AD and IAM Administrator

Verito; New Delhi; On-site; INR 1,800,000 - 2,800,000; Full time

Job summary

Verito is seeking a Senior AD and IAM Administrator to own identity and access across its on-premise hosted environment. The role requires hands-on expertise in Active Directory, MFA, and PKI, with a focus on security and compliance for US-based clients.

You will manage AD health across forests, execute GPO design, and oversee account lifecycles, access reviews, and tiered admin controls. Night shifts from Noida will align with US business hours.

Qualifications

• Three to five (3–5) years of Active Directory administration experience in a multi-domain environment, preferably at a managed service provider (MSP) or hosting provider.
• Strong working knowledge of AD Domain Services, Group Policy, DNS, and Kerberos, including replication troubleshooting with dcdiag and repadmin.
• Hands-on experience with identity and access practices, including account lifecycle, MFA, privileged account hygiene, and access reviews.
• Working knowledge of Remote Desktop licensing and Citrix administration, and proficiency in PowerShell scripting.
• Demonstrated ability to document procedures clearly and to work with security, support, and infrastructure teams.
• Full professional fluency in written and spoken English, as the primary working language with United States–based clients.
• Availability to work a full night shift from the Noida office, covering United States business hours.
• Ability to operate independently with minimal day-to-day oversight and to act as the identity authority for the team.

Responsibilities

• Monitor and maintain AD health across forests and domain controllers, including replication, FSMO roles, SYSVOL, trusts, and DNS.
• Validate backups and perform system state/forest recovery tests.
• Own GPOs end-to-end with per-client policies, change control, health audits, and CIS benchmarks.
• Own the full account lifecycle for client firms and internal staff, including provisioning, deprovisioning, and service account management.
• Resolve authentication issues, including lockouts, Kerberos failures, and trust problems; hand machine-level issues to Windows Server Administrator.
• Administer Duo MFA and the password policy, and support SSPR rollout.
• Maintain privileged access controls and a tiered administration model, break-glass accounts.
• Administer Remote Desktop licensing, RDCAL activation, usage tracking, and license server issues.
• Administer the Citrix environment, including user access, licensing, and login issues.
• Support the design and build of a future internal PKI based on ADCS and own certificate lifecycle after go-live.
• Run quarterly access reviews and AD security assessments; build PowerShell scripts for bulk account work and runbooks.
• Technical mentoring: act as technical reference and mentor agents on complex cases.
• AD Health: prevent issues before user impact; track recovery tests.
• Access Hygiene: deprovision leavers and manage privileged accounts.
• Audit Readiness: complete access reviews on schedule.

Skills

Active Directory administration

English fluency

Independent work

Tools

PowerShell scripting

dcdiag

repadmin

Duo MFA

Citrix administration

ADCS PKI

Job description

Verito is hiring a Senior AD and IAM Administrator to own identity and access across its on-premise hosted environment. As the VeritSpace client base grows, account, login, and access control work needs a dedicated owner who keeps Active Directory (AD) healthy and keeps every client firm's access correct and auditable. This hands-on L3 Subject Matter Expert (SME) role works with the Manager - IT, the Windows Server Administrator, the security team, and Support, and supports escalations for both the VeritSpace and VeritGuard lines of business. AI tools are part of the daily toolkit, and the incumbent selects the right tools and guides others in using them.

2. Company Overview

Verito is a managed IT and cloud hosting provider built exclusively for tax and accounting firms in the United States. Founded in 2016 by Jatin Narang, Verito serves 1,000+ accounting and bookkeeping firms nationwide, maintaining a 100% uptime record during tax season and a 92% first-touch support resolution rate.

3. Scope of Responsibilities

Active Directory Operations

• Monitor and maintain AD health across two (2) forests and all domain controllers (DCs), including replication, Flexible Single Master Operation (FSMO) roles, SYSVOL, trusts, internal DNS, and time synchronization.
• Maintain AD recovery readiness by validating backups with the backup owner and running system state and forest recovery tests with Semperis Active Directory Forest Recovery (ADFR).
• Own Group Policy Objects (GPOs) end-to-end, including design, per-client policies, change control, health audits, and security baselines aligned with Center for Internet Security (CIS) benchmarks.

Identity & Access Management

• Own the full account lifecycle for client firms and internal staff, including provisioning, changes, same-day deprovisioning, stale account cleanup, and service account management.
• Resolve escalated authentication issues, including account lockouts, Kerberos failures, and broken domain trust, and hand machine-level issues to the Windows Server Administrator.
• Administer Duo multi-factor authentication (MFA) and the password policy, and support the rollout of self-service password reset (SSPR).
• Maintain privileged access controls, including minimal admin group membership, separate administrative accounts, a tiered administration model, and break-glass accounts.

Licensing, Citrix & PKI

• Administer Remote Desktop licensing, including Remote Desktop Client Access License (RDCAL) activation, usage tracking, and license server issues.
• Administer the Citrix environment, including user access, published resources, licensing, and login issues.
• Support the design and build of a future internal Public Key Infrastructure (PKI) based on Active Directory Certificate Services (ADCS), and own certificate lifecycle after go-live.

Security, Audit & Automation

• Run quarterly access reviews and AD security assessments, remediate findings, and provide identity evidence for client audits under IRS Publication 4557 and the Federal Trade Commission (FTC Safeguards Rule).
• Build PowerShell scripts for bulk account work and reporting, and maintain runbooks that allow Support to handle first-level unlock and reset tasks.

Role Modeling & Culture

• Technical mentoring: acting as the team's technical reference and mentoring agents on complex cases through shadowing, troubleshooting together and debriefs after a case is resolved.

4. Key Performance Metrics

• AD Health:DC and replication issues found before user impact, and scheduled recovery tests completed.
• Access Hygiene:Time to deprovision leavers, privileged account count, and stale accounts removed.
• Audit Readiness:Access reviews completed on schedule and open findings from AD security assessments.

5. Required Qualifications

• Three to five (3–5) years of Active Directory administration experience in a multi-domain environment, preferably at a managed service provider (MSP) or hosting provider.
• Strong working knowledge of AD Domain Services, Group Policy, DNS, and Kerberos, including replication troubleshooting with dcdiag and repadmin.
• Hands-on experience with identity and access practices, including account lifecycle, MFA, privileged account hygiene, and access reviews.
• Working knowledge of Remote Desktop licensing and Citrix administration, and proficiency in PowerShell scripting.
• Demonstrated ability to document procedures clearly and to work with security, support, and infrastructure teams.
• Full professional fluency in written and spoken English, as the primary working language with United States–based clients.
• Availability to work a full night shift from the Noida office, covering United States business hours.
• Ability to operate independently with minimal day-to-day oversight and to act as the identity authority for the team.

6. Preferred Qualifications

• Experience with Duo, Delinea, Semperis ADFR, or comparable identity tools, and with AD assessment tools such as PingCastle or BloodHound.
• Knowledge of ADCS and multi-tier PKI design, and of Microsoft Entra ID concepts.
• Experience in MSP or cloud hosting environments, certifications such as AZ-802 or Security+, and familiarity with Falcon LogScale, Veeam, and AI tools such as Claude.