Manager - IT Operations & Infrastructure

Tata Communications; Pune District; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

Tata Communications is looking for a professional to manage Core AD Management tasks, ensuring high availability and performance of Active Directory services. You will support multi-domain environments, handle complex incidents, and ensure security compliance.

The ideal candidate will have solid experience in Active Directory, Group Policy management, and automation scripting, along with relevant Microsoft certifications. This role requires analytical skills and the ability to collaborate effectively across teams.

Qualifications

• Strong expertise in Active Directory management and support.
• Deep understanding of AD replication and Kerberos authentication.
• Experience with Azure AD / Entra ID integration.

Responsibilities

• Manage and support Active Directory Domain Services in multi-domain environments.
• Handle Group Policy design and troubleshooting for L3/L4 support.
• Perform root cause analysis and implement fixes for complex AD issues.

Skills

Active Directory (AD DS)

Group Policy

DNS (Windows-based)

PowerShell scripting

Kerberos authentication

Education

Microsoft Certifications (e.g., SC-300)

ITIL Certified

Tools

AD Replication tools (repadmin, dcdiag)

Active Directory Administrative Center

DNS Manager

Monitoring tools

Job description

Core AD Management

• Manage and support Active Directory Domain Services (AD DS) in multi-domain/multi-forest environments
• Perform forest/domain design, schema management, and trust relationships
• Handle Group Policy design, deployment, and troubleshooting L3/L4 Support Troubleshooting
• Act as escalation point for complex AD issues (replication, authentication, DNS, Kerberos)
• Perform root cause analysis (RCA) and implement permanent fixes
• Troubleshoot:
  • AD replication failures
  • GPO inconsistencies
  • Login/authentication issues
  • Domain controller performance
• Infrastructure Core Services
• Manage:
  • Domain Controllers (physical/virtual/cloud)
  • DNS (integrated with AD)
  • DHCP integration (if applicable)
• Perform AD health checks and audits Security Compliance
• Implement AD security best practices:
  • Tiered administration model
  • Privileged access management (PAM)
  • Secure domain controllers
• Manage:
  • Security groups
  • Delegation models
  • Access controls
• Directory Services Enhancements
• Support hybrid identity:
  • Azure AD / Entra ID integration
  • Azure AD Connect
• Implement:
  • SSO (Single Sign-On)
  • MFA integrations
• Automation Optimization
• Develop automation using:
  • PowerShell scripting
• Improve system reliability and reduce manual interventions Change Incident Management
• Participate in:
  • CAB meetings
  • Change implementation
• Maintain documentation, SOPs, and runbooks Technical Skills Must-Have Skills
• Strong expertise in:
  • Active Directory (AD DS)
  • Group Policy
  • DNS (Windows-based)
• Deep understanding of:
  • AD replication
  • Kerberos authentication
  • LDAP Advanced Skills (L4 Expectation)
• AD Forest/Domain migrations
• Disaster recovery for AD (authoritative/non-authoritative restore)
• AD site topology design
• Security hardening (CIS benchmarks preferred)
• Good to Have:
  • Azure AD / Entra ID
  • Azure AD Connect
  • Identity Federation (ADFS)
  • M365 Identity integration
  • Certificates (AD CS)
  • SCCM / Intune integration
• Tools Technologies:
  • PowerShell scripting
  • Active Directory Administrative Center
  • AD Replication tools (repadmin, dcdiag)
  • DNS Manager
  • Monitoring tools
• Microsoft Certifications (one or more):
  • SC-300 Identity Access Administrator
  • AZ-305 / AZ-104
  • AZ-800 AZ-801
  • MS-102 (Microsoft 365 Administrator)
  • ITIL Certified Legacy but valuable: MCSE: Identity / Server Infrastructure
  • Experience in large enterprise-scale environments
  • Experience with Red Forest / hardened identity models.
  • Knowledge of PKI, certificates, and MFA systems.
  • Automation and Scripting
  • Monitoring and Reporting
  • Maintain highly available AD infrastructure with minimal downtime.
  • Ensure zero-impact forest/domain upgrades and migrations.
  • Resolve P1/P2 tickets within SLA.
  • Automate repetitive tasks reduce manual interventions by 4060%.
  • Conduct monthly AD health and security reports.
  • Implement secure baselines and eliminate high-risk findings.

Optional Add-ons (Customize if needed)

• On-call / 24x7 support requirement
• Shift-based support
• Global infrastructure support

Behavioural Skills

• High availability and performance of AD services
• Zero/Minimal unplanned downtime
• Timely resolution of L3/L4 incidents
• Secure and compliant AD infrastructure
• Ability to lead crisis troubleshooting and restore services quickly.
• Strong documentation, architecture diagramming, and SOP creation.
• Cross-team collaboration (Security, Network, Apps, Cloud).
• Mentorship for junior engineers.
• Ability to handle on-call rotation and critical outages.
• Strong analytical and problem-solving mindset.