Digital Workplace Technical Lead

About the role

Ignitis Group is seeking a Digital Workplace Technical Lead to drive reliability, security, and automation across its global IT infrastructure. You will shape the digital employee experience, ensure resilient identity services, and embed Zero Trust principles throughout the workplace ecosystem.

Key responsibilities

• Lead reliability engineering for workplace and identity services, defining SLIs/SLOs for endpoint performance and authentication.
• Design and operate resilient identity and access architectures (Active Directory, Entra ID, IAM solutions) with 99.9%+ availability.
• Own Digital Employee Experience observability, creating telemetry, monitoring, and alerting strategies.
• Drive automation‑first initiatives, including zero‑touch device provisioning, automated Joiner/Mover/Leaver processes, and self‑service scripting.
• Implement safe, automated rollout patterns for OS updates, security patches, and application packaging.
• Engineer and test disaster recovery for core identity systems, continuously improving RTO/RPO targets.
• Embed Zero Trust security by design, managing Conditional Access, endpoint protection, and compliance with ISO 27001 and NIS2.
• Provide technical direction, mentor engineers, lead incident post‑mortems, and collaborate with Security and Service Desk teams.

Required profile

• Minimum 3 years experience managing enterprise desktop technologies, endpoint management, and identity platforms in large‑scale environments.
• Strong hands‑on expertise with Microsoft Workplace ecosystem (Intune, Autopilot, SCCM, M365) and IAM (Active Directory, Entra ID, SSO, MFA).
• Proficiency in endpoint telemetry/observability tools and scripting (PowerShell, Python or similar).
• Practical knowledge of Zero Trust architecture, endpoint hardening (CIS/NIST), and experience with cybersecurity frameworks such as ISO 27001 or NIS2.

Required skills

• Microsoft Intune
• Microsoft Autopilot
• SCCM
• Microsoft 365
• Active Directory / Entra ID (Azure AD)
• Single Sign‑On (SSO) and Multi‑Factor Authentication (MFA)
• PowerShell scripting
• Python (or similar scripting language)
• Microsoft Graph API
• Conditional Access
• Microsoft Defender / EDR / XDR
• Zero Trust design
• ISO 27001 compliance
• NIS2 Directive
• CIS/NIST security benchmarks