Senior Active Directory & IAM Security Engineer

Persistent; Bengaluru; Hybrid; INR 2,400,000 - 4,200,000; Full time

Benefits offered by this job

Competitive salary

Hybrid work option

Education sponsorship

Job summary

Persistent is hiring a Senior Active Directory & IAM Security Engineer in Bengaluru to design and secure the enterprise identity infrastructure. The role focuses on strengthening authentication, access controls, and directory security across AD and Microsoft Entra ID environments.

You will collaborate with security, cloud, and application teams to implement modern identity security controls and drive identity governance across the organization.

Qualifications

• Bachelor's degree in a technically relevant discipline is required.
• 8–12 years in Active Directory, IAM, or cybersecurity engineering roles.
• Hands-on experience with AD DS, Entra ID, and hybrid identity.
• Strong knowledge of authentication protocols (Kerberos, LDAP, SAML, OAuth).
• Experience with AD security hardening, GPOs, and privileged access management.

Responsibilities

• Design, implement, and maintain secure AD and Entra ID environments across enterprise infrastructure.
• Harden configurations, group policies, authentication mechanisms, and privileged access controls.
• Manage identity lifecycle: provisioning, deprovisioning, role management, access governance.
• Configure MFA, Conditional Access, SSO, and identity protection.

Skills

Active Directory

IAM Engineering

Identity Security

PowerShell

Group Policy

Kerberos

SAML/OAuth/OpenID Connect

Zero Trust

Troubleshooting

Education

Bachelor's degree in Computer Science/IT/Cyber Security or related

Tools

Microsoft Entra ID/Azure AD

AD DS

Entra Connect

Job description

AboutPosition:

We are seeking an experienced Senior Active Directory & IAM Security Engineer to design, secure, and optimize enterprise identity infrastructure across Active Directory and Microsoft Entra ID environments. This role is responsible for strengthening authentication, access controls, identity governance, and directory security while improving operational reliability and resilience. The ideal candidate will work closely with security, infrastructure, cloud, and application teams to implement modern identity security controls and support enterprise-wide identity management initiatives.

• Role: Senior Active Directory & IAM Security Engineer
• Location: Bengaluru
• Experience: Between 8 to 12 Years
• Job Type: Full Time Employment

WhatYou'llDo:

• Design, implement, and maintain secure Active Directory and Microsoft Entra ID environments across enterprise infrastructure.
• Assess and harden Active Directory configurations, Group Policies, authentication mechanisms, and privileged access controls.
• Implement identity lifecycle management processes including user provisioning, deprovisioning, role management, and access governance.
• Configure and manage Multi-Factor Authentication (MFA), Conditional Access policies, Single Sign-On (SSO), and identity protection controls.
• Support directory synchronization, federation services, hybrid identity architectures, and application integrations.
• Investigate and resolve authentication failures, replication issues, directory synchronization problems, and policy conflicts.
• Implement privileged access controls, administrative tiering, delegated administration, and least-privilege security models.
• Develop and maintain PowerShell automation scripts for identity administration, reporting, and operational efficiency.
• Monitor identity security posture and recommend improvements to strengthen enterprise identity resilience.
• Collaborate with cloud, infrastructure, cyber security, and application teams on identity architecture and security initiatives.
• Support audit, compliance, governance, and risk management activities through evidence collection and control validation.
• Create technical documentation, operating procedures, architecture diagrams, and security standards.
• Participate in incident response activities related to identity compromise, authentication risks, and privileged account threats.

ExpertiseYou'llBring:

• 8 to 12 years of experience in Active Directory Administration, IAM Engineering, Identity Security, or Cybersecurity Engineering.
• Strong hands-on expertise in Active Directory Domain Services (AD DS), Microsoft Entra ID (Azure AD), and hybrid identity solutions.
• Extensive experience implementing and supporting Identity & Access Management (IAM) controls in enterprise environments.
• Deep understanding of authentication technologies including Kerberos, LDAP, NTLM, SAML, OAuth 2.0, and OpenID Connect.
• Experience configuring and managing Microsoft Entra ID features such as Conditional Access, Identity Protection, MFA, Privileged Identity Management (PIM), and Access Reviews.
• Strong knowledge of Active Directory security hardening, Group Policy management, AD delegation, and privileged access security.
• Experience with directory synchronization technologies including Microsoft Entra Connect and hybrid identity architectures.
• Hands-on scripting and automation experience using PowerShell and other automation tools.
• Knowledge of Windows Server security, DNS, PKI, certificate services, and identity infrastructure best practices.
• Experience investigating identity-related incidents, authentication failures, directory replication issues, and access control challenges.
• Understanding of Zero Trust security principles, identity governance, and privileged access management frameworks.
• Familiarity with security standards and regulatory frameworks such as ISO 27001, NIST, CIS Controls, SOX, and PCI-DSS.
• Strong analytical, troubleshooting, communication, stakeholder management, and documentation skills.
• Experience working in large-scale enterprise environments supporting critical identity services.
• Bachelor's degree in Computer Science, Information Technology, Cyber Security, Engineering, or a related discipline.
• Certifications such as Microsoft Certified: Identity and Access Administrator Associate (SC-300), Microsoft Security Certifications, CISSP, CISM, or Security+ are highly desirable.

Benefits:

• Competitive salary and benefits package
• Culture focused on talent development with quarterly growth opportunities and company-sponsored higher education and certifications
• Opportunity to work with cutting-edge technologies
• Employee engagement initiatives such as project parties, flexible work hours, and Long Service awards
• Annual health check-ups
• Insurance coverage: group term life, personal accident, and Mediclaim hospitalization for self, spouse, two children, and parents

Values-Driven,People-Centric&InclusiveWorkEnvironment:

Persistent is dedicated to fostering diversity and inclusion in the workplace. We invite applications from all qualified individuals, including those with disabilities, and regardless of gender or gender preference. We welcome diverse candidates from all backgrounds.

• We support hybrid work and flexible hours to fit diverse lifestyles.
• Our office is accessibility-friendly, with ergonomic setups and assistive technologies to support employees with physical disabilities.
• If you are a person with disabilities and have specific requirements, please inform us during the application process or at any time during your employment.

"Persistent is an Equal Opportunity Employer and prohibits discrimination and harassment of any kind."