Active Directory Administrator

Tata Consultancy Services; Kolkata District, Chennai District, Coimbatore District; On-site; INR 1,100,000 - 1,800,000; Full time

Job summary

Tata Consultancy Services in Kolkata is seeking an experienced Active Directory Administrator to lead enterprise AD and Entra ID operations, with emphasis on hybrid identity, security hardening, and automation. You will mentor L1/L2 teams, design policies, and drive IAM initiatives across on-prem and cloud environments, ensuring compliance and reliable identity services.

The role requires deep expertise in AD architecture, Azure AD, conditional access, and scripting with PowerShell, plus strong

Qualifications

• Extensive experience in Active Directory architecture including Domain Controllers, DNS, replication, and Sites.
• Strong expertise in Microsoft Entra ID and hybrid identity solutions with Azure AD Connect.
• Proficient in PowerShell for automation, reporting, and runbooks.
• Experience designing RBAC, privileged access controls, and identity governance.
• Security hardening, audits, compliance evidence, and Zero Trust implementation.

Responsibilities

• Lead enterprise AD administration, health checks, and capacity planning.
• Design and implement Group Policy strategies and domain consolidation plans.
• Manage Entra ID services, conditional access, MFA, and SSO integrations.
• Oversee IAM incidents, root-cause analyses, and permanent fixes.
• Mentor L1/L2 teams and provide technical leadership across projects.

Skills

Active Directory architecture

Entra ID / Azure AD

Hybrid identity

Group Policy design

PowerShell scripting

Identity governance

RBAC and privileged access

Zero Trust / security

Incident management

SSO / MFA / Federation

Kerberos / LDAP

Intune / PIM knowledge

Education

Microsoft Certified: Identity and Access Administrator Associate

Microsoft Certified: Azure Solutions Architect Expert

Microsoft Certified: Windows Server Hybrid Administrator Associate

ITIL Foundation

Relevant Microsoft Security Certifications

Tools

Azure AD Connect

Federation Services

Intune

Windows Server

Job description

Role & responsibilities

Role Overview

The L3 Active Directory Administrator serves as the highest level of technical support for Identity and Access

Management services, focusing on Active Directory (AD), Microsoft Entra ID (Azure AD), and hybrid identity

environments. The role is responsible for architecture reviews, complex issue resolution, security hardening,

automation, infrastructure optimization, and providing technical leadership for L1/L2 teams.

Key Responsibilities

Active Directory Administration

• Lead management and optimization of enterprise AD infrastructure including Domain Controllers, DNS,

DHCP, Sites, Trusts, and Forests.

• Resolve complex replication, authentication, trust, Kerberos, DNS, and directory service issues.
• Design, review, and implement enterprise-wide Group Policy strategies.
• Manage and optimize FSMO roles, AD Sites and Services, and domain consolidation activities.
• Perform proactive AD health assessments, capacity planning, and infrastructure remediation.
• Support AD migrations, schema updates, domain upgrades, and disaster recovery planning.

Microsoft Entra ID (Azure AD)

• Administer and manage Microsoft Entra ID services across enterprise environments.
• Design and implement Conditional Access Policies, MFA strategies, Identity Protection, and Zero Trust

initiatives.

• Troubleshoot advanced provisioning, federation, synchronization, and authentication issues.
• Manage Azure AD Connect / Cloud Sync architecture and hybrid identity design.
• Support enterprise SSO integrations with SaaS and custom applications.
• Provide guidance on Entra ID governance, lifecycle management, and security best practices.

Identity & Access Management

• Design and govern RBAC models and privileged access management controls.
• Manage privileged identities and administrative access controls.
• Review, optimize, and enforce identity governance and compliance requirements.
• Lead root cause analysis for recurring IAM incidents.

Security & Compliance

• Drive security hardening initiatives for AD and Entra environments.
• Implement and review password policies, authentication controls, auditing, and monitoring.
• Investigate identity-related security incidents and coordinate remediation activities.
• Support internal and external audits by providing compliance evidence and documentation.
• Recommend and implement Zero Trust and least-privilege security frameworks.

Automation & Scripting

• Develop advanced PowerShell automation frameworks and reusable modules.
• Automate provisioning, de-provisioning, reporting, compliance monitoring, and operational tasks.
• Create self-healing scripts and operational runbooks to improve service reliability.

Monitoring & Reporting

• Establish monitoring standards and alerting mechanisms for AD and Entra ID services.
• Analyze and report on service performance, security posture, and availability metrics.
• Maintain architecture documentation, SOPs, knowledge articles, and recovery procedures.

Incident, Problem & Change Management

• Act as final escalation point for L1 and L2 teams.
• Lead major incident resolution and bridge calls.
• Perform detailed root cause analysis and implement permanent fixes.
• Review and approve changes impacting AD and Entra ID environments.
• Mentor L1/L2 administrators and provide technical guidance.

Required Skills & Competencies

Technical Skills

• Expert knowledge of Active Directory architecture (Domains, Forests, Sites, Trusts, Replication, DNS).
• Strong expertise in Group Policy design and troubleshooting.
• Advanced knowledge of Microsoft Entra ID and hybrid identity solutions.
• Deep understanding of Azure AD Connect, Federation Services, SSO, MFA, Conditional Access, and Identity

Protection.

• Strong experience with Kerberos, NTLM, LDAP, LDAPS, PKI, and authentication technologies.
• Advanced PowerShell scripting and automation expertise.
• Experience with Windows Server administration and identity security best practices.
• Knowledge of Intune, PIM, Access Reviews, and Identity Governance is preferred.

Soft Skills

• Strong analytical and troubleshooting skills.
• Ability to lead critical incident management activities.
• Excellent communication and stakeholder management skills.
• Mentoring and technical leadership capabilities.

Certifications (Preferred)

• Microsoft Certified: Identity and Access Administrator Associate.
• Microsoft Certified: Azure Solutions Architect Expert.
• Microsoft Certified: Windows Server Hybrid Administrator Associate.
• ITIL Foundation / ITIL Practitioner.
• Relevant Microsoft Security Certifications.

Experience

• 610+ years of experience in Active Directory, Microsoft Entra ID, and Identity & Access Management.
• Strong experience supporting large-scale hybrid identity environments.
• Proven experience handling enterprise-level escalations, migrations, and security initiatives.