Sudha Kuppusamy
London,United Kingdom
Summary
Experienced EUC & Endpoint Engineer with over 16 years managing multi-platform device fleets across ChromeOS, Android, macOS, and Windows. Expertise in Google Admin Console, endpoint security policy design, and automated deployment pipelines. Skilled in EDR integration and compliance reporting, with a proven ability to mentor junior engineers and streamline provisioning through Python/PowerShell automation. Background in regulated industries, focusing on operational efficiency.
Overview
2
2
Languages
1
1
Certification
18
18
years of professional experience
Work History
Senior Infrastructure Engineer - Digital Workplace & EUC
Cognizant Worldwide Limited
London
02.2026 - Current
- Own end-to-end administration and optimisation of the Workplace Technology stack (Jira, Confluence, Google Workspace) for a cross-functional delivery team of up to 20, including onshore/offshore engineers, third-party vendors and customer resources.
- Own the Google Workspace Admin Console as the primary collaboration and device management platform for a growing segment of the estate, administering ChromeOS and Android device policy, organisational units, Context-Aware Access, DLP policies and group-based licensing, and configuring SAML SSO via Okta/Azure AD with SCIM-based provisioning.
- Drove roadmap for enhancements to Google Workspace - security-policy hardening, Vault retention, and Gemini for Workspace pilot readiness - ensuring platform met evolving business and compliance needs.
- Act as subject matter expert for complex Jira configurations, workflow customisations and permission schemes, and lead Confluence information-architecture decisions across a 10,000+ user estate.
- Design and enforce endpoint security policy for macOS and Windows via JAMF Pro and Microsoft Intune, integrating EDR (CrowdStrike Falcon) and compliance baselines, and owning vendor relationships (CrowdStrike, DTEX, Nexthink) for endpoint tooling and patch management.
- Owned incident response for Workplace Technology services, triaging and resolving complex cross-system issues; tracked SLAs and KPIs, identified improvement opportunities and implemented continuous improvement measures.
- Identified improvement areas and built automated deployment pipelines (Python, PowerShell, Microsoft Graph API) for provisioning, access lifecycle and compliance reporting; ensured fleet observability through compliance dashboards and patch-currency metrics for audit-ready reporting.
- Administer advanced Google Admin Console security controls - endpoint verification, third-party app access lists, OAuth allow-listing and alert-centre investigation rules - to harden the Workspace environment against phishing and data-exfiltration risk.
- Regularly mentor engineers across the team on service design, security and operations, training new joiners and raising overall technical quality and bench strength.
- Client: Major UK Banking Group, Digital Workplace Transformation Programme
Senior EUC and Modern Workplace Engineer
Cognizant Worldwide Limited
London
03.2023 - 02.2026
- Delivered the Windows 11 and Microsoft 365 modernisation programme (Autopilot) end-to-end to 20,000+ users globally, administering Jamf Pro and Microsoft Intune under a single governance model.
- Scaled the Google Workspace pilot from a single regional business unit to an enterprise-wide configuration, administering the Admin Console (ChromeOS and Android device policy, organisational units, Context-Aware Access, group-based licensing) for 20,000+ devices and integrating Okta-based SSO.
- Administered Okta and Azure AD (Entra ID) as identity providers, configuring SAML and SCIM integrations across Workplace Technology and endpoint applications to ensure least-privilege compliance.
- Proactively identified and delivered future enhancements to the Google Admin Console security baseline (DLP policies, device-compliance rules against CIS/SOC2 controls) ahead of scheduled GxP audits, aligning ChromeOS and Android device policy with the wider macOS/Windows endpoint fleet.
- Owned Atlassian platform health for a global engineering organisation - Jira Service Management queues, automation rules, add-on/app governance and Confluence template standardisation - cutting average workflow configuration turnaround from days to hours.
- Triaged complex cross-system flows unaided during incidents in a 24/7 GxP-regulated environment, demonstrating urgency and accountability while minimising disruption.
- Led and mentored engineers within an onshore/offshore account team, combining architecture, delivery and coaching responsibility.
- Developed Python/PowerShell automation and reporting library for provisioning and compliance reporting, establishing a foundation for ongoing operational efficiency.
- Client: Global Pharmaceutical Enterprise (GxP regulated), 20,000+ Users
Endpoint and Infrastructure Specialist
Cognizant Technology Solutions
03.2021 - 02.2023
- Administered JAMF Pro (macOS DEP/ADE enrolment, configuration profiles, patch management) and Microsoft Intune for 5,000+ device fleet, ensuring compliance and management efficiency.
- Configured Entra ID Conditional Access, user provisioning, and access-group management to enable secure SAML-based application access during cloud security modernisation.
- Built PowerShell automation and dashboards linking endpoint compliance data to ServiceNow for operational and incident reporting.
- Established Google Workspace Admin Console configuration - organisational units, group-based licensing, ChromeOS and Android device policy - to enhance multi-platform collaboration with JAMF and Intune.
- Supported team leads on technical decisions and day-to-day coordination across a global remote delivery model.
- Client: Global Manufacturing Enterprise (USA), Remote Delivery
Endpoint and Infrastructure Engineer
NCS Pte Ltd
Singapore
10.2014 - 10.2019
- Administered Active Directory, Group Policy, and software distribution while enforcing strict change and access governance, ensuring audit and compliance controls across multiple agencies.
- Managed SCCM endpoint operations, OS deployment, and patch governance to ensure reliable performance in large-scale, high-availability government environments.
- Client: Government Agencies
Infrastructure Engineer
IBM
Singapore
03.2014 - 10.2014
- Executed secure workstation builds, implemented disk encryption, performed WSUS patching, and facilitated automated software distribution in regulated banking environment.
- Client: Banking Enterprise
- Received complaints and feedback from site personnel and contacted project stakeholders to resolve complex problems.
- Generated and controlled project budgets and timelines, facilitating completion of projects within established constraints.
- Oversaw installations from beginning to end and coordinated stakeholder review and handover to clients.
Lead Desktop Engineer
Tech Mahindra
India
05.2011 - 08.2013
- Led Windows migrations and SCCM-driven desktop modernisation for distributed banking user populations, overseeing delivery team and ensuring alignment with organisational goals.
- Client: Global Banking Enterprise (USA)
- Configured networks to meet performance requirements.
- Coordinated with IT team members on large-scale projects and deployments.
- Diagnosed and resolved hardware, software, and network connectivity problems efficiently.
Systems Engineer
CTS
India
11.2008 - 05.2011
- Engaged with Life Insurance Enterprise in the USA to align systems engineering efforts with business objectives.
- Oversaw application virtualisation with ZENworks and App-V, enhancing VDI administration across Citrix and VMware.
- Facilitated large-scale application migration, packaging, and compatibility remediation for successful automated enterprise deployments.
Education
M.Sc. - Information Technology
Alagappa University
IndiaSkills
- Google Workspace Admin Console
- ChromeOS Fleet Management
- Android MDM
- JAMF Pro
- Microsoft Intune
- Windows Autopilot
- SCCM
- Endpoint management
- Endpoint Security & Compliance
- EDR integration
- Okta
- Microsoft Entra ID
- Active Directory
- Python
- PowerShell
- Microsoft Graph API
- Power Automate
- ServiceNow integration
- Fleet observability
Languages
English
French
Certification
- JAMF Certified Administrator (100 and 200)
- Nexthink Certified Administrator (DEX)
- Professional Scrum Master I (PSM I)
- AWS Certified Cloud Practitioner
- ITIL v3 Foundation
Accomplishments
- Scaled Admin Console ownership from a single-business-unit pilot to a 20,000+ device configuration across ChromeOS and Android.
- Delivered advanced technical support and policy management for macOS and Windows endpoints via JAMF Pro and Microsoft Intune.
- Configured Okta and Azure AD (Entra ID) as SAML/SCIM identity providers across Workplace Technology applications.
- Built a Python/PowerShell automation library for provisioning, access lifecycle and compliance reporting.
- Triaged and resolved complex, cross-system incidents unaided while holding SLA/KPI targets.
- Administered the Google Workspace Admin Console for a 500+ user segment of the estate.
- Redesigned Jira workflows and restructured Confluence space architecture for a 10,000+ user Workplace Technology estate.
- Managed a cross-functional team of up to 20, including direct mentorship of 5+ junior engineers.
Custom
linkedin.com/in/sudhakuppusamy
Timeline
Senior Infrastructure Engineer - Digital Workplace & EUC
Cognizant Worldwide Limited
02.2026 - Current
Senior EUC and Modern Workplace Engineer
Cognizant Worldwide Limited
03.2023 - 02.2026
Endpoint and Infrastructure Specialist
Cognizant Technology Solutions
03.2021 - 02.2023
Endpoint and Infrastructure Engineer
NCS Pte Ltd
10.2014 - 10.2019
Infrastructure Engineer
IBM
03.2014 - 10.2014
Lead Desktop Engineer
Tech Mahindra
05.2011 - 08.2013
Systems Engineer
CTS
11.2008 - 05.2011
M.Sc. - Information Technology
Alagappa University