Authentication Engineer

Tekskills Inc.; Chennai; On-site; INR 1,200,000 - 2,100,000; Full time

Job summary

Tekskills india pvt ltd is seeking an Authentication Engineer to join the Identity Services team in Bangalore. The role focuses on Active Directory and Entra ID administration, with emphasis on secure authentication, automation, and documentation.

You will engage in day-to-day platform management, incident response, and strategic improvements. Candidates should demonstrate deep expertise in authentication technologies, hybrid identity, and related security controls, with strong communication and

Qualifications

• In-depth knowledge of AD and Entra ID (on-prem and cloud).
• Experience with Microsoft AD, Windows Server, and hybrid identity.
• Familiarity with SSO, MFA, and Conditional Access policies.

Responsibilities

• Engineer AD and Entra ID services, both on-prem and cloud.
• Implement SSO, MFA, and CA policies to secure access.
• Manage onboarding/offboarding of applications to authentication services and SSO.
• Serve as 1st/2nd line escalation for complex authentication issues.
• Troubleshoot BAU incidents with deep analysis and root-cause focus.
• Create/maintain technical guides and runbooks for ops teams.
• Develop automation scripts (PowerShell, Python) for provisioning.
• Monitor platform health, performance, and security data; ensure compliance.

Skills

Strong authentication & directory

Azure Entra ID / Entra ID

PowerShell

Authentication protocols

Security governance & audits

Education

Bachelor's in Computer Science

Tools

Quest Change Auditor

Quest Recovery Manager

Active Directory Federation Services

Job description

Hi All

Greeting from Tekskills india pvt ltd,

Authentication Engineer

7- 20 years experience

Location : Bangalore

NP : Immediate - 15 Days

Job Profile

Position details

• An exciting opportunity for an Authentication & Directory Services Engineer to join and provide the technical capability to support authentication and directories services.
• Currently concentrated primarily around MS Active Directory and focussed on all aspects of this technology, the Authentication & Directory Services team handle day to day management of the AD platform on premise and EntraID (Azure AD); the technical documentation; maintenance of platform standards through to the delivery of change and support in implementation of technical direction and strategy.
• The Authentication & Directory Services Engineer, AVP role will sit within this highly productive team, and the successful candidate will be expected to familiarise themselves with the processes and procedures of the Bank quickly to be able to support and play an active engineering role in the day-to-day platform management and operation of the authentication services and processes. Candidates will be expected to articulate complex technical instruction in plain English to earn the support of senior management stakeholders and those technically less experienced. This role requires an excellent team player; a self-starter with a motivation and desire to seek out & deliver improvements and a drive to document and promote future platform opportunities for approval and funding.
• Candidates applying for this role must be able to demonstrate in-depth knowledge of Authentication and Microsoft Active Directory on premise and cloud-based Azure Active Directory through either a Microsoft Systems Engineer qualification or at least 8 years experience working in this specialty.
• Candidates must also be able to demonstrate examples of real-world experiences using their skills allied with a good knowledge of current and future trends within tech around Cyber Security, Identity & Access Management and related authentication methodologies

Key Responsibilities

• Perform the role of senior analyst responsible for Microsoft Active Directory (AD) and Entra ID (Azure AD) services technical engineering
• Implementing and maintaining security protocols, including Single Sign-On (SSO), Multi-Factor Authentication (MFA) and Conditional Access (CA) policies
• Managing onboarding, offboarding of application to authentication services and SSO
• 1st and 2nd line escalation point for complex issues related to authentication, directory synchronization, and access failures.
• Resolving BAU incidents and tasks through in-depth troubleshooting and analysis.
• Support the development of the strategy and technical direction for Authentication & Directory Services.
• Creation and maintenance of technical guides to convey fact, simply and effectively to both peers and those less experienced.
• Daily management and maintenance of the authentication services platform, ensuring service availability; health and performance monitoring & alerting and the maintenance of operational & technical documentation.
• Balance technical fact / opinion against business risk / delivered service to provide well thought through guidance to support technical staff with incident, problem investigation and project decisions.
• Initiate investigation and proactive improvements for standard operating processes and procedures, utilising the current owned / licensed tools available, to evidence and elevate issues.
• Produce and interpret service performance and security data to provide analysis for investigations; baseline performance and trend reports for management to highlight areas of focus / improvement and on-going change.
• Always encourage teamwork and co-operation.
• Developing scripts (e.g., PowerShell, Python) to automate user account management and access provisioning to reduce manual errors.
• Push use of Automation and scripting functionality to simplify and improve all aspects of Authentication tasks and monitoring
• Work with the problem management function under the ITIL framework to investigate potential root causes.
• Auditing access, monitoring for suspicious activity (Identity Threat Detection & Response - ITDR), and ensuring compliance with frameworks like SOX and GDPR

Skills and Experience:

Essential:

• Deep knowledge of directory structures, authentication protocols, and hybrid identity scenarios.
• Microsoft Active Directory and Windows Server
• Microsoft Entra ID / Azure Active Directory
• Quest AD management tools (for example, Quest Change Auditor, Quest Recovery Manager)
• Active Directory Federated Services
• Active Directory Certificate Services
• Single Sign On configuration methods and protocols
• Quest Recovery and Quest Change Auditor
• SAML, OAuth, Kerberos, LDAP
• PowerShell and Kusto Query Language (KQL)
• Ability to create/edit/troubleshoot Powershell Scripts

Preferred:

• Privileged Access Management
• Security Operations Centre experience
• Cloud Identity Governance
• Cloud infrastructure (AWS, Azure, Oracle Cloud)

Education

• Bachelors in computer science or related streams or any relevant Bachelors

Work Experience

• Financial Services experience a bonus
• Experience of Financial regulations, compliance and standards

Other Requirements

• Good communication skills
• Strong sense of accountability
• The ability to operate with urgency and prioritize work accordingly
• A structured and logical approach to work
• Strong problem-solving skills
• A creative and innovative approach to work
• The ability to manage large workloads and tight deadlines
• Excellent attention to detail and accuracy
• A calm approach, with the ability to perform well in a pressurized environment

Desirable

• A proactive, motivated approach, self-managed.
• Examples of going above and beyond core duties of authentication services role.