Authentication Engineer

Tekskills Inc.; Kolkata District; Sur place; INR 2 000 000 - 4 200 000; Plein temps

Résumé du poste

Tekskills india pvt ltd is seeking an Authentication & Directory Services Engineer to manage AD and Entra ID across on-prem and cloud environments. You will implement SSO, MFA and CA policies, while handling onboarding for applications and escalations.

The role requires deep AD/Entra ID knowledge, PowerShell scripting, and ITIL-aligned operations. This is a senior engineering position with opportunity to influence security strategy.

Qualifications

• Deep knowledge of directory structures and authentication protocols.
• Experience with hybrid identity (on-prem AD + Entra ID/Azure AD).
• Strong scripting and automation using PowerShell.
• Familiarity with ITIL change and incident processes.

Responsabilités

• Lead engineering for AD and Entra ID services and security posture.
• Implement SSO, MFA and CA policies across platforms.
• Manage onboarding/offboarding for applications to authentication services.
• Serve as 1st/2nd line escalation for complex auth issues.
• Develop technical guides and automate user provisioning scripts.

Connaissances

Active Directory

Azure Entra ID

Azure AD

SSO

MFA

Conditional Access

PowerShell

Kusto Query Language (KQL)

SAML/OAuth

LDAP

Cloud Identity

ITIL

Cyber Security

Formation

Bachelor's in Computer Science or related

Outils

Quest Change Auditor

Quest Recovery Manager

On-prem AD tooling

Windows Server

Description du poste

Hi All

Greeting from Tekskills india pvt ltd,

Authentication Engineer

7- 20 years experience

Location : Bangalore

NP : Immediate - 15 Days

Job Profile

Position details

• An exciting opportunity for an Authentication & Directory Services Engineer to join and provide the technical capability to support authentication and directories services.
• Currently concentrated primarily around MS Active Directory and focussed on all aspects of this technology, the Authentication & Directory Services team handle day to day management of the AD platform on premise and EntraID (Azure AD); the technical documentation; maintenance of platform standards through to the delivery of change and support in implementation of technical direction and strategy.
• The Authentication & Directory Services Engineer, AVP role will sit within this highly productive team, and the successful candidate will be expected to familiarise themselves with the processes and procedures of the Bank quickly to be able to support and play an active engineering role in the day-to-day platform management and operation of the authentication services and processes. Candidates will be expected to articulate complex technical instruction in plain English to earn the support of senior management stakeholders and those technically less experienced. This role requires an excellent team player; a self-starter with a motivation and desire to seek out & deliver improvements and a drive to document and promote future platform opportunities for approval and funding.
• Candidates applying for this role must be able to demonstrate in-depth knowledge of Authentication and Microsoft Active Directory on premise and cloud-based Azure Active Directory through either a Microsoft Systems Engineer qualification or at least 8 years experience working in this specialty.
• Candidates must also be able to demonstrate examples of real-world experiences using their skills allied with a good knowledge of current and future trends within tech around Cyber Security, Identity & Access Management and related authentication methodologies

Key Responsibilities

• Perform the role of senior analyst responsible for Microsoft Active Directory (AD) and Entra ID (Azure AD) services technical engineering
• Implementing and maintaining security protocols, including Single Sign-On (SSO), Multi-Factor Authentication (MFA) and Conditional Access (CA) policies
• Managing onboarding, offboarding of application to authentication services and SSO
• 1st and 2nd line escalation point for complex issues related to authentication, directory synchronization, and access failures.
• Resolving BAU incidents and tasks through in-depth troubleshooting and analysis.
• Support the development of the strategy and technical direction for Authentication & Directory Services.
• Creation and maintenance of technical guides to convey fact, simply and effectively to both peers and those less experienced.
• Daily management and maintenance of the authentication services platform, ensuring service availability; health and performance monitoring & alerting and the maintenance of operational & technical documentation.
• Balance technical fact / opinion against business risk / delivered service to provide well thought through guidance to support technical staff with incident, problem investigation and project decisions.
• Initiate investigation and proactive improvements for standard operating processes and procedures, utilising the current owned / licensed tools available, to evidence and elevate issues.
• Produce and interpret service performance and security data to provide analysis for investigations; baseline performance and trend reports for management to highlight areas of focus / improvement and on-going change.
• Always encourage teamwork and co-operation.
• Developing scripts (e.g., PowerShell, Python) to automate user account management and access provisioning to reduce manual errors.
• Push use of Automation and scripting functionality to simplify and improve all aspects of Authentication tasks and monitoring
• Work with the problem management function under the ITIL framework to investigate potential root causes.
• Auditing access, monitoring for suspicious activity (Identity Threat Detection & Response - ITDR), and ensuring compliance with frameworks like SOX and GDPR

Skills and Experience:

Essential:

• Deep knowledge of directory structures, authentication protocols, and hybrid identity scenarios.
• Microsoft Active Directory and Windows Server
• Microsoft Entra ID / Azure Active Directory
• Quest AD management tools (for example, Quest Change Auditor, Quest Recovery Manager)
• Active Directory Federated Services
• Active Directory Certificate Services
• Single Sign On configuration methods and protocols
• Quest Recovery and Quest Change Auditor
• SAML, OAuth, Kerberos, LDAP
• PowerShell and Kusto Query Language (KQL)
• Ability to create/edit/troubleshoot Powershell Scripts

Preferred:

• Privileged Access Management
• Security Operations Centre experience
• Cloud Identity Governance
• Cloud infrastructure (AWS, Azure, Oracle Cloud)

Education

• Bachelors in computer science or related streams or any relevant Bachelors

Work Experience

• Financial Services experience a bonus
• Experience of Financial regulations, compliance and standards

Other Requirements

• Good communication skills
• Strong sense of accountability
• The ability to operate with urgency and prioritize work accordingly
• A structured and logical approach to work
• Strong problem-solving skills
• A creative and innovative approach to work
• The ability to manage large workloads and tight deadlines
• Excellent attention to detail and accuracy
• A calm approach, with the ability to perform well in a pressurized environment

Desirable

• A proactive, motivated approach, self-managed.
• Examples of going above and beyond core duties of authentication services role.