Directory Services Engineer

Alight Solutions; Hyderabad; On-site; INR 1,400,000 - 2,100,000; Full time

Job summary

Alight Solutions is seeking a Directory Services Engineer within the Identity Security team to ensure the security, reliability, and availability of enterprise directory and IAM systems.

The role covers Tier 0/1 identities, privileged access protection, and collaboration with application teams to engineer, monitor, and improve identity platforms across on‑prem and cloud environments.

Qualifications

• 7+ years of professional experience in Directory Services and IAM.
• Deep AD DS architecture knowledge across forests, domains, and trusts.
• Hands-on integration with IAM platforms such as Saviynt, Entra ID, SailPoint, Okta, PingFederate.
• Strong LDAP concepts and certificate lifecycle management.
• Proficiency in scripting and automation (PowerShell, Bash, Python, Ansible).
• Experience with GPO design and cloud platforms (AWS/Azure).

Responsibilities

• Ensure directory services platforms are secure, compliant, resilient, and highly available.
• Monitor performance, availability, and reliability of Tier 0 and Tier 1 identity systems.
• Protect privileged identities with least-privilege RBAC, ACLs, and Just-In-Time access.
• Lead integration and lifecycle management of identity and security platforms.
• Collaborate with development teams to resolve incidents and service requests.
• Develop and maintain technical documentation, scripts, repositories, and training materials.
• Coordinate platform maintenance, upgrades, and operational support.

Skills

Directory Services

IAM

Scripting & Automation

Incident Response

Communication Skills

Tools

Active Directory (AD DS)

Saviynt

Microsoft Entra ID / Azure AD

SailPoint

Okta

PingFederate

PowerShell

Bash

Python

Ansible

Job description

Overview

The Directory Services Engineer within the Alight Identity Security team is responsible for the security, reliability, and availability of enterprise directory and identity platforms. This role supports Tier 0 and Tier 1 identity systems, safeguards privileged access, integrates identity and security technologies, and provides operational and incident‑response support across the enterprise.

The ideal candidate will bring strong hands‑on experience with directory services, cloud platforms, IAM technologies, scripting and automation, and modern authentication and federation protocols.

Key Responsibilities

Platform Administration & Operations

• Ensure directory services platforms are secure, compliant, resilient, and highly available.
• Maintain performance, availability, and resilience of Tier 0 and Tier 1 identity systems.
• Proactively monitor systems for performance, stability, and reliability.
• Protect privileged identities by enforcing least‑privilege principles using RBAC, ACLs, and Just‑In‑Time access.
• Support security, compliance, and regulatory audits.
• Participate in incident response activities, including off‑hours support as required.

Integration & Engineering

• Lead and support the integration, lifecycle management, and engineering of identity and security platforms.
• Collaborate with application development teams and end users to resolve incidents and complete service requests.
• Provide technical leadership and guidance to operational support team members.
• Support architectural decisions related to identity, authentication, authorization, and platform resilience.

Upgrades, Support & Documentation

• Coordinate platform maintenance, upgrades, and operational support activities.
• Develop and maintain technical documentation, scripts, code repositories, and training materials.
• Ensure proper knowledge transfer, documentation, and operational readiness during platform changes and upgrades.
• Support ongoing operational improvements through documentation and process refinement.

Required Qualifications

• 7+ years of professional experience in Directory Services and/or Identity & Access Management (IAM).
• Deep understanding of Active Directory Domain Services (AD DS) architecture, including forests, domains, trusts, FSMO roles, replication, and multi‑site topology.
• Hands‑on experience integrating with IAM platforms such as Saviynt, Microsoft Entra ID (Azure AD), SailPoint, Okta, and PingFederate.
• Strong knowledge of LDAP concepts, schema extensions, and directory query optimization.
• Experience with PKI and certificate lifecycle management, including CRLs, NDES/SCEP, and AD‑integrated certificate services.
• Proficiency in scripting and automation (PowerShell, Bash, Python, Ansible).
• Strong experience designing and managing Group Policy Objects (GPOs).
• Extensive experience with cloud platforms (AWS, Azure) and service models (IaaS, PaaS, SaaS), including cloud networking concepts.
• Excellent written and verbal communication skills.

Preferred Qualifications

• Experience managing directory platforms such as Active Directory, eDirectory, and Radiant Logic (FID/SaaS).
• Familiarity with CI/CD pipelines and Infrastructure‑as‑Code tools (e.g., Terraform).
• Experience with Microsoft Entra Conditional Access and Entra Connect.
• Knowledge of Privileged Access Management (PAM) solutions.
• Strong understanding of authentication and authorization principles.
• Experience with ITSM platforms (ServiceNow).
• Hands‑on knowledge of SSO and federation standards (SAML 2.0, OAuth 2.0, OIDC).
• Proven troubleshooting skills grounded in engineering best practices.
• Familiarity with Agile methodologies (Scrum, SAFe, Kanban).
• Experience with monitoring platforms and tuning alerts for performance, availability, and connectivity.
• Broad systems engineering experience including DNS, DHCP, TCP/IP, clustering, SIEM, IIS/Tomcat, virtualization (VMware/Hyper‑V), and load balancing (F5, NLB, ALB).

We offer you a competitive total rewards package, continuing education & training, and tremendous potential with a growing worldwide organization.