IAM Engineer

Ericsson; Bengaluru; On-site; INR 2,000,000 - 3,600,000; Full time

Job summary

Ericsson AB in Bengaluru is seeking an IAM Active Directory Engineer to provide 24x7 support and manage AD infrastructure across Hyper-V, on‑prem, and cloud environments (Azure/AWS). You will handle incident management, patching, vulnerability management, and AD domain operations, with PowerShell scripting and Azure AD Connect expertise.

This role requires 7+ years of IAM AD operations experience and a Graduate in Computer Science.

Qualifications

• Graduate in Computer Science or a related field.
• 7+ years of experience in core IAM AD Operations.
• Experience with multi-domain Active Directory and AD connectivity.

Responsibilities

• Provide 24x7 Active Directory operations and incident management.
• Patch management, vulnerability management, and security monitoring.
• Manage AD replication, DNS, and GPO in complex environments.
• Work with Azure AD Connect synchronization and cloud integrations.
• Collaborate with security teams on vulnerabilities and remediation.

Skills

Active Directory operations

Incident management

Capacity planning

IAM/PAM concepts

Troubleshooting

Education

Graduation in Computer Science

Tools

PowerShell scripting

Azure AD Connect

MS SCOM

Remedy

VMware/Hyper-V

Job description

Join our Team

Our Exciting Opportunity

We are now looking for IAM Active Directory Engineer. This job role is responsible for 24X7 support & management of Active Directory infrastructure hosted on Hyper-V, HPE Hyper Converged Solution, Azure and AWS. Execution of reactive maintenance activities to ensure that services provided to customers are continuously available and performing to Service Level Agreement (SLA) performance levels.

You will,

Support the following systems and functions:

• Part of core IAM – Active Directory Operations Team 24*7 Shift
• Incident Management
• Patch Management & Vulnerability Management

To be successful in this role, you must have:

• Experience in core MS Active Directory in multi domain environment.
• Reporting and review of all connectivity, synchronization, replication within Active Directory.
• Monitoring/reporting/reviewing all metrics and changes around netlogon, NTDS Database partitions, DNS settings, SRV records, Trust relationships.
• Perform capacity planning, upgrades and expansion of Active Directory environment
• Creation and Modification of PowerShell scripting related to Active directory.
• Review of domain controllers, application, and security events to find any issues or trends.
• DNS, GPO management, knowledge of FSMO roles, Replication Issues, AD ports requirement for replication, SYSVOL architecture, Fine Grained Password Policies, Domain Controllers Promotion / Demotion.
• Demonstrated experience with High Availability, Disaster Recovery, and Service Continuity process and planning.
• Good understanding of Identity Access Management solutions / Privileged Access Management solutions.
• Hands on experience on AWS/Azure/GCP IaaS.
• Exposure on Hyper-V Converged solution running on VMWare Platform.
• Knowledge and hands on experience on Azure Log Analytics, Azure Threat Protection, Cloud App Security, Azure Arc, Azure Data Explorer, Microsoft Entra Privileged Identity Management, Azure SSPR, Azure Password Protection.
• Must have hands‑on experience on managing Azure AD connect server synchronization.
• Experience on handling synchronization issues on Azure AD Connect and troubleshoot.
• BMC Remedy Monitoring/Ticketing tool.
• Work with security teams to respond to emergency or critical vulnerabilities, patching or changes as required
• Participate in the identification of vulnerabilities and their mitigation
• Experience in monitoring tools like MS SCOM, HPE OneView
• Categorization of the vulnerabilities of legacy protocols like SSL/TLS and fixing them and also fixing the vulnerabilities for RC4, DES, 3DES, SSL, TLS, Diffie-Hellman etc.
• Support analysis of IAM configuration and policies to identify security and operational gaps.
• Review and govern the services-based Integration of role-based access control, Active Directory, LDAP, Single Sign-On, End-User provisioning, identity and access governance, and identity data synchronization services with existing applications and systems.
• Support security related assessments and configurations for IAM & PAM platforms, adaptive risk configurations and Multifactor authentications.

Key Qualifications

Education: Graduate in Computer Science or similar

Minimum years of relevant experience: 7+ years of experience in handling core IAM AD Operations stuff.

“All academic credentials must be from recognized and accredited institutions and are further subject to verification.”

Why join Ericsson?

At Ericsson, you´ll have an outstanding opportunity. The chance to use your skills and imagination to push the boundaries of what´s possible. To build solutions never seen before to some of the world’s toughest problems. You´ll be challenged, but you won’t be alone. You´ll be joining a team of diverse innovators, all driven to go beyond the status quo to craft what comes next.

Encouraging a diverse and inclusive organization is core to our values at Ericsson, that's why we champion it in everything we do. We truly believe that by collaborating with people with different experiences we drive innovation, which is essential for our future growth. We encourage people from all backgrounds to apply and realize their full potential as part of our Ericsson team. Ericsson is proud to be an Equal Opportunity Employer. learn more.

Primary country and city: India (IN) || Bangalore