Active Directory Support Engineer

MassMutual India; Hyderabad; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

MassMutual India is seeking an experienced Active Directory & Entra Infrastructure Support Engineer to operate on-premises and cloud AD environments, including Azure Entra ID. The role emphasizes BAU support, platform hygiene, security alignment, and cross-team collaboration for identity services.

You will own daily operational tasks, participate in DR drills, and provide rapid incident remediation while working with security and infrastructure teams. 5+ years in identity platforms is expected.

Qualifications

• Bachelor's degree in CS/IT or equivalent with 5+ years in AD/Azure Entra.
• Hands-on experience supporting Microsoft Active Directory, Azure Entra ID, and server infrastructure.
• Microsoft certifications in AD/Azure/Identity are a strong plus.

Responsibilities

• Provide L2/L3 operational support for on-premises and cloud-based AD environments.
• Manage Azure Entra ID tenants, hybrid identity, and related components.
• Perform daily ops: user/group/service account management and object administration.
• Implement delegation models, GPOs, and RBAC to meet business needs.
• Participate in DR drills and incident RCA efforts; support on-call rotation.

Skills

AD architecture

Hybrid identity

PowerShell

Incident troubleshooting

On-call support

Education

Bachelor's degree in CS/IT or equivalent

Tools

PowerShell scripting

Microsoft diagnostics tools

Azure Entra ID management

Job description

We are looking for an experienced Active Directory & Entra Infrastructure Support Engineer to support and operate our on-premises and cloud-based Active Directory environments, including Azure Entra ID and associated identity infrastructure. This role is heavily operational in nature, focused on BAU support, production stability, incident remediation, upgrades, and platform hygiene, while partnering with security, application, and infrastructure teams. The engineer will play a key role in ensuring availability, security, and performance of identity services across the enterprise.

Key Responsibilities

Active Directory & Entra Operations

• Provide L2/L3 operational support for multiple on-premises and cloud-based Active Directory environments
• Support and manage Azure Entra ID tenants, hybrid identity setups, and supporting components
• Perform daily operations including user, group, service account, and computer object management
• Implement and manage Delegation Models, Group Policies, and role-based access controls to meet business requirements
• Support directory integrations with enterprise and third-party applications

Infrastructure Maintenance & Platform Health

• Own technology currency and upgrades for:
  • AD Domain Controllers
  • Entra / Azure AD components
  • Supporting identity infrastructure
• Perform patching, configuration changes, and infrastructure clean-up
• Monitor directory health, replication, authentication flows, and system logs
• Conduct regular reviews and audits to ensure stability, compliance, and security posture
• Participate in Disaster Recovery drills, including AD and identity infrastructure restoration

Incident Management & Troubleshooting

• Act as a primary responder for identity-related production incidents
• Troubleshoot and resolve issues impacting:
  • Authentication
  • Authorization
  • Directory replication
  • Application integrations
• Work closely with application teams, vendors, and platform teams to drive incident resolution
• Support root cause analysis (RCA) and corrective action implementation
• Participate in on-call rotation, including evenings and weekends, as per operational requirements

Documentation & Process Support

• Create and maintain operational runbooks, SOPs, and troubleshooting guides
• Document standard changes, fixes, and known issues
• Support audit requests and internal reviews related to identity platforms
• Continuously improve operational processes and stability

Required Qualifications

Education & Experience

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or equivalent experience
• 5+ years of hands-on experience supporting:
  • Microsoft Active Directory
  • Azure / Entra ID
  • Microsoft server infrastructure
• Experience working in enterprise IAM or infrastructure operations teams
• Microsoft certifications (Active Directory, Azure, Identity) are a strong plus

Technical Skills

• Strong hands‑on knowledge of:
  • Active Directory architecture, design, and operations
  • Azure Entra ID & hybrid identity concepts
  • Domain Controllers, trust relationships, DNS, replication
• Experience with:
  • SSO and MFA integrations
  • IAM concepts and access governance
  • PowerShell scripting for automation and support
• Familiarity with:
  • Cloud platforms (Azure primarily; AWS exposure is a plus)
  • Security standards (NIST, ISO 27001, PCI-DSS)
• Strong troubleshooting skills using Microsoft diagnostic tools