EUC architect

Tata Consultancy Services; Chennai District; On-site; INR 3,000,000 - 4,600,000; Full time

Job summary

Tata Consultancy Services in Chennai seeks an experienced Senior AD/Exchange Architect to own multi-domain AD design, governance, and security baselines. You will manage Exchange architecture (On Prem/Hybrid/Online), PKI identities, and certificate lifecycles while guiding DR resilience and change governance.

The role requires deep Windows Server expertise (2012/2016/2022) and strong leadership to mentor teams and document best practices. Chennai on-site position with growth opportunities.

Qualifications

• Minimum 10 years of experience in AD and messaging environments.
• Deep expertise in AD architecture, governance, and multi-domain design.
• Experience with Exchange architecture and operations (On Prem/Hybrid/Online).
• Strong PKI/identity services, certificate lifecycle, and Kerberos/LDAP/NTLM knowledge.
• Experience leading RCAs, upgrades, migrations, and CAB governance.
• Proven ability to lead technical teams and document/mentor others.

Responsibilities

• Architect and govern multi-domain AD designs across sites and OU/GPO standards.
• Oversee security baselines, privileged access controls, and vulnerability remediation.
• Administer Exchange platforms and ensure mail-flow security and compliance.
• Operate Enterprise PKI and core identity services; manage certificate lifecycle.
• Lead DR/Resilience exercises, validate recoveries, and mentor junior staff.

Skills

AD architecture

OU/GPO standards

Trust models

FSMO roles

Sites & Services

Security baselines

Privileged access controls

Audit remediation

Exchange administration

Messaging security

PKI & identity services

Kerberos/LDAP/NTLM

CAB/Change governance

DR & resilience

Technical leadership

Windows Server 2012/2016/2022

PowerShell scripting

Tools

PowerShell

Job description

Desired Competencies (Technical/Behavioral Competency)

Must-Have

• Minimum 10 years of experience.
• Active Directory Architecture & Governance Own multi domain, multi site AD design, OU/GPO standards, Trust models, FSMO roles, and Sites & Services.
• Security, Hardening & Compliance – Implement AD and Messaging security baselines, Privileged access controls, and remediate Security vulnerabilities and Audit findings.
• Exchange & Messaging Platforms – Administration of Exchange (On Prem/Hybrid/Online) architecture, Operations, Mail flow security, and Compliance configurations.
• PKI & Identity Services – Operate Enterprise PKI, Certificate lifecycle, and Core identity services (Kerberos, LDAP, NTLM, trusts).
• Incident, Change & Transformation – Manage RCAs, Upgrades, Migrations, and Modernization under CAB/Change Governance.
• DR, Resilience & Technical Leadership – Support Resilience, DR Switchovers, validate recovery, and provide Technical leadership, Documentation, and Mentoring.
• Advanced administration of Windows Server environments- (2012/2016/2022).

Good-to-Have

• Deep knowledge of Group Policy (GPO), DNS, DHCP, and identity management.
• Experience in High availability, Disaster Recovery(DR), and AD backup/restore strategies.
• Familiarity with PowerShell scripting for automation and operational efficiency.