Active Directory Admin with Azure AD

Atos SE; Pune District; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

Atos SE in Pune is hiring for an on-premise Active Directory specialist with Azure AD expertise to design, implement, secure, and maintain identity and certificate-based auth across hybrid environments.

The role covers Enterprise PKI infrastructure, NDES/SCEP enrollment, Entra ID hybrid identity, ADFS, and related security features like Conditional Access and MFA. Immediate notice period required and strong troubleshooting skills are essential.

Qualifications

• Experience designing, implementing, securing, and maintaining identity and certificate-based authentication across hybrid environments.
• Hands-on with AD CS, PKI, and CA management.
• Experience deploying NDES, SCEP, and device certificate enrollment.
• Experience with Azure Entra ID, hybrid identity, Azure AD Connect, and Conditional Access.

Responsibilities

• Design, deploy, and manage Enterprise PKI infrastructure including Root CA and Issuing CA.
• Deploy and manage NDES for device certificate enrollment and integrate with Intune and MDMs.
• Manage hybrid identity environments (On-prem AD + Entra ID); configure Azure AD Connect, Seamless SSO, and Password Hash Sync.
• Configure identity security features such as Conditional Access, MFA, and Identity Protection.
• Monitor sign-ins and security logs; support certificate-based authentication with Entra ID.
• Design and manage ADFS infrastructure; configure claims-based authentication and relying party trusts.
• Plan and perform ADFS upgrades and migrations.

Skills

Active Directory

PKI / CA

Azure AD / Entra ID

ADFS

NDES / SCEP

Hybrid identity

Conditional Access

MFA

Tools

Azure AD Connect

Intune

Cloud Sync

Job description

Select how often (in days) to receive an alert:

We are hiring for on premise Active Directory with Azure AD !!!

Notice period: Immediate only

The successful candidate will design, implement, secure, and maintain identity and certificate-based authentication solutions across hybrid environments.

Key Responsibilities include:

Active Directory & PKI (AD CS):

• Design, deploy, and manage Enterprise PKI infrastructure
• Manage Root CA, Issuing CA, and Offline CA models
• Troubleshoot PKI issues
• Perform CA hardening, backup, and disaster recovery testing

NDES / SCEP:

• Deploy and manage NDES for device certificate enrollment
• Integrate NDES with Intune, third-party MDMs, and network devices
• Configure registration authority policies and security
• Troubleshoot SCEP enrollment failures and renewal issues

Azure Entra ID (Azure AD):

• Manage hybrid identity environments (On-prem AD + Entra ID)
• Configure Azure AD Connect / Cloud Sync, Seamless SSO, and Password Hash Sync
• Implement identity security features such as Conditional Access, MFA, and Identity Protection
• Support certificate-based authentication with Entra ID
• Monitor sign-ins and security logs

ADFS (Active Directory Federation Services):

• Design and manage ADFS infrastructure
• Configure claims-based authentication and relying party trusts
• Manage ADFS certificates for service communication, token-signing, and token-decrypting
• Troubleshoot authentication and federation issues
• Plan and perform ADFS upgrades and migrations

Certifications:

• SC-300 (Identity & Access Administrator)
• AZ-104 / AZ-305
• Windows Server / Security certifications are preferred.