Active Directory & Entra ID Developer

EY; Hyderabad, Bengaluru; On-site; INR 1,200,000 - 2,000,000; Full time

Job summary

EY is seeking an IAM/Identity & Access Management expert to design, implement, and manage on-premises Active Directory and Microsoft Entra ID environments. The role covers AD infrastructure, migrations, modernisation to Entra ID, and SSO integrations across enterprise apps.

You will drive IAM transformations including M&A scenarios, apply best practices for authentication protocols, and oversee M365 onboarding and device management with Intune across multiple platforms.

Qualifications

• Extensive experience designing and administering AD environments.
• Strong hands-on with Entra ID/Azure AD and hybrid identity.
• Experience with SSO, federation, and identity governance.

Responsibilities

• Manage on-prem AD and Entra ID environments; plan migrations and upgrades.
• Lead AD transformation including domain/forest migration and tenant integration.
• Design and implement AD infrastructure (DCs, GPOs, DNS, trusts).
• Perform health checks and propose improvements for IAM and security.

Skills

Active Directory

Azure AD / Entra ID

IAM

SSO & Federation

Authentication protocols

Tools

SailPoint

Okta

ADManager Plus

Entra ID Connect

Job description

Key Responsibilities

• Manage and support on-premises Active Directory and Microsoft Entra ID (Azure AD) environments
• Design, implement, and administer AD infrastructure (DCs, OU structure, GPOs, DNS, replication, trusts)
• Lead AD transformation initiatives including:
  • Migration (Domain/Forest, Tenant integration)
  • Upgradation and consolidation
  • Modernization to Entra ID / hybrid identity
• Perform AD assessments and health checks to identify gaps and recommend improvements
• Drive merger, acquisition, and divestiture (M&A) scenarios, including domain separation and integration
• Configure and manage hybrid identity (Entra ID Connect, SSO, federation)
• Implement and manage IAM solutions (SailPoint / Okta / ManageEngine ADManager Plus) for access governance and automation
• Support SSO integrations, application onboarding, and authentication protocols (SAML, OAuth, OIDC)
• Hands-on experience in Entra ID application and identity integration, including Enterprise Applications, App Registrations, Application Proxy, B2B/B2C implementations, and Custom RBAC roles.
• Strong L2/L3 expertise in authentication protocols (SAML, OAuth2, OIDC), application onboarding, permission governance (Graph/API), and secure access design.
• Hands-on experience in M365 workloads, endpoint management using Microsoft Intune, including device enrollment, compliance policies, configuration profiles, and application deployment.
• Experience in managing device lifecycle (provisioning, patching, monitoring) across Windows, iOS, and Android platforms