Jr Team Member - IT Operations & Infrastructure Professional

Tata Communications Limited; Pune District; On-site; INR 1,800,000 - 2,800,000; Full time

Job summary

Tata Communications Limited is seeking a Senior Microsoft 365 and Entra ID administrator to manage identity services across Exchange Online, SharePoint Online, Teams and OneDrive from an identity perspective.

You will configure and monitor MFA, Conditional Access, RBAC, and app registrations, and develop PowerShell scripts for automation and reporting, ensuring secure, compliant access across our Microsoft 365 environment.

Qualifications

• Experience managing Microsoft 365 identity services (Entra ID) and related apps.
• Ability to troubleshoot M365-AD, Exchange Online, Teams, SharePoint and OneDrive issues.
• Experience implementing MFA, Conditional Access, RBAC and identity governance.

Responsibilities

• Manage and administer Microsoft 365 identity services and Azure Entra ID.
• Administer users, groups, roles, and conditional access policies in Entra ID.
• Create, register, and configure applications in Azure Entra ID.
• Manage app permissions, client secrets, certificates, and API scopes.
• Integrate third-party and internal applications using SAML, OAuth2.0, and OpenID Connect.
• Implement and monitor Conditional Access policies and access governance.
• Maintain RBAC, dynamic groups, and self-service capabilities.
• Review and manage enterprise applications and service principals.
• Conduct periodic access reviews and identity lifecycle operations.

Skills

Identity and access management

Cross-functional collaboration

Tools

PowerShell

Microsoft Graph API

Azure AD Connect

MSOnline/AzureAD modules

OAuth2/OpenID Connect

Job description

• Manage and administer Microsoft 365 identity services and Azure Entra ID
• Administer users, groups, roles, and conditional access policies in Entra ID
• Should have a good experience in troubleshooting issues of M365-AD, Exchange Online, MS Teams, SharePoint, OneDrive, MFA, SSO and MDM Issues, SMTP Relay, DNS, AD Connect Sync, Scripting (PowerShell)
• Implement and maintain identity protection and multi-factor authentication (MFA)
• Create, register, and configure applications in Azure Entra ID
• Manage app permissions, client secrets, certificates, and API scopes
• Integrate third-party and internal applications using SAML, OAuth2.0, and OpenID Connect
• Implement and monitor Conditional Access policies and access governance
• Maintain role-based access control (RBAC), dynamic groups, and self-service capabilities
• Review and manage enterprise applications and service principals
• Conduct periodic access reviews and identity lifecycle operations
• Install, configure, and monitor Azure AD Connect for hybrid identity
• Troubleshoot synchronization issues, sign-in problems, and service connectivity
• Implement OU filtering and scoping in AD Connect
• Administrative Exchange Online, SharePoint Online, Teams, OneDrive from an identity perspective
• Handle license assignments, user provisioning, and service access
• Enforce compliance configurations like data loss prevention (DLP) and retention policies
• Monitor service health, sign-in logs, audit logs, and usage reports
• Respond to security alerts and incidents related to identity and access
• Generate reports for usage, access, and compliance using PowerShell and Microsoft Graph API
• Develop PowerShell scripts for automation, provisioning, and bulk management
• Support audits by providing accurate and up-to-date identity and access documentation
• Collaborate with security and application teams to align configurations with policies and security posture
• prevention, retention policies, audit logs, and secure score
• Experience with Microsoft Purview Compliance Portal for managing data lifecycle and regulatory compliance
• Proficiency in configuring and managing eDiscovery cases, holds, and content searches
• Understanding of Insider Risk Management, Communication Compliance, and Information Governance in Microsoft 365
• Experience with monitoring tools like Microsoft 365 Admin Center, Azure Monitor, and Log Analytics
• Expertise in Microsoft 365 administration including Exchange Online, SharePoint Online, Teams, OneDrive, and Intune
• Proficiency in Azure Entra ID (formerly Azure Active Directory) covering user and group management, RBAC, Conditional Access, and Identity Protection
• Deep understanding of app registration in Entra ID including OAuth2.0, OpenID Connect, and SAML configurations
• Experience managing enterprise applications, service principals, and API permission models in Azure Entra ID
• Strong knowledge of certificate and client secret management, including expiration tracking and rotation
• Hands-on experience with Azure AD Connect including installation, configuration, synchronization rules, filtering (OU/attribute), staging mode, and troubleshooting
• Advanced PowerShell scripting skills using MSOnline, AzureAD, and Microsoft Graph modules for automation, reporting, and bulk operations
• Proficient in using Microsoft Graph API for querying and managing directory objects and service configurations
• Familiarity with Privileged Identity Management (PIM) for just-in-time access and role elevation
• Experience implementing and analyzing Conditional Access policies and MFA for secure authentication flows
• Skilled in analyzing audit logs, sign-in logs, and service health reports from Microsoft 365 and Entra ID
• Comfortable using monitoring tools such as Microsoft 365 Admin Center, Azure Monitor, and Log Analytics