Senior Active Directory & IAM Security Engineer

Persistent Systems; Bengaluru; Híbrido; INR 2.500.000 - 4.000.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Group term life

Mediclaim hospitalization

Flexible hours

Long Service awards

Talent development

Descripción de la vacante

Persistent Systems seeks a Senior Active Directory & IAM Security Engineer to design and secure enterprise identity infrastructure across AD and Microsoft Entra ID. You will strengthen authentication, access governance, and directory security while ensuring reliability across hybrid environments.

The ideal candidate has 8–12 years of hands-on experience with AD DS, Entra ID, MFA, PIM, and SSO, and will collaborate with security, infrastructure, cloud, and application teams to implement identity

Formación

• 8–12 years of experience in AD/IAM or cybersecurity engineering.
• Hands-on with AD DS and Microsoft Entra ID.
• Experience with MFA, PIM, CA, SSO.
• Familiarity with Zero Trust and identity governance.

Responsabilidades

• Design, implement, and maintain secure Active Directory and Microsoft Entra ID environments across enterprise infrastructure.
• Assess and harden Active Directory configurations, Group Policies, authentication mechanisms, and privileged access controls.
• Implement identity lifecycle management processes including user provisioning, deprovisioning, role management, and access governance.
• Configure and manage MFA, Conditional Access policies, SSO, and identity protection controls.
• Support directory synchronization, federation services, hybrid identity architectures, and application integrations.
• Investigate and resolve authentication failures, replication issues, directory synchronization problems, and policy conflicts.
• Implement privileged access controls, administrative tiering, delegated administration, and least-privilege security models.
• Develop and maintain PowerShell automation scripts for identity administration, reporting, and operational efficiency.
• Monitor identity security posture and recommend improvements to strengthen enterprise identity resilience.
• Collaborate with cloud, infrastructure, cyber security, and application teams on identity architecture and security initiatives.
• Support audit, compliance, governance, and risk management activities through evidence collection and control validation.
• Create technical documentation, operating procedures, architecture diagrams, and security standards.
• Participate in incident response activities related to identity compromise, authentication risks, and privileged account threats.

Conocimientos

Active Directory Administration

IAM Engineering

Identity Security

Hybrid Identity Solutions

MFA & CA

PowerShell scripting

Security governance

Incident response

Educación

Bachelor's degree in CS/IT

Certifications: SC-300 / CISSP

Herramientas

Microsoft Entra ID

AD DS

Group Policy

PowerShell

Descripción del empleo

We are seeking an experienced Senior Active Directory & IAM Security Engineer to design, secure, and optimize enterprise identity infrastructure across Active Directory and Microsoft Entra ID environments. This role is responsible for strengthening authentication, access controls, identity governance, and directory security while improving operational reliability and resilience. The ideal candidate will work closely with security, infrastructure, cloud, and application teams to implement modern identity security controls and support enterprise-wide identity management initiatives.

• Role: Senior Active Directory & IAM Security Engineer
• Experience: Between 8 to 12 Years
• Job Type: Full Time Employment

What You'll Do:

• Design, implement, and maintain secure Active Directory and Microsoft Entra ID environments across enterprise infrastructure.
• Assess and harden Active Directory configurations, Group Policies, authentication mechanisms, and privileged access controls.
• Implement identity lifecycle management processes including user provisioning, deprovisioning, role management, and access governance.
• Configure and manage Multi-Factor Authentication (MFA), Conditional Access policies, Single Sign-On (SSO), and identity protection controls.
• Support directory synchronization, federation services, hybrid identity architectures, and application integrations.
• Investigate and resolve authentication failures, replication issues, directory synchronization problems, and policy conflicts.
• Implement privileged access controls, administrative tiering, delegated administration, and least-privilege security models.
• Develop and maintain PowerShell automation scripts for identity administration, reporting, and operational efficiency.
• Monitor identity security posture and recommend improvements to strengthen enterprise identity resilience.
• Collaborate with cloud, infrastructure, cyber security, and application teams on identity architecture and security initiatives.
• Support audit, compliance, governance, and risk management activities through evidence collection and control validation.
• Create technical documentation, operating procedures, architecture diagrams, and security standards.
• Participate in incident response activities related to identity compromise, authentication risks, and privileged account threats.

Expertise You'll Bring:

• 8 to 12 years of experience in Active Directory Administration, IAM Engineering, Identity Security, or Cybersecurity Engineering.
• Strong hands-on expertise in Active Directory Domain Services (AD DS), Microsoft Entra ID (Azure AD), and hybrid identity solutions.
• Extensive experience implementing and supporting Identity & Access Management (IAM) controls in enterprise environments.
• Deep understanding of authentication technologies including Kerberos, LDAP, NTLM, SAML, OAuth 2.0, and OpenID Connect.
• Experience configuring and managing Microsoft Entra ID features such as Conditional Access, Identity Protection, MFA, Privileged Identity Management (PIM), and Access Reviews.
• Strong knowledge of Active Directory security hardening, Group Policy management, AD delegation, and privileged access security.
• Experience with directory synchronization technologies including Microsoft Entra Connect and hybrid identity architectures.
• Hands-on scripting and automation experience using PowerShell and other automation tools.
• Knowledge of Windows Server security, DNS, PKI, certificate services, and identity infrastructure best practices.
• Experience investigating identity-related incidents, authentication failures, directory replication issues, and access control challenges.
• Understanding of Zero Trust security principles, identity governance, and privileged access management frameworks.
• Familiarity with security standards and regulatory frameworks such as ISO 27001, NIST, CIS Controls, SOX, and PCI-DSS.
• Strong analytical, troubleshooting, communication, stakeholder management, and documentation skills.
• Experience working in large-scale enterprise environments supporting critical identity services.
• Bachelor's degree in Computer Science, Information Technology, Cyber Security, Engineering, or a related discipline.
• Certifications such as Microsoft Certified: Identity and Access Administrator Associate (SC-300), Microsoft Security Certifications, CISSP, CISM, or Security+ are highly desirable.
• Competitive salary and benefits package
• Culture focused on talent development with quarterly growth opportunities and company-sponsored higher education and certifications
• Opportunity to work with cutting-edge technologies
• Employee engagement initiatives such as project parties, flexible work hours, and Long Service awards
• Insurance coverage: group term life, personal accident, and Mediclaim hospitalization for self, spouse, two children, and parents

Values-Driven, People-Centric & Inclusive Work Environment:

• Persistent is dedicated to fostering diversity and inclusion in the workplace. We invite applications from all qualified individuals, including those with disabilities, and regardless of gender or gender preference. We welcome diverse candidates from all backgrounds.
• We support hybrid work and flexible hours to fit diverse lifestyles.
• Our office is accessibility-friendly, with ergonomic setups and assistive technologies to support employees with physical disabilities.
• If you are a person with disabilities and have specific requirements, please inform us during the application process or at any time during your employment.

Let's unleash your full potential at Persistent - persistent.com/careers

"Persistent is an Equal Opportunity Employer and prohibits discrimination and harassment of any kind."