IT Principal - Entra Identity and Infrastructure

IT Principal - Entra Identity and Infrastructure

Department: Information Technology

Reporting To: IT Senior Manager

Location: Abu Dhabi - UAE

Inception42, a G42 company, is the region’s leading innovator of AI-powered domain-specific as well as industry-agnostic products, built on a rich heritage of research and development. Within the G42 ecosystem, Inception42 functions as the core intelligence layer – transforming data and compute infrastructure into real-world, applied AI solutions. Beyond its commercial endeavors, Inception42 is committed to creating positive societal impact. For more information, please visit www.inceptionai.ai

Overview

We are looking for an IT Principal / Manager to own the architecture, security, and operational reliability of Inception42’s identity and core infrastructure services. You will set the technical direction for Microsoft Entra, privileged access, Azure and Microsoft 365 infrastructure, hybrid platforms, and endpoint management, ensuring these services remain secure, resilient, and ready to scale. The role combines hands-on technical depth with service ownership, incident leadership, team development, and close collaboration across IT, Cybersecurity, Applications, Risk, Compliance, and business teams.

What You’ll Own

• Define and drive the identity and infrastructure roadmap, architecture principles, operating model, control baselines, priorities, and measurable service outcomes.
• Design and govern Microsoft Entra identity lifecycle controls across joiner, mover, and leaver processes, role and group management, access requests, approvals, certification, and deprovisioning.
• Own secure authentication and authorization across enterprise services, including Conditional Access, multifactor and passwordless authentication, identity protection, single sign-on, federation, enterprise applications, and access policy exceptions.
• Establish privileged-access controls for administrators, service accounts, and critical systems using least-privilege principles, just-in-time access, approval workflows, access reviews, monitoring, emergency access, and accountable remediation.
• Own the reliability, configuration, capacity, and lifecycle of Azure, Microsoft 365, server, virtualisation, and hybrid infrastructure services, with clear standards for availability, resilience, recovery, and cost.
• Govern endpoint and device-management platforms, including Microsoft Intune and Jamf, in partnership with workspace security teams to maintain secure configuration, policy compliance, application delivery, and lifecycle control across Windows, macOS, and mobile devices.
• Lead identity and infrastructure incidents from triage and containment through service recovery, stakeholder communication, root-cause analysis, and permanent corrective action.
• Build durable service-management practices across monitoring, change, incident, problem, capacity, continuity, configuration, documentation, runbooks, escalation paths, and service-level performance.
• Make service health, identity risk, privileged access, control coverage, capacity, availability, and operational debt visible through reliable dashboards, alerts, audit evidence, and decision-ready reporting.
• Develop a capable identity and infrastructure team, manage vendors and platform partners, and drive accountable execution across service quality, licensing, support, knowledge transfer, and continuous improvement.

What We’re Looking For

• Strong engineering fundamentals across identity, access control, cloud and hybrid infrastructure, endpoint management, networking dependencies, resilience, and production operations.
• A track record of designing, shipping, and operating enterprise identity and infrastructure capabilities in production, with clear ownership of availability, security posture, performance, and user impact.
• Deep hands-on experience with Microsoft Entra ID, Azure, and Microsoft 365, including identity lifecycle management, Conditional Access, authentication, enterprise applications, and service administration.
• Practical experience with identity governance and privileged-access capabilities, including least privilege, access reviews, elevated-access workflows, service identities, monitoring, and audit evidence.
• Experience operating server, virtualisation, cloud, and hybrid infrastructure with disciplined approaches to configuration, capacity, patching, backup, recovery, observability, and lifecycle management.
• Working knowledge of endpoint-management platforms such as Microsoft Intune or Jamf and the control boundaries between identity, infrastructure, workplace operations, and cybersecurity.
• Strong systems thinking and debugging ability, with sound judgement under ambiguity and during high-severity service or security incidents.
• Clear communication, stakeholder influence, and team leadership, with a high-ownership approach to service quality, documentation, governance, vendor accountability, and continuous improvement.

Nice to Have

• Experience with PowerShell, Microsoft Graph, infrastructure as code, workflow automation, observability tooling, or service-management integrations.
• Experience operating identity and infrastructure controls in regulated, enterprise-scale, sovereign, or audit-intensive technology environments.
• A relevant technical degree or certifications such as SC-300, AZ-104, AZ-305, MS-102, ITIL 4, or credentials covering privileged-access platforms, endpoint management, security, or service continuity.