi, and RADIUS or 802.1X
- Experience managing Cisco Webex Rooms, Microsoft Teams Rooms, Zoom Rooms, Logitech, and Cisco collaboration hardware
- Experience with virtualization, storage, compute, Azure cloud, backups, automation, and PowerShell scripting
- Experience managing Azure VDI environments, including monitoring, troubleshooting, optimization, security, and documentation
- Experience with Veeam or similar backup and disaster recovery solutions for Microsoft 365, virtual machines, servers, and cloud workloads
- Ability to define technical standards, lead complex cross-domain escalations, mentor engineers, and present recommendations to leadership
- Experience partnering with security, risk, compliance, facilities, events, and regional business teams
- Knowledge of AWS
- Microsoft SC-300, SC-200, or AZ-500 certification
- MCSE Server Infrastructure, MCM or MCA in Directory Services, or equivalent experience
- PCNSE, Fortinet NSE, or CCNP Security certification
Uniphore Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about Uniphore and has not been reviewed or approved by Uniphore.
-
Healthcare Strength — Health coverage includes medical, dental, vision, mental‑health resources, and wellness programs, with multiple plan options (including HSA/FSA) indicating robust depth. Plan quality and affordability are highlighted relative to peers.
-
Leave & Time Off Breadth — Time off includes generous PTO, paid holidays, and a paid birthday day off. Enhanced parental, caregiver, and bereavement leave extend coverage beyond standard policies.
-
Retirement Support — Retirement offerings include a U.S. 401(k) with company match and pension/retirement plans with employer contributions in many countries. These programs support longer‑term financial security alongside core pay.
Uniphore Insights
What We Do
The Business AI Cloud is the only sovereign, composable and secure AI platform that enables businesses to rapidly adopt, significantly transform and immediately unlock the value of their data. Trusted by more than 2,500 of the world’s largest enterprises and recognized by Gartner, Forrester, IDC and the Deloitte Fast 500, Uniphore is where enterprise AI moves from ambitions to production. A Complete, Composable Platform Uniphore is designed to be: Sovereign — run on any public cloud, private cloud or on-premises with full control over your data and AI models. Composable — choose your layer, model, or component—vector DBs, knowledge graphs, data compute, and beyond. Secure — embedded guardrails, observability, and AI security ensure trusted, compliant, and enterprise-grade protection. Trusted at Scale Over 2,000 global businesses — including many of the Fortune 500 — rely on Uniphore every day to drive growth, improve efficiency, and deliver personalized customer experiences. Customers include leaders across industries, like Skechers, LastPass, Atlassian, HP, Allstate, Sony, and more. Industry Recognition Named to Inc.'s Best in Business List Listed on the Deloitte Technology Fast 500 Recognized in reports by Gartner, Forrester, and IDC From Pilot to Production Through strategic collaborations with industry leaders like KPMG, Cognizant, Rackspace, Databricks and Snowflake, Uniphore helps organizations move beyond experimental AI pilots to production-grade deployment — operationalizing AI agents across internal and client-facing workflows at scale.
