EUC architect

Tata Consultancy Services; Pune District; On-site; INR 3,500,000 - 5,500,000; Full time

Job summary

Tata Consultancy Services in India seeks an experienced Senior AD Architect to design and govern enterprise Active Directory across multiple domains and sites. You will own OU/GPO standards, trust models, FSMO roles, and Sites & Services while driving security baselines and compliance.

You will lead incident response, change management, migrations, and modernization under CAB governance, provide technical leadership, mentoring, and ensure DR readiness with validated recovery.

Qualifications

• Minimum 10 years of experience in AD design and governance.
• Own multi-domain, multi-site AD design with OU/GPO standards.
• Expertise in security baselines, privileged access controls, and remediation.
• Experience administering Exchange across On-Prem/Hybrid/Online.
• Proficient in PKI, Kerberos, LDAP, NTLM, and trust relationships.
• Strong incident, change, and transformation governance.
• Proven DR planning, resilience testing, and technical leadership.
• Advanced Windows Server administration (2012–2022).

Responsibilities

• Design and govern enterprise AD across multiple domains and sites.
• Define OU/GPO standards, trust models, and FSMO role allocation.
• Implement and monitor security baselines, privileged access controls, and vulnerability remediation.
• Administer Exchange platforms (On-Prem/Hybrid/Online) including mail flow security.
• Operate Enterprise PKI, certificate lifecycle, and identity services.
• Lead CAB-driven upgrades, migrations, and modernization efforts.
• Provide technical leadership, documentation, and mentoring to teams.
• Ensure DR readiness and validate recovery processes.

Skills

Active Directory Architecture

AD Governance

Security & Compliance

Exchange Admin

PKI & Identity

Incident & Change Mgmt

Windows Server Admin

Leadership & Mentoring

Documentation

Group Policy

DNS & DHCP

PowerShell Scripting

High Availability & DR

Backup & Restore

Job description

Desired Competencies (Technical/Behavioral Competency)

Must-Have

• Minimum 10 years of experience.
• Active Directory Architecture & Governance – Own multi domain, multi site AD design, OU/GPO standards, Trust models, FSMO roles, and Sites & Services.
• Security, Hardening & Compliance – Implement AD and Messaging security baselines, Privileged access controls, and remediate Security vulnerabilities and Audit findings.
• Exchange & Messaging Platforms – Administration of Exchange (On Prem/Hybrid/Online) architecture, Operations, Mail flow security, and Compliance configurations.
• PKI & Identity Services – Operate Enterprise PKI, Certificate lifecycle, and Core identity services (Kerberos, LDAP, NTLM, trusts).
• Incident, Change & Transformation – Manage RCAs, Upgrades, Migrations, and Modernization under CAB/Change Governance.
• DR, Resilience & Technical Leadership – Support Resilience, DR Switchovers, validate recovery, and provide Technical leadership, Documentation, and Mentoring.
• Advanced administration of Windows Server environments- (2012/2016/2019/2022).

Good-to-Have

• Deep knowledge of Group Policy (GPO), DNS, DHCP, and identity management.
• Experience in High availability, Disaster Recovery(DR), and AD backup/restore strategies.
• Familiarity with PowerShell scripting for automation and operational efficiency.