Entra ID

Tata Consultancy Services; Hyderabad; On-site; INR 1,500,000 - 2,300,000; Full time

Job summary

Tata Consultancy Services is seeking an IAM engineer to manage Microsoft Entra ID (Azure AD) and related security services in hybrid environments. You will configure, deploy, and troubleshoot Entra equivalents, maintain synchronization between on-prem AD and Entra ID, and govern application access for enterprise apps.

Responsibilities include designing conditional access policies, MFA/SSPR configurations, RBAC/ABAC, and building automation with PowerShell, Microsoft Graph API, Logic Apps, and

Qualifications

• Experience administering Microsoft Entra ID/Azure AD and related synchronization services.
• Experience with Entra Connect Sync and Entra Cloud Sync in hybrid environments.
• Knowledge of application provisioning and API permissions for enterprise apps.

Responsibilities

• Manage and administer Microsoft Entra ID (Azure AD) including users, groups, roles.
• Configure, deploy, and troubleshoot Entra Connect Sync (AD to Entra ID synchronization).
• Configure, deploy, and troubleshoot Entra Cloud Sync for multi-forest and hybrid environments.
• Plan and execute migration from Entra Connect Sync to Cloud Sync.
• Onboard, configure, and manage Enterprise Applications and App Registrations in Entra ID.
• Perform Admin Consent and manage API permissions for enterprise applications.
• Configure authentication using SAML, OAuth 2.0, OIDC, and SCIM provisioning.
• Design and implement Identity Lifecycle Management and governance workflows.
• Configure and manage Privileged Identity Management and Just-in-Time access.

Skills

Azure AD

Identity Governance

Zero Trust

RBAC/ABAC

Tools

Microsoft Graph API

PowerShell

Logic Apps

Power Automate

SAML

OIDC/OpenID Connect

SCIM provisioning

Job description

• Manage and administer Microsoft Entra ID (Azure AD) including users, groups, roles.
• Configure, deploy, and troubleshoot Microsoft Entra Connect Sync (AD to Entra ID synchronization).
• Configure, deploy, and troubleshoot Microsoft Entra Cloud Sync for multi-forest and hybrid environments.
• Manage sync scope filtering, OU filtering, attribute mapping, and sync error resolution.
• Plan and execute migration from Entra Connect Sync to Cloud Sync.
• Onboard, configure, and manage Enterprise Applications and App Registrations in Entra ID.
• Perform Admin Consent and manage API permissions for enterprise applications.
• Configure application authentication using SAML, OAuth 2.0, OpenID Connect, and SCIM provisioning.
• Design and implement Identity Lifecycle Management (Joiner-Mover-Leaver process).
• Implement and manage Identity Governance – Access Reviews, Entitlement Management, and Lifecycle Workflows.
• Configure and manage Privileged Identity Management (PIM) and Just-in-Time access.
• Design and enforce Conditional Access Policies and MFA/SSPR configurations.
• Configure Identity Protection and manage risk-based sign-in/user policies.
• Develop automation scripts using PowerShell for user/app lifecycle and reporting tasks.
• Build automation workflows using Microsoft Graph API, Azure Automation, Logic Apps, and Power Automate.
• Automate provisioning/de-provisioning and self-service access request processes.
• Monitor Entra ID sign-in logs, audit logs, and sync health for troubleshooting.
• Support RBAC/ABAC implementation and least-privilege access enforcement.
• Provide L2/L3 support for IAM-related incidents and escalations.
• Support Zero Trust security architecture implementation across identity infrastructure.
• Maintain documentation for IAM processes, configurations, and automation scripts.
• Ensure compliance with audit, regulatory, and security requirements related to identity management.