AD & IAM Engineer

Arise TechGlobal; Hyderabad; On-site; INR 1,800,000 - 2,400,000; Full time

Job summary

Arise TechGlobal is seeking an experienced AD & IAM Engineer to administer and secure enterprise identity environments. The role focuses on Active Directory, Entra ID, and hybrid identity across on-prem and cloud systems.

You will implement SSO, MFA, and governance, collaborate with Infrastructure, Cybersecurity, HR, and Compliance teams, and ensure identity security and compliance across the organization.

Qualifications

• 4–6 years of experience in Active Directory and IAM.
• Hands-on with AD DS, GPOs, DNS, OUs, replication, Kerberos and trust relationships.
• Experience with SSO, MFA, Conditional Access, and IAM governance.

Responsibilities

• Administer and maintain enterprise AD DS infrastructure.
• Manage Domain Controllers, GPOs, DNS, OUs, replication, and trust relationships.
• Monitor AD health, performance, and capacity; plan upgrades and migrations.
• Manage Microsoft Entra ID (Azure AD) and hybrid identity sync.
• Configure Conditional Access and modern authentication methods.
• Implement RBAC and conduct access reviews and governance.
• Support SSO onboarding and integration for apps.

Skills

AD & IAM

AD DS

Entra ID

Hybrid Identity

RBAC

SSO

MFA

IT Compliance

Identity Governance

Education

Bachelors in CS/IT/Cybersecurity

IT/Cybersecurity certifications

Tools

Azure AD Connect

Microsoft Intune

SAML/OIDC/OAuth

Job description

We are a leading technology company dedicated to innovation and excellence. Our mission is to empower businesses through cutting-edge technology solutions. We foster a collaborative culture that values innovation, security, and professional growth.

About the Role

Experience: 4-6 Years

Employment Type: Full-Time

Role Overview

We are looking for an experienced AD & IAM Engineer with strong expertise in Microsoft Active Directory, Microsoft Entra ID, hybrid identity, Identity & Access Management, and enterprise authentication technologies.

The role involves administering and securing enterprise identity environments, supporting hybrid identity infrastructure, implementing access controls, and collaborating with infrastructure, cybersecurity, application, HR, and compliance teams.

Key Responsibilities

Active Directory Administration

• Administer and maintain enterprise Active Directory Domain Services (AD DS) infrastructure.
• Manage Domain Controllers, Group Policies (GPOs), DNS, Organizational Units (OUs), replication, and trust relationships.
• Monitor AD health, performance, availability, and capacity.
• Support AD upgrades, migrations, consolidation, and modernization initiatives.
• Troubleshoot authentication, replication, DNS, Kerberos, and directory-related issues.

Hybrid Identity Management

• Manage Microsoft Entra ID (Azure AD) and hybrid identity synchronization.
• Support Azure AD Connect synchronization and hybrid authentication services.
• Maintain identity synchronization between on-premises and cloud environments.
• Configure and manage Conditional Access policies and modern authentication methods.

Identity & Access Management

• Manage Joiner, Mover, and Leaver (JML) processes.
• Provision and deprovision user accounts and access permissions.
• Implement and maintain Role-Based Access Control (RBAC).
• Conduct periodic access reviews and certification campaigns.
• Maintain identity governance processes, standards, and documentation.
• Configure and support enterprise Single Sign-On (SSO) solutions.
• Integrate enterprise and cloud applications using SAML, OAuth, OpenID Connect (OIDC), and WS-Federation.
• Support federation services and secure authentication mechanisms.
• Collaborate with application teams on SSO onboarding and integration.

Privileged Access Management

• Manage privileged identities and administrative accounts.
• Support implementation and administration of PAM solutions.
• Enforce least-privilege principles and privileged access controls.
• Monitor privileged account usage and support security investigations.

Identity Security

• Implement and support Multi-Factor Authentication (MFA) across enterprise systems.
• Configure Conditional Access and identity protection policies.
• Support Zero Trust security initiatives.
• Monitor identity-related security events and respond to authentication threats.
• Collaborate with cybersecurity teams on identity threat detection and remediation.
• Ensure compliance with SOX, ITGC, and corporate security policies.
• Support internal and external audit activities.
• Document identity processes, standards, and operational procedures.
• Track remediation of audit findings and compliance gaps.
• Maintain identity governance metrics and reporting.

Collaboration & Endpoint Management

• Work closely with Infrastructure, Cybersecurity, HR, Application, and Compliance teams.
• Support application owners with authentication and authorization requirements.
• Participate in identity-related projects and enterprise initiatives.
• Provide technical guidance on IAM best practices.
• Support endpoint management activities, including application packaging, deployment, and patch managementfor servers and desktop systems.
• Work with Microsoft endpoint management solutions such as Microsoft Intune.

Required Skills

• 4-6 years of experience in Active Directory and Identity & Access Management.
• Strong experience managing enterprise Active Directory environments.
• Hands-on experience with Microsoft Entra ID (Azure AD) and hybrid identity.
• Experience implementing and supporting SSO, MFA, Conditional Access, and IAM governance.
• Strong knowledge of Windows Server and enterprise authentication technologies.
• Experience with AD DS, GPOs, DNS, OUs, replication, Kerberos, and trust relationships.
• Experience with identity security, access reviews, RBAC, and privileged access management.
• Strong troubleshooting, analytical, and problem-solving skills.
• Experience supporting compliance, audit, and IT governance requirements.
• Good communication and stakeholder management skills.

Preferred Skills

• Experience with Microsoft Intune, application packaging, and endpoint management.
• Experience with software deployment and patch management for servers and endpoints.
• Basic exposure to SAP Basis administration and support.
• Familiarity with automation frameworks, reporting tools, and infrastructure management best practices.
• Exposure to Zero Trust security frameworks and identity protection solutions.

Education

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• Relevant Microsoft, IAM, cybersecurity, or cloud certifications are preferred.