Senior Domain Manager End User Support
Bajaj Finserv · Pune Division
- Experience3–5 yrs
- SalaryNot disclosed
- Work modeonsite
- Levelmid
- Posted22 Sept 2026
About Bajaj Finserv
Bajaj Finserv is hiring in Pune Division in financial services. This role looks for around 3+ years of experience.
Skills
- BitLocker
- Windows Security Administration
- Microsoft Intune
- Group Policy
- Active Directory
- Endpoint Security
- Disk Encryption
- Data Protection
- Endpoint Protection
- Microsoft Defender for Endpoint
- Endpoint Vulnerability Assessment
- Security Incident Response
The role
An endpoint security engineer at a financial services company deploys BitLocker, configures Microsoft Intune and Group Policy, and manages Windows Security Administration and endpoint protection across enterprise devices. Endpoint vulnerability assessments and security incident response support encryption compliance, recovery operations, and regulatory readiness.
Full job description
Location Name: Pune Corporate Office - Mantri
Job Purpose
Deploy, configure, and manage BitLocker across enterprise endpoints. Monitor encryption compliance and ensure endpoint security standards are maintained. Implement security baselines, hardening policies, and compliance controls for Windows devices. Configure and manage Group Policies (GPO), device encryption keys, and recovery processes. Troubleshoot BitLocker recovery issues, TPM-related issues, and endpoint security incidents. Maintain documentation for encryption policies, endpoint configurations, and operational procedures. Investigate and respond to endpoint security incidents, ensuring timely resolution and reporting. Conduct periodic reviews of BitLocker policies, ensuring alignment with organizational security frameworks and regulatory standards. Track and escalate error logs from non-compliant or failed encryption machines, coordinating with Microsoft support for resolution. Manage endpoint protection platforms such as Microsoft Defender for Endpoint, CrowdStrike Falcon. Integrate endpoint security controls with SIEM and SOC monitoring solutions. Perform endpoint vulnerability assessments and remediation activities. Collaborate with IT infrastructure, desktop support, and cybersecurity teams.
Duties And Responsibilities
A- Minimum required Accountabilities for this role
Engineering / Computer Graduate with 3-5 years of Information / Cyber Security Experience
B- Additional Accountabilities Pertaining To The Role
Relevant Security Certifications like CEH, CISSP, CISM, ISO 27001 Lead Implementer, etc. preferred (Good to Have)
Key Decisions / Dimensions
Strategic Decisions Deciding encryption policies for different device categories (laptops, desktops, servers). Define the problem clearly Security Audits preparedness Deciding compliance enforcement policies for non-compliant or unencrypted devices.
Major Challenges
Managing BitLocker encryption compliance across thousands of enterprise devices. Handling BitLocker recovery key management and recovery incidents securely. Ensuring endpoint security without impacting user productivity or system performance. Handling encryption deployment during OS upgrades and device refresh cycles. Maintaining compliance with organizational and regulatory security standards. Supporting audit requirements and maintaining accurate security documentation.
Required Qualifications And Experience
Qualifications Engineering/Computer Graduates with relevant security experience of 3-5years Work Experience Relevant security certifications such as EC-Council CEH, ISC2 CISSP, ISACA CISM, or Microsoft Security certifications are preferred. Strong knowledge of Endpoint Security, Disk Encryption, Data Protection, and Windows Security Administration. Hands-on experience in managing and supporting BitLocker across enterprise environments. Experience in BitLocker deployment, configuration, recovery key management, TPM troubleshooting, and encryption compliance monitoring. Hands-on experience with Microsoft Intune, Group Policy (GPO), Active Directory, and endpoint management tools. Experience with endpoint protection and EDR solutions such as Microsoft Defender for Endpoint.