Entra ID and Azure Cloud automation Engineer

Tata Consultancy Services; Gurugram District; On-site; INR 2,500,000 - 5,000,000; Full time

Job summary

Tata Consultancy Services in Gurugram is seeking an Entra ID and Azure Cloud automation Engineer with 7–15 years of experience to lead identity platform design, deployment and governance. The role focuses on Entra ID admin, MFA, SSO, PIM, and IAM automation within a complex enterprise IT environment.

You will work with IT teams on access management, device lifecycle, Conditional Access and reporting, while driving automation via PowerShell and IAM best practices.

Qualifications

• Entra ID (Azure AD) administration: manage users, groups, roles and access policies.
• Identity Lifecycle Management: provisioning, de-provisioning, and access reviews.
• Configure and troubleshoot MFA policies and user issues.
• Support SSO integrations using SAML, OAuth, OpenID Connect, and ADFS.
• Design and troubleshoot access control based on user/device/location.
• Privileged Identity Management (PIM) – manage just-in-time access for privileged roles.
• PowerShell scripting – automate IAM tasks and troubleshooting.
• Handle escalated IAM incidents and perform root cause analysis.
• Generate reports for access logs, policy changes, and compliance checks.
• Deep understanding of Active Directory, LDAP, and Azure AD Connect.
• Familiarity with SAML, OAuth, Kerberos and other IAM protocols.
• Ensure adherence to IAM policies and standards.
• Participate in change control processes for IAM systems.
• Clear communication with internal teams and maintaining support documentation.

Responsibilities

• Add/Remove Roles: assign built-in or custom roles to users/groups as per access requests.
• Ensure PIM Activation: validate that Privileged Identity Management is enabled for eligible roles.
• Create and manage security and Microsoft 365 groups.
• Assign access to resources via group membership.
• Grant/revoke access to groups and enterprise apps based on approved requests.
• Monitor access reviews and elevate anomalies.
• Monitor device registration and compliance status.
• Troubleshoot device join issues (Azure AD Join/Hybrid Join).
• Apply predefined Conditional Access policies.
• Enable/disable MFA for users.
• Register applications on Entra ID; assign users/groups to apps for SSO.
• Handle application onboarding via ServiceNow or email.
• Respond to incidents related to access issues, MFA failures, group membership errors.
• Design and implement PIM policies; review audit logs and configure approval workflows; design dynamic group rules; implement naming conventions and lifecycle policies.

Skills

Entra ID Administration

Identity Lifecycle Management

MFA policies

SSO integrations

Access control design

Privileged Identity Management

PowerShell Scripting

IAM incidents & RCA

Access logs reporting

Active Directory/LDAP/AAD Connect

IAM protocols (SAML OAuth Kerberos)

IAM policy adherence

Change control processes

Documentation & communication

Job description

Role: Entra ID and Azure Cloud automation Engineer

Experience: 7 TO 15 years

Location: Gurgoan

Desired Competencies (Technical/Behavioral Competency)

Must-Have**

SN

Technical/Functional Skills

1

Entra ID (Azure AD) Administration: Managing users, groups, roles, and access policies in Microsoft Entra ID.

2

Identity Lifecycle Management: Handling provisioning, de-provisioning, and access reviews.

3

Configuring and troubleshooting MFA policies and user issues.

4

Supporting SSO integrations using SAML, OAuth, OpenID Connect, and ADFS.

5

Designing and troubleshooting access control based on user/device/location.

6

Privileged Identity Management (PIM) – Managing just-in-time access for privileged roles.

7

PowerShell Scripting – Automating IAM tasks and troubleshooting using PowerShell.

8

Handling escalated IAM-related incidents and performing root cause analysis.

9

Generating reports for access logs, policy changes, and compliance checks.

10

Deep understanding of Active Directory, LDAP, and Azure AD Connect.

11

Familiarity with SAML, OAuth, Kerberos, and other IAM protocols.

12

Ensuring adherence to IAM policies and standards.

13

Participating in change control processes for IAM systems.

14

Clear communication with internal teams and maintaining support documentation.

Roles and Responsibilities

L2 Support Roles and Responsibilities

Operational & Administrative Tasks

• Add/Remove Roles: Assign built-in or custom roles to users/groups as per access requests.
• Ensure PIM Activation: Validate that Privileged Identity Management is enabled for eligible roles.

Group Management

• Create and manage security and Microsoft 365 groups.
• Assign access to resources via group membership.

Access Management

• Grant/revoke access to groups and enterprise apps based on approved requests.
• Monitor access reviews and elevate anomalies.

Device Lifecycle Management

• Monitor device registration and compliance status.
• Perform basic troubleshooting for device join issues (Azure AD Join/Hybrid Join).

Conditional Access & MFA

• Apply predefined Conditional Access policies.
• Enable/disable MFA for users.
• Register applications on Entra ID.
• Assign users/groups to apps for SSO.
• Handle application onboarding using different authentication and authorization protocols requests via ServiceNow or email.

Support & Troubleshooting

• Respond to incidents related to access issues, MFA failures, group membership errors, etc.

L3 Support Roles and Responsibilities

Advanced Configuration & Design

Privileged Identity Management (PIM)

• Design and implement PIM policies.
• Review audit logs and configure approval workflows.
• Design dynamic group rules.
• Implement naming conventions and lifecycle policies.