Authentication and Directory Services Engineer, AVP

Ample Success HR; Bengaluru; On-site; INR 1,500,000 - 2,700,000; Full time

Job summary

Ample Success HR seeks an Authentication and Directory Services Engineer to manage and evolve AD and Entra ID ecosystems in a global context. The role emphasizes day-to-day platform operations, security controls, and collaboration with senior stakeholders to drive improvements across authentication services.

The ideal candidate will have hands-on experience with Microsoft AD, Azure AD, and related tooling, excellent scripting abilities, and a proactive approach to automation and incident

Qualifications

• Deep knowledge of directory structures, authentication protocols, and hybrid identity scenarios.
• Microsoft Active Directory and Windows Server expertise.
• Entra ID / Azure Active Directory experience.
• Experience with Quest tools: Change Auditor and Recovery Manager.
• SAML, OAuth, Kerberos, LDAP knowledge.
• PowerShell scripting and basic Python.
• Ability to write/interpret diagnostic queries with KQL.
• Experience with IT security, SOX and GDPR frameworks.

Responsibilities

• Lead AD and Entra ID services engineering and operations.
• Implement SSO, MFA and Conditional Access policies.
• Onboard/offboard applications and manage access provisioning.
• Troubleshoot BAU incidents and perform root-cause analysis.
• Develop technical guides and promote platform improvements.
• Automate identity tasks using PowerShell/Python.
• Monitor service health, performance, and documentation.

Skills

Active Directory

Azure Entra ID

PowerShell

KQL

SAML

OAuth

Kerberos

LDAP

Hybrid identity

Education

Bachelors in Computer Science

Tools

Quest Change Auditor

Quest Recovery Manager

AD FS

Azure AD Connect

Job description

About the RolePosition Title: Authentication and Directory Services Engineer, AVPCorporate Title: Assistant Vice PresidentInternal Title: ManagerReporting to:Location: BengaluruJob ProfilePosition detailsAn exciting opportunity for an Authentication & Directory Services Engineer to join the client and provide the technical capability to support authentication and directories services in EMEA region. Currently concentrated primarily around MS Active Directory and focussed on all aspects of this technology, the Authentication & Directory Services team handle day to day management of the AD platform on premise and EntraID (Azure AD); the technical documentation; maintenance of platform standards through to the delivery of change and support in implementation of technical direction and strategy. The Authentication & Directory Services Engineer, AVP role will sit within this highly productive team, and the successful candidate will be expected to familiarise themselves with the processes and procedures of the Bank quickly to be able to support and play an active engineering role in the day-to-day platform management and operation of the authentication services and processes. Candidates will be expected to articulate complex technical instruction in plain English to earn the support of senior management stakeholders and those technically less experienced. This role requires an excellent team player; a self-starter with a motivation and desire to seek out & deliver improvements and a drive to document and promote future platform opportunities for approval and funding. Candidates applying for this role must be able to demonstrate in-depth knowledge of Authentication and Microsoft Active Directory on premise and cloud-based Azure Active Directory through either a Microsoft Systems Engineer qualification or at least 8 years' experience working in this specialty. Candidates must also be able to demonstrate examples of real-world experiences using their skills allied with a good knowledge of current and future trends within tech around Cyber Security, Identity & Access Management and related authentication methodologiesKey ResponsibilitiesPerform the role of senior analyst responsible for Microsoft Active Directory (AD) and Entra ID (Azure AD) services technical engineering Implementing and maintaining security protocols, including Single Sign-On (SSO), Multi-Factor Authentication (MFA) and Conditional Access (CA) policies Managing onboarding, offboarding of application to authentication services and SSO 1st and 2nd line escalation point for complex issues related to authentication, directory synchronization, and access failures. Resolving BAU incidents and tasks through in-depth troubleshooting and analysis. Support the development of the strategy and technical direction for Authentication & Directory Services. Creation and maintenance of technical guides to convey fact, simply and effectively to both peers and those less experienced. Daily management and maintenance of the authentication services platform, ensuring service availability; health and performance monitoring & alerting and the maintenance of operational & technical documentation. Balance technical fact / opinion against business risk / delivered service to provide well thought through guidance to support technical staff with incident, problem investigation and project decisions. Initiate investigation and proactive improvements for standard operating processes and procedures, utilising the current owned / licensed tools available, to evidence and elevate issues. Produce and interpret service performance and security data to provide analysis for investigations; baseline performance and trend reports for management to highlight areas of focus / improvement and on-going change. Always encourage teamwork and co-operation. Developing scripts (e.g., PowerShell, Python) to automate user account management and access provisioning to reduce manual errors. Push use of Automation and scripting functionality to simplify and improve all aspects of Authentication tasks and monitoring Work with the problem management function under the ITIL framework to investigate potential root causes. Auditing access, monitoring for suspicious activity (Identity Threat Detection & Response - ITDR), and ensuring compliance with frameworks like SOX and GDPRSkills and Experience:Essential:Deep knowledge of directory structures, authentication protocols, and hybrid identity scenarios. Microsoft Active Directory and Windows Server Microsoft Entra ID / Azure Active Directory Quest AD management tools (for example, Quest Change Auditor, Quest Recovery Manager) Active Directory Federated Services Active Directory Certificate Services Single Sign On configuration methods and protocols Quest Recovery and Quest Change Auditor SAML, OAuth, Kerberos, LDAP PowerShell and Kusto Query Language (KQL) Ability to create/edit/troubleshoot Powershell ScriptsPreferred:Privileged Access Management Security Operations Centre experience Cloud Identity Governance Cloud infrastructure (AWS, Azure, Oracle Cloud)EducationBachelors in computer science or related streams or any relevant BachelorsWork ExperienceFinancial Services experience a bonus Experience of Financial regulations, compliance and standards Must have Experience of supporting Global Organisation (10,000 users +)Other RequirementsGood communication skills Strong sense of accountability The ability to operate with urgency and prioritize work accordingly A structured and logical approach to work Strong problem-solving skills A creative and innovative approach to work The ability to manage large workloads and tight deadlines Excellent attention to detail and accuracy A calm approach, with the ability to perform well in a pressurized environmentDesirableA proactive, motivated approach, self-managed. Examples of going above and beyond core duties of authentication services role.