Lead Identity Engineer - Active Directory & Microsoft Entra

Simeio; Bengaluru; On-site; INR 2,000,000 - 3,200,000; Full time

Job summary

Simeio is seeking an Active Directory & Microsoft Entra Engineer in Bengaluru to design, implement, administer, and support enterprise identity services across on-premises and cloud environments. This role centers on Active Directory, Entra ID, and Azure AD Connect, with strong PowerShell scripting to drive automation and security.

The candidate should have 5-8 years of hands-on experience, deep LDAP knowledge, and experience with identity governance, RBAC, and SSO.

Qualifications

• 5–8 years of hands-on experience managing Active Directory in large-scale enterprise environments.
• Strong hands-on experience with Microsoft Entra ID (Azure AD) administration and hybrid identity architectures.
• Deep understanding of Active Directory architecture, Group Policy, DNS, Sites and Services, and replication.
• Advanced PowerShell scripting expertise with automation and process optimization.
• Experience with LDAP, directory schema, queries, and application integrations.

Responsibilities

• Design, deploy, and maintain Active Directory and Microsoft Entra ID environments.
• Manage directory services: users, groups, OUs, GPOs, and identity governance processes.
• Administer and support Azure AD Connect and hybrid identity solutions.
• Develop automated admin tasks via PowerShell scripting.
• Troubleshoot authentication, authorization, and directory synchronization issues.
• Implement LDAP integrations with enterprise apps and third-party platforms.
• Maintain identity security controls: Conditional Access, MFA, PIM, and access reviews.
• Monitor directory health, performance and availability; adhere to ops standards.
• Collaborate with infrastructure, security and app teams on identity-related projects.
• Support application onboarding, SSO integrations, and access management initiatives.
• Develop and maintain technical docs and support guides.
• Participate in incident management, problem resolution, and change management.

Skills

Active Directory

Microsoft Entra ID

PowerShell scripting

LDAP

Azure AD Connect

RBAC/Identity governance

Job description

About the Role:

The Active Directory & Microsoft Entra Engineer is responsible for the design, implementation, administration, and support of enterprise identity services across on-premises and cloud environments. This role focuses on Active Directory, Microsoft Entra ID (Azure AD), directory synchronization, identity lifecycle management, and infrastructure automation. The engineer will leverage strong PowerShell scripting and LDAP expertise to enhance operational efficiency, maintain secure identity platforms, and support business-critical authentication and authorization services.

What You'll Do:

• Design, deploy, and maintain Active Directory and Microsoft Entra ID environments.
• Manage directory services, including users, groups, organizational units, group policies, and identity governance processes.
• Administer and support Microsoft Entra Connect (Azure AD Connect) and hybrid identity solutions.
• Develop, maintain, and automate administrative tasks using PowerShell scripting.
• Troubleshoot complex authentication, authorization, and directory synchronization issues.
• Implement and support LDAP integrations with enterprise applications and third-party platforms.
• Maintain identity security controls, including Conditional Access, MFA, Privileged Identity Management (PIM), and access reviews.
• Monitor directory health, performance, and availability, ensuring adherence to operational standards.
• Collaborate with infrastructure, security, and application teams to deliver identity-related projects and enhancements.
• Support application onboarding, SSO integrations, and access management initiatives.
• Develop and maintain technical documentation, operational procedures, and support guides.
• Participate in incident management, problem resolution, and change management activities.
• Provide escalation support for identity-related production issues and participate in on-call rotations as required.
• Ensure compliance with organizational security policies and industry best practices.

What You Bring:

• 5-8 years of hand-on experience managing Active Directory in large-scale enterprise environments.
• Strong hand-on experience with Microsoft Entra ID (Azure AD) administration and hybrid identity architectures.
• Deep understanding of Active Directory architecture, Group Policy, DNS, Sites and Services, and replication.
• Strong PowerShell scripting expertise with experience in automation and process optimization.
• Advanced knowledge of LDAP, directory schema, queries, and application integrations.
• Experience with Microsoft Entra Connect (Azure AD Connect), synchronization, and federation services.
• Hands-on experience with identity and access management concepts, including SSO, MFA, Conditional Access, and RBAC.
• Experience supporting Windows Server environments related to directory services.
• Strong troubleshooting skills across authentication protocols such as Kerberos, NTLM, SAML, OAuth, and OpenID Connect.
• Familiarity with security monitoring, auditing, and directory hardening best practices.
• Experience working in enterprise environments with ITIL-based service management processes.
• Excellent communication, documentation, and stakeholder management skills.

Nice to Have:

• Experience with Microsoft Identity Manager (MIM) or similar identity governance platforms.
• Knowledge of Entra ID Governance, Privileged Identity Management (PIM), and Identity Protection.
• Experience with cloud platforms such as Microsoft Azure.
• Familiarity with Infrastructure as Code (IaC) and automation frameworks.
• Relevant Microsoft certifications (e.g., Microsoft Certified: Identity and Access Administrator Associate).

About Simeio and What We Do

Simeio has over 650 talented employees across the globe. We have offices in USA (Atlanta HQ and Texas), India, Canada, Costa Rica and UK.

Founded in 2007, and now backed by private equity company ZMC, Simeio is recognized as a top IAM provider by industry analysts.

Alongside Simeio's identity orchestration tool Simeio IO, Simeio partners with industry-leading IAM software vendors to provide access management, identity governance and administration, privileged access management, and risk intelligence services across on-premises, cloud, and hybrid technology environments.

Simeio provides services to numerous Fortune 1000 companies across all industries including financial services, technology, healthcare, media, retail, public sector, utilities, and education.

Diversity & Inclusion

Simeio is an equal opportunity employer. If you require assistance with completing this application, interviewing, completing any pre-employment testing, or otherwise participating in the employee selection process, please direct your inquiries to our recruitment team [e-mail].

About Your Application

We carefully review every application we receive. If your skills and experience match our needs, we'll be in touch. If you don't hear from us within 10 days, please don't be discouraged. We may retain your application for future opportunities, and we encourage you to check our careers page for other openings.

Simeio is an equal opportunity employer. If you require assistance with completing this application, interviewing, completing any pre-employment testing, or otherwise participating in the employee selection process, please direct your inquiries to any of the recruitment team at [e-mail] or [phone].