Authentication Engineer

Tekskills Inc.; Dadri; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

Tekskills india pvt ltd is seeking an Authentication Engineer to join the Authentication & Directory Services team in Bangalore. You will manage AD and Entra ID (Azure AD), implement SSO, MFA, and access policies, and own day-to-day platform operations.

The role requires hands-on experience with Microsoft identity technologies, scripting, and strong communication to align technical work with business needs.

Qualifications

• Deep knowledge of directory structures, authentication protocols, and hybrid identity scenarios.
• Microsoft Active Directory and Windows Server.
• Microsoft Entra ID / Azure Active Directory.
• Quest AD management tools (e.g., Quest Change Auditor, Quest Recovery Manager).
• Active Directory Federated Services and Certificate Services.
• SSO configuration methods and protocols (SAML, OAuth, Kerberos, LDAP).
• PowerShell and Kusto Query Language (KQL).
• Ability to create/edit/troubleshoot PowerShell scripts.

Responsibilities

• Role responsible for Microsoft Active Directory (AD) and Entra ID (Azure AD) services engineering.
• Implementing and maintaining security protocols including SSO, MFA, and Conditional Access.
• Manage onboarding/offboarding of applications to authentication services and SSO.
• First/second line escalation for complex authentication, directory synchronization, and access failures.
• Develop and maintain technical guides and runbooks for operations.
• Daily management and monitoring of authentication services platform.

Skills

Active Directory

Entra ID / Azure AD

PowerShell

SAML/OAuth/Kerberos

LDAP

KQL

Powershell scripting

Security awareness

Education

Bachelors in computer science

Tools

Quest Change Auditor

Quest Recovery Manager

Job description

Hi All

Greeting from Tekskills india pvt ltd,

Authentication Engineer

7- 20 years experience

Location : Bangalore

NP : Immediate - 15 Days

Job Profile

Position details

• An exciting opportunity for an Authentication & Directory Services Engineer to join and provide the technical capability to support authentication and directories services.
• Currently concentrated primarily around MS Active Directory and focussed on all aspects of this technology, the Authentication & Directory Services team handle day to day management of the AD platform on premise and EntraID (Azure AD); the technical documentation; maintenance of platform standards through to the delivery of change and support in implementation of technical direction and strategy.
• The Authentication & Directory Services Engineer, AVP role will sit within this highly productive team, and the successful candidate will be expected to familiarise themselves with the processes and procedures of the Bank quickly to be able to support and play an active engineering role in the day-to-day platform management and operation of the authentication services and processes. Candidates will be expected to articulate complex technical instruction in plain English to earn the support of senior management stakeholders and those technically less experienced. This role requires an excellent team player; a self-starter with a motivation and desire to seek out & deliver improvements and a drive to document and promote future platform opportunities for approval and funding.
• Candidates applying for this role must be able to demonstrate in-depth knowledge of Authentication and Microsoft Active Directory on premise and cloud-based Azure Active Directory through either a Microsoft Systems Engineer qualification or at least 8 years experience working in this specialty.
• Candidates must also be able to demonstrate examples of real-world experiences using their skills allied with a good knowledge of current and future trends within tech around Cyber Security, Identity & Access Management and related authentication methodologies

Key Responsibilities

• Perform the role of senior analyst responsible for Microsoft Active Directory (AD) and Entra ID (Azure AD) services technical engineering
• Implementing and maintaining security protocols, including Single Sign-On (SSO), Multi-Factor Authentication (MFA) and Conditional Access (CA) policies
• Managing onboarding, offboarding of application to authentication services and SSO
• 1st and 2nd line escalation point for complex issues related to authentication, directory synchronization, and access failures.
• Resolving BAU incidents and tasks through in-depth troubleshooting and analysis.
• Support the development of the strategy and technical direction for Authentication & Directory Services.
• Creation and maintenance of technical guides to convey fact, simply and effectively to both peers and those less experienced.
• Daily management and maintenance of the authentication services platform, ensuring service availability; health and performance monitoring & alerting and the maintenance of operational & technical documentation.
• Balance technical fact / opinion against business risk / delivered service to provide well thought through guidance to support technical staff with incident, problem investigation and project decisions.
• Initiate investigation and proactive improvements for standard operating processes and procedures, utilising the current owned / licensed tools available, to evidence and elevate issues.
• Produce and interpret service performance and security data to provide analysis for investigations; baseline performance and trend reports for management to highlight areas of focus / improvement and on-going change.
• Always encourage teamwork and co-operation.
• Developing scripts (e.g., PowerShell, Python) to automate user account management and access provisioning to reduce manual errors.
• Push use of Automation and scripting functionality to simplify and improve all aspects of Authentication tasks and monitoring
• Work with the problem management function under the ITIL framework to investigate potential root causes.
• Auditing access, monitoring for suspicious activity (Identity Threat Detection & Response - ITDR), and ensuring compliance with frameworks like SOX and GDPR

Skills and Experience:

Essential:

• Deep knowledge of directory structures, authentication protocols, and hybrid identity scenarios.
• Microsoft Active Directory and Windows Server
• Microsoft Entra ID / Azure Active Directory
• Quest AD management tools (for example, Quest Change Auditor, Quest Recovery Manager)
• Active Directory Federated Services
• Active Directory Certificate Services
• Single Sign On configuration methods and protocols
• Quest Recovery and Quest Change Auditor
• SAML, OAuth, Kerberos, LDAP
• PowerShell and Kusto Query Language (KQL)
• Ability to create/edit/troubleshoot Powershell Scripts

Preferred:

• Privileged Access Management
• Security Operations Centre experience
• Cloud Identity Governance
• Cloud infrastructure (AWS, Azure, Oracle Cloud)

Education

• Bachelors in computer science or related streams or any relevant Bachelors

Work Experience

• Financial Services experience a bonus
• Experience of Financial regulations, compliance and standards

Other Requirements

• Good communication skills
• Strong sense of accountability
• The ability to operate with urgency and prioritize work accordingly
• A structured and logical approach to work
• Strong problem-solving skills
• A creative and innovative approach to work
• The ability to manage large workloads and tight deadlines
• Excellent attention to detail and accuracy
• A calm approach, with the ability to perform well in a pressurized environment

Desirable

• A proactive, motivated approach, self-managed.
• Examples of going above and beyond core duties of authentication services role.