IT Analyst - Identity and Access Management (IAM) and Cybersecurity

Johnson Controls Ltd; Bengaluru; On-site; INR 180,000 - 300,000; Full time

Job summary

Johnson Controls Ltd in Bengaluru is offering an IT Analyst internship in IAM/Cybersecurity, gaining hands-on exposure to identity and access management and Active Directory.

You will assist with AD administration, Domain Controller lifecycle, GPOs, patching, vulnerability management, DR activities, and incident response under supervision, working alongside experienced professionals.

Qualifications

• Pursuing a master's degree in CS or Information Security.
• Familiar with Python, PowerShell and networking concepts.
• Understanding of Windows Server, Active Directory, DNS, authentication and authorization concepts.

Responsibilities

• Support Microsoft Active Directory administration and user/group management.
• Assist with Domain Controller health checks, upgrades, and replication validation.
• Participate in Domain Controller promotion/demotion following procedures.
• Support AD Sites and Services configuration and site migrations.
• Assist with privileged access governance and least-privilege enforcement.
• Contribute to MFA and PAM implementation and policy enforcement.
• Help manage GPOs aligned with security baselines and operational needs.
• Assist in Windows patching, pre-checks, deployment, and post-patch validation.
• Support vulnerability management activities and remediation tracking.
• Assist in Disaster Recovery exercises for AD and IAM services.
• Monitor security events and respond to incidents under supervision.

Skills

Python scripting

PowerShell

Networking concepts

Active Directory

Windows Server

Analytical skills

Communication skills

Teamwork

Education

M.Tech/M.Sc in Computer Science / Info Security

Tools

Qualys

Tenable

Rapid7

Microsoft Defender Vulnerability Management

Job description

Role Overview

Associate Analyst Job Code: Job Code Name: IT Analyst Region: APAC Country: India Grade : 170

As a IT Analyst in IAM/Cybersecurity, you will work alongside experienced professionals to support the design, implementation, and operation of enterprise identity and access management and Active Directory solutions. This internship is designed to provide hands‑on exposure to IAM technologies, Windows directory services, cybersecurity operations, vulnerability management, disaster recovery, and real‑world business challenges.

Key Responsibilities

• Support Microsoft Active Directory administration, including user and group management, Organizational Unit (OU) administration, security groups, delegated permissions, and directory services operations.
• Assist with Domain Controller lifecycle activities, including health monitoring, upgrades, decommissioning, replication validation, and troubleshooting.
• Participate in Domain Controller promotion and demotion activities, following approved change, security, testing, and validation procedures.
• Support Active Directory Sites and Services administration, including site and subnet configuration, replication topology review, and site migration activities.
• Assist with Domain Administrator (DA) role administration, privileged account governance, access reviews, and adherence to least‑privilege requirements.
• Support the implementation and administration of security controls such as Multi‑Factor Authentication (MFA), privileged access management, and policy enforcement.
• Assist in creating, testing, deploying, and troubleshooting Group Policy Objects (GPOs) aligned with enterprise security baselines and operational requirements.
• Support Windows server and identity infrastructure patching activities, including pre‑checks, deployment coordination, post‑patch validation, and documentation.
• Participate in vulnerability management activities, including reviewing findings, supporting remediation, validating closure, and maintaining evidence for reporting and compliance.
• Support Disaster Recovery (DR) exercises for Active Directory and IAM services, including preparation, execution, service restoration validation, issue documentation, and follow‑up actions.
• Participate in monitoring system logs, analyzing security events, and responding to incidents under supervision.
• Collaborate with IT, infrastructure, and security teams to troubleshoot authentication, authorization, replication, DNS, and access‑related issues.
• Help document IAM and Active Directory processes, prepare operational reports, and maintain audit and compliance records.
• Contribute to PowerShell or Python automation for identity lifecycle management, Active Directory administration, health checks, and reporting.
• Stay current on cybersecurity trends, threats, identity security practices, Windows infrastructure, and enterprise resilience concepts; participate in team knowledge‑sharing sessions.

Eligibility Criteria

• Currently pursuing a master’s degree (M.Tech/M.Sc) in Computer Science, Information Security, Cybersecurity, Information Technology, or a related field.
• Familiarity with programming or scripting languages such as Python, PowerShell & networking concepts.
• Understanding of Windows Server, Active Directory, DNS, authentication, and authorization concepts.
• Excellent analytical, communication, problem‑solving, and teamwork skills.

Preferred Skills

• Knowledge of Active Directory Domain Services, Domain Controllers, FSMO roles, DNS integration, replication, and health monitoring.
• Exposure to Domain Controller promotion, demotion, site migration, or recovery activities.
• Familiarity with Group Policy Management Console (GPMC), GPO configuration, and troubleshooting.
• Understanding of Domain Administrator role governance, privileged access management, and least‑privilege principles.
• Awareness of Windows patching, vulnerability management, remediation tracking, and validation processes.
• Exposure to vulnerability management tools such as Qualys, Tenable, Rapid7, or Microsoft Defender Vulnerability Management.
• Understanding of Disaster Recovery and Business Continuity concepts and experience supporting a DR exercise.
• Exposure to PowerShell scripting, automation, or data analysis tools.

Certifications (if any)

Microsoft, Okta, or other relevant security credentials (optional).

Equal Employment Opportunity

Johnson Controls International plc. is an equal employment opportunity and affirmative action employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, age, protected veteran status, genetic information, status as a qualified individual with a disability, or any other characteristic protected by law. For more information, please view EEO is the Law . If you are an individual with a disability and you require an accommodation during the application process, please visit www.johnsoncontrols.com/careers .

Experience Level

Experience Level Mid Level