Active Directory & Azure AD SME / Engineer

Carrier; India; On-site; INR 2,500,000 - 5,000,000; Full time

Job summary

Carrier is seeking a senior Identity & Access Management leader to provide technical governance for global IAM platforms, including Active Directory, Entra ID, Okta, SailPoint, and BeyondTrust. The role supports over 60,000 identities and critical business applications.

The candidate will drive identity strategy, architecture and transformation programs while leading global IAM teams and vendors to deliver secure, scalable services.

Qualifications

• 12+ years of Identity & Access Management experience.
• 8+ years administering and architecting Active Directory and Microsoft Entra ID.
• Deep expertise in AD, Entra ID, Azure AD Connect/Cloud Sync, Federation Services, Conditional Access, MFA, PIM, Self‑Service Password Reset, Identity Governance, and Hybrid Identity Architecture.
• CISSP, CISM, Microsoft Identity certifications or BeyondTrust/SailPoint certifications preferred.

Responsibilities

• Own enterprise architecture and governance for on‑premises Active Directory and Microsoft Entra ID.
• Lead hybrid identity architecture, synchronization, federation, SSO, MFA, CA, PIM and SSPR.
• Define identity standards, lifecycle management, naming standards and security baselines.
• Govern SailPoint identity lifecycle, access certifications, and governance controls.
• Lead IAM transformation programs including Okta‑to‑Entra migration and cloud identity modernization.
• Provide L3 escalation support for critical IAM incidents and integrations.
• Oversee PAM operations and service account governance; drive least‑privilege and zero‑trust initiatives.
• Architect integrations for GitHub, AWS, ServiceNow, Spacelift and other enterprise apps.

Skills

Identity & Access Management

Active Directory

Entra ID / Azure AD

Conditional Access

MFA / PIM

Identity Governance

Education

CISSP

CISM

Microsoft Identity certs

Tools

GitHub

AWS

Azure

Terraform

Spacelift

Job description

Role: Active Directory, L3 SME

Location: Bangalore/Hyderabad

Full/ Part-time: Full Time

About Carrier

Carrier Global Corporation, global leader in intelligent climate and energy solutions, is committed to creating innovations that bring comfort, safety and sustainability to life. Through cutting‑edge advancements in climate solutions such as temperature control, air quality and transportation, we improve lives, empower critical industries and ensure safe transport of food, life‑saving medicines and more. Since inventing modern air conditioning in 1902, we lead with purpose: enhancing the lives we live and the world we share. We continue to lead because of our world‑class, inclusive workforce that puts the customer at the center of everything we do. For more information, visit corporate.carrier.com or follow Carrier on social media at @Carrier

Carrier is seeking a senior Identity & Access Management (IAM) leader and subject matter expert (SME) to provide technical leadership and operational governance for Carrier's global identity platforms, including Microsoft Entra ID, Active Directory, Okta, SailPoint, BeyondTrust, and customer identity environments. The role is responsible for identity strategy, platform architecture, operational excellence, security governance, compliance, and large‑scale transformation initiatives supporting over 60,000 workforce identities, external identities, and critical business applications.

The individual will serve as the highest‑level escalation point (L3), provide architecture leadership for identity modernization programs, lead global IAM engineering teams and vendors, and ensure secure, compliant, and scalable identity services for Carrier's enterprise environments.

Key Responsibilities

Active Directory & Entra ID Leadership

• -Own enterprise architecture and governance for on‑premises Active Directory and Microsoft Entra ID.
• -Lead hybrid identity architecture, synchronization, federation, SSO, MFA, Conditional Access, Privileged Identity Management (PIM), and Self‑Service Password Reset (SSPR).
• -Define identity standards, lifecycle management processes, naming standards, and security baselines.
• -Provide technical approval for enterprise identity designs and integrations.

Identity Governance & Administration

• -Govern SailPoint identity lifecycle processes, access certifications, birthright access, role management, and segregation‑of‑duties controls.
• -Drive User Access Reviews (UAR), Privileged Access Reviews (PAR), SOX controls, and audit remediation efforts.
• -Establish governance for workforce, contractor, service, and privileged accounts.
• -Ensure compliance with internal cybersecurity and regulatory requirements.

IAM Transformation Programs

• -Lead strategic programs such as Okta‑to‑Entra migration, CIAM modernization, and cloud identity transformation.
• -Own migration planning, readiness assessments, architecture governance, application onboarding, and executive reporting.
• -Collaborate with Microsoft, implementation partners, and business stakeholders to deliver enterprise‑scale IAM initiatives.

Operational Leadership

• -Provide L3 escalation support for critical IAM incidents and authentication issues.
• -Lead resolution of complex identity, federation, provisioning, and SSO integration challenges.
• -Establish service management processes, SOPs, operational metrics, SLAs, and technology roadmaps.
• -Manage vendors, contractors, and managed service providers supporting IAM operations.

PAM & Service Account Governance

• -Oversee BeyondTrust PAM operations and privileged account governance.
• -Establish controls for service account lifecycle management, credential rotation, password propagation, and privileged access controls.
• -Drive least‑privilege and zero‑trust initiatives across identity platforms.

Application & Cloud Identity Architecture

• -Provide IAM architecture guidance for GitHub, AWS, ServiceNow, Spacelift, enterprise SaaS applications, and custom integrations.
• -Design scalable access models leveraging Entra groups, SCIM provisioning, federation, and automated access governance.
• -Support CI/CD and DevOps identity integration requirements

Required Qualifications

• -12+ years of Identity & Access Management experience.
• -8+ years administering and architecting Active Directory and Microsoft Entra ID.
• -Deep expertise in: Active Directory Microsoft Entra ID Azure AD Connect / Cloud Sync Federation Services Conditional Access MFA Privileged Identity Management Self‑Service Password Reset Identity Governance Hybrid Identity Architecture

Preferred Qualifications

• -CISSP, CISM, Microsoft Identity certifications, SailPoint certifications, or BeyondTrust certifications.
• -Experience with CIAM platforms and B2B/B2C identity architectures.
• -Experience supporting cloud engineering platforms such as GitHub, AWS, Azure, Terraform, or Spacelift.

Benefits

We offer a competitive total rewards package that may include other benefits and well‑being programs. Offerings vary by role and location and a