Principal Infrastructure Automation & AI Ops Engineer

Who is Forcepoint?

Forcepoint simplifies security for global businesses and governments. Forcepoint’s all-in-one, truly cloud-native platform makes it easy to adopt Zero Trust and prevent the theft or loss of sensitive data and intellectual property no matter where people are working. 20+ years in business. 2.7k employees. 150 countries. 11k+ customers. 300+ patents. If our mission excites you, you’re in the right place; we want you to bring your own energy to help us create a safer world.

All we’re missing is you!

We are seeking a Staff/Principal Infrastructure Automation & AI Ops Engineer to modernize enterprise infrastructure operations across endpoint, identity, Microsoft 365, network, cloud, and IT service management. This is not a traditional systems administration role. The successful candidate will establish an automation-first, API-driven, AI-assisted operating model that replaces manual administration with policy-as-code, automated remediation, and intelligent operational workflows, extending the governance and security foundation already built across the environment.

The engineer will act as a technical authority and architecture leader, unifying Intune, Entra , Microsoft 365, Crowd Strike Falcon, Cyber Ark, Fresh service, AWS, Commvault, and Juniper NGFW infrastructure into a single automation and telemetry architecture. The ideal candidate moves fluidly between writing Python, Power Shell, and Bash, troubleshooting a production authentication issue, reviewing architecture, and defining an AI-driven remediation strategy.

The organization operates as customer zero for Forcepoint’s Data Security Everywhere (DSE) / DLP platform, piloting AI-assisted data security and remediation workflows ahead of general availability. This engineer will help shape how that integration extends into the broader automation and AI Ops corporate architecture.

Own the architecture and standards for the Windows endpoint platform in Intune. Design lifecycle automation covering provisioning, configuration, compliance, patching, and retirement, and sustain current patch and compliance rates as the fleet scales. Engineer Windows Autopilot workflows that enforce standard-user deployment and close local-admin exposure. Build automated software inventory auditing by reconciling Intune with Crowd Strike Falcon Discover, and design self-healing remediation for common failures.

Serve as a technical authority for Entra  architecture. Automate Joiner, Mover, and Leaver workflows across Entra , M365, and Fresh service. Mature Conditional Access from audit mode into full enforcement. Develop AI-assisted entitlement and RBAC analysis that surfaces excessive privilege, stale access, and segregation-of-duties risk. Partner on Beyond Trust privileged-access automation, including onboarding, credential rotation, and session monitoring.

Architect and automate Entra , Intune, Exchange Online, SharePoint Online, Teams, and Conditional Access administration through Microsoft Graph and Power Shell. Establish configuration baselines and drift detection, and carry forward the SharePoint governance and versioning cleanup already underway.

Own the automation engineering practice enterprise-wide. Set standards for Terraform, Bicep, and scripting frameworks in place of one-off scripts. Build CI/CD pipelines and API-driven integrations across Intune, Entra , Fresh service, AWS, and Juniper, and deliver reusable automation modules other engineers can build on. Convert high-volume manual processes into automated Fresh service service catalog workflows.