IAM Engineer

Ericsson; Dadri; On-site; INR 2,600,000 - 4,300,000; Full time

Job summary

Ericsson in Noida, India, seeks an IAM Active Directory Engineer with 7+ years of experience to handle core Active Directory operations in a multi-domain environment. You will support 24x7 AD operations, incidents, vulnerability management and IAM governance across on-prem and cloud platforms.

Responsibilities include capacity planning, AD replication, DNS/GPO management, and Azure AD Connect synchronization.

Qualifications

• Experience in core MS Active Directory in multi-domain environment.
• Reporting and review of connectivity, synchronization, replication within Active Directory.
• Monitoring and review of metrics around netlogon, NTDS, DNS settings, SRV records, Trust relationships.
• Perform capacity planning, upgrades and expansion of Active Directory environment.
• Creation and modification of PowerShell scripting related to Active Directory.
• Review of domain controllers, events to find issues or trends.
• DNS, GPO management, knowledge of FSMO roles, replication ports, SYSVOL, Password policies.
• HA/DR/Service Continuity experience.
• IAM/PAM solutions knowledge.
• Hands-on AWS/Azure/GCP IaaS.
• Exposure to Hyper-V Converged on VMware.
• Azure tools: Log Analytics, Threat Protection, Cloud App Security, Arc, Data Explorer, Entra PIM, SSPR, Password Protection.
• Hands-on experience managing Azure AD Connect synchronization.
• Experience handling Azure AD Connect sync issues.
• Monitors using MS SCOM, HPE OneView.

Responsibilities

• Part of core IAM – Active Directory Operations Team 24x7 shift.
• Incident management and vulnerability management.
• Monitor health, replication and DNS/GPO configurations; ensure AD performance.
• Create and modify PowerShell scripts for AD-related tasks.
• Collaborate with security teams on vulnerabilities and patches.

Skills

Active Directory

PowerShell

Azure

AWS

GCP

AD Connect

Education

Graduate in Computer Science

Tools

BMC Remedy

MS SCOM

HPE OneView

Job description

Join our Team

Our Exciting Opportunity

We are now looking for IAM Active Directory Engineer. This job role is responsible for 24X7 support & management of Active Directory infrastructure hosted on Hyper-V, HPE Hyper Converged Solution, Azure and AWS. Execution of reactive maintenance activities to ensure that services provided to customers are continuously available and performing to Service Level Agreement (SLA) performance levels.

You will,

Support the following systems and functions:

• Part of core IAM – Active Directory Operations Team 24*7 Shift
• Incident Management
• Patch Management & Vulnerability Management

To be successful in this role, you must have:

• Experience in core MS Active Directory in multi domain environment.
• Reporting and review of all connectivity, synchronization, replication within Active Directory.
• Monitoring/reporting/reviewing all metrics and changes around netlogon, NTDS Database partitions, DNS settings, SRV records, Trust relationships.
• Perform capacity planning, upgrades and expansion of Active Directory environment
• Creation and Modification of PowerShell scripting related to Active directory.
• Review of domain controllers, application, and security events to find any issues or trends.
• DNS, GPO management, knowledge of FSMO roles, Replication Issues, AD ports requirement for replication, SYSVOL architecture, Fine Grained Password Policies, Domain Controllers Promotion / Demotion.
• Demonstrated experience with High Availability, Disaster Recovery, and Service Continuity process and planning.
• Good understanding of Identity Access Management solutions / Privileged Access Managementsolutions.
• Hands on experience on AWS/Azure/GCP IaaS.
• Exposure on Hyper-V Converged solution running on VMWare Platform.
• Knowledge and hands on experience on Azure Log Analytics, Azure Threat Protection, Cloud App Security, Azure Arc, Azure Data Explorer, Microsoft Entra Privileged Identity Management, Azure SSPR, Azure Password Protection.
• Must have hands-on experience on managing Azure AD connect server synchronization.
• Experience on handling synchronization issues on Azure AD Connect and troubleshoot.
• BMC Remedy Monitoring/Ticketing tool.
• Work with security teams to respond to emergency or critical vulnerabilities, patching or changes as required
• Participate in the identification of vulnerabilities and their mitigation
• Experience in monitoring tools like MS SCOM, HPE OneView
• Categorization of the vulnerabilities of legacy protocols like SSL/TLS and fixing themand alsofixing the vulnerabilities for RC4, DES, 3DES, SSL, TLS, Diffie-Hellman etc.
• Support analysis of IAM configuration and policies to identify security and operational gaps.
• Review and govern the services-based Integration of role-based access control, Active Directory, LDAP, Single Sign-On, End-User provisioning, identity and access

governance, and identity data synchronization services with existing applications and systems.

• Support security related assessments and configurations for IAM & PAM platforms, adaptive risk configurations and Multifactor authentications.

Key Qualifications:

Education: Graduate in Computer Science or similar

Minimum years of relevant experience: 7+ years of experience in handling core IAM AD Operations stuff.

"All academic credentials must be from recognized and accredited institutions and are further subject to verification."

Why join Ericsson?

At Ericsson, you´ll have an outstanding opportunity. The chance to use your skills and imagination to push the boundaries of what´s possible. To build solutions never seen before to some of the world’s toughest problems. You´ll be challenged, but you won’t be alone. You´ll be joining a team of diverse innovators, all driven to go beyond the status quo to craft what comes next.

Primary country and city: India (IN) || Noida

Req ID: 789469