We are seeking an experienced IAM / Active Directory L3 engineer to provide technical leadership, operational excellence, and strategic direction for Identity and Access Management (IAM) and Microsoft Active Directory services. The role will be responsible for managing enterprise identity infrastructure, leading L3 support operations, driving automation initiatives, ensuring security compliance, and supporting cloud identity platforms. The ideal candidate should possess deep expertise in Microsoft Active Directory, Azure AD (Entra ID), Identity Governance, Privileged Access Management (PAM), Authentication Technologies, and Enterprise Access Controls while leading a team of engineers supporting global operations.
Identity & Access Management • Lead L3 support and administration of enterprise IAM services. • Design, implement, and maintain identity lifecycle management processes. • Manage provisioning, deprovisioning, role-based access control (RBAC), and access governance. • Ensure compliance with security policies, audit requirements, and regulatory standards. • Drive IAM transformation and modernization initiatives. Active Directory & Entra ID Administration • Administer and support: o Active Directory Domain Services (AD DS) o Azure AD / Microsoft Entra ID o AD Federation Services (ADFS) o Azure AD Connect o DNS, DHCP, Group Policy (GPO) • Design and maintain AD forests, domains, trusts, sites, and replication topology. • Perform health checks, performance tuning, and capacity planning. • Manage hybrid identity environments. Security & Compliance • Implement identity security best practices and Zero Trust principles. • Support MFA, Conditional Access, Identity Protection, and SSO solutions. • Manage privileged account controls and PAM/PIM solutions. • Conduct security reviews, access recertifications, and compliance assessments. • Support audit activities and regulatory compliance requirements. Incident & Problem Management • Lead major incidents related to IAM and Active Directory. • Perform root cause analysis (RCA) and implement preventive measures. • Provide L3 troubleshooting for authentication, authorization, replication, and directory service issues. • Collaborate with security, infrastructure, and application teams during critical incidents. Automation & Continuous Improvement • Develop automation using PowerShell and scripting tools. • Improve operational efficiency through process automation and self-service solutions. • Create and maintain technical standards, runbooks, and operational procedures. • Drive service improvement initiatives and platform modernization. • Coordinate with security, cloud, infrastructure, and application teams. • Work with business stakeholders to understand identity and access requirements. • Provide technical guidance during projects, migrations, and audits. • Participate in architecture reviews and strategic planning.
Core Technologies • Microsoft Active Directory (AD DS) • Microsoft Entra ID (Azure AD) • Azure AD Connect • Group Policy Management • DNS and DHCP • Active Directory Federation Services (ADFS) • LDAP and Kerberos Authentication IAM Technologies • Identity Governance and Administration (IGA) • Single Sign-On (SSO) • Multi-Factor Authentication (MFA) • Role-Based Access Control (RBAC) • Privileged Access Management (PAM/PIM) • Access Certification and Governance Cloud & Security • Microsoft Azure • Hybrid Identity Solutions • Conditional Access Policies • Microsoft Defender for Identity • Zero Trust Security Architecture • Cybersecurity and Compliance Frameworks Automation • PowerShell Scripting • Automation Runbooks • Infrastructure-as-Code concepts • Process Automation and Orchestration
12-14+ years of IT Infrastructure experience. • 7+ years of hands-on experience in Active Directory and IAM administration. • 3+ years of experience leading L3 operations or technical teams. • Experience supporting large-scale enterprise environments (50,000+ users preferred). • Experience with hybrid cloud identity architectures. • Experience in incident management and problem management processes.
Job Description : • Microsoft Certified: Identity and Access Administrator Associate (SC-300)\\\\r\\\\n• Microsoft Certified: Azure Administrator Associate (AZ-104)\\\\r\\\\n• Microsoft Certified: Azure Security Engineer Associate (AZ-500)\\\\r\\\\n• Certified Information Systems Security Professional (CISSP)\\\\r\\\\n• Certified Identity and Access Manager (CIAM)\\\\r\\\\n• ITIL Foundation/Intermediate\\\\r\\\\n
Source: HCLTech careers — Read the original posting and apply
This role is listed by the employer on its own careers site. Kaam Ki Khoj does not process applications for it.
HCLTech is an employer in the IT/Computers - Software, Software Services sector with operations in India. This is a directory listing maintained by Kaam Ki Khoj so that candidates can find the organisation; it is not an official company page and Kaam... Read More
Upload your CV once — we read it, build your profile and put you in front of every employer hiring on Kaam Ki Khoj. No forms, no fees.
