Authentication Engineer

Tekskills Inc.; Mumbai; On-site; INR 2,400,000 - 4,000,000; Full time

Job summary

Tekskills india pvt ltd is seeking an Authentication Engineer to join the Authentication & Directory Services team in Bangalore. You will manage AD on-premises and Entra ID (Azure AD), implement SSO, MFA, and CA policies, and support day-to-day platform operations.

The role requires deep knowledge of directories, authentication protocols, and hybrid identity. Candidates should have 8+ years of experience in this specialty, strong communication and problem-solving skills.

Qualifications

• Deep knowledge of directory structures, authentication protocols and hybrid identity.
• Experience with Microsoft Active Directory and Windows Server environments.
• Experience with Microsoft Entra ID / Azure Active Directory.
• Familiarity with Quest AD management tools such as Change Auditor and Recovery Manager.
• Experience with AD Federated Services and AD Certificate Services.
• Knowledge of SSO, and protocols like SAML, OAuth, Kerberos, LDAP.
• PowerShell scripting and Kusto Query Language (KQL).
• Ability to document and explain technical concepts clearly.

Responsibilities

• Manage Microsoft AD and Entra ID services and engineering support.
• Implement and maintain SSO, MFA and Conditional Access policies.
• Handle onboarding/offboarding for applications in authentication services.
• Act as escalation point for complex authentication issues.
• Troubleshoot and resolve BAU incidents related to authentication and directory sync.
• Develop and maintain technical guides and runbooks.
• Automate routines using scripts to reduce manual errors.
• Audit access, monitor for suspicious activity and ensure compliance.

Skills

Active Directory

Windows Server

Entra ID / Azure AD

Quest Change Auditor

Quest Recovery Manager

Federated Services

Certificate Services

Single Sign-On

SAML

OAuth

Kerberos

LDAP

PowerShell

Kusto Query Language (KQL)

Powershell scripting

Education

Bachelor's in Computer Science or related

Tools

Quest Change Auditor

Quest Recovery Manager

Job description

Hi All

Greeting from Tekskills india pvt ltd,

Authentication Engineer

7- 20 years experience

Location : Bangalore

NP : Immediate - 15 Days

Job Profile

Position details

• An exciting opportunity for an Authentication & Directory Services Engineer to join and provide the technical capability to support authentication and directories services.
• Currently concentrated primarily around MS Active Directory and focussed on all aspects of this technology, the Authentication & Directory Services team handle day to day management of the AD platform on premise and EntraID (Azure AD); the technical documentation; maintenance of platform standards through to the delivery of change and support in implementation of technical direction and strategy.
• The Authentication & Directory Services Engineer, AVP role will sit within this highly productive team, and the successful candidate will be expected to familiarise themselves with the processes and procedures of the Bank quickly to be able to support and play an active engineering role in the day-to-day platform management and operation of the authentication services and processes. Candidates will be expected to articulate complex technical instruction in plain English to earn the support of senior management stakeholders and those technically less experienced. This role requires an excellent team player; a self-starter with a motivation and desire to seek out & deliver improvements and a drive to document and promote future platform opportunities for approval and funding.
• Candidates applying for this role must be able to demonstrate in-depth knowledge of Authentication and Microsoft Active Directory on premise and cloud-based Azure Active Directory through either a Microsoft Systems Engineer qualification or at least 8 years experience working in this specialty.
• Candidates must also be able to demonstrate examples of real-world experiences using their skills allied with a good knowledge of current and future trends within tech around Cyber Security, Identity & Access Management and related authentication methodologies

Key Responsibilities

• Perform the role of senior analyst responsible for Microsoft Active Directory (AD) and Entra ID (Azure AD) services technical engineering
• Implementing and maintaining security protocols, including Single Sign-On (SSO), Multi-Factor Authentication (MFA) and Conditional Access (CA) policies
• Managing onboarding, offboarding of application to authentication services and SSO
• 1st and 2nd line escalation point for complex issues related to authentication, directory synchronization, and access failures.
• Resolving BAU incidents and tasks through in-depth troubleshooting and analysis.
• Support the development of the strategy and technical direction for Authentication & Directory Services.
• Creation and maintenance of technical guides to convey fact, simply and effectively to both peers and those less experienced.
• Daily management and maintenance of the authentication services platform, ensuring service availability; health and performance monitoring & alerting and the maintenance of operational & technical documentation.
• Balance technical fact / opinion against business risk / delivered service to provide well thought through guidance to support technical staff with incident, problem investigation and project decisions.
• Initiate investigation and proactive improvements for standard operating processes and procedures, utilising the current owned / licensed tools available, to evidence and elevate issues.
• Produce and interpret service performance and security data to provide analysis for investigations; baseline performance and trend reports for management to highlight areas of focus / improvement and on-going change.
• Always encourage teamwork and co-operation.
• Developing scripts (e.g., PowerShell, Python) to automate user account management and access provisioning to reduce manual errors.
• Push use of Automation and scripting functionality to simplify and improve all aspects of Authentication tasks and monitoring
• Work with the problem management function under the ITIL framework to investigate potential root causes.
• Auditing access, monitoring for suspicious activity (Identity Threat Detection & Response - ITDR), and ensuring compliance with frameworks like SOX and GDPR

Skills and Experience:

Essential:

• Deep knowledge of directory structures, authentication protocols, and hybrid identity scenarios.
• Microsoft Active Directory and Windows Server
• Microsoft Entra ID / Azure Active Directory
• Quest AD management tools (for example, Quest Change Auditor, Quest Recovery Manager)
• Active Directory Federated Services
• Active Directory Certificate Services
• Single Sign On configuration methods and protocols
• Quest Recovery and Quest Change Auditor
• SAML, OAuth, Kerberos, LDAP
• PowerShell and Kusto Query Language (KQL)
• Ability to create/edit/troubleshoot Powershell Scripts

Preferred:

• Privileged Access Management
• Security Operations Centre experience
• Cloud Identity Governance
• Cloud infrastructure (AWS, Azure, Oracle Cloud)

Education

• Bachelors in computer science or related streams or any relevant Bachelors

Work Experience

• Financial Services experience a bonus
• Experience of Financial regulations, compliance and standards

Other Requirements

• Good communication skills
• Strong sense of accountability
• The ability to operate with urgency and prioritize work accordingly
• A structured and logical approach to work
• Strong problem-solving skills
• A creative and innovative approach to work
• The ability to manage large workloads and tight deadlines
• Excellent attention to detail and accuracy
• A calm approach, with the ability to perform well in a pressurized environment

Desirable

• A proactive, motivated approach, self-managed.
• Examples of going above and beyond core duties of authentication services role.