Senior Entra ID & Active Directory Engineer

UST; Bengaluru; On-site; INR 400,000 - 700,000; Full time

Job summary

UST is seeking an experienced Senior Entra ID and Active Directory Engineer to lead directory setup, administration, and support. The role secures hybrid identity environments across on‑prem AD and Azure AD/Entra ID.

The candidate will work with RBAC, PAM, identity governance, and automation using PowerShell or Graph API to manage provisioning lifecycle and access controls. Responsibilities include monitoring and troubleshooting, applying group policies, supporting audits, and coordinating with

Qualifications

• 9 to 11 years of experience in Identity and Access Management or Directory Services engineering roles.
• Experience with RBAC, Azure AD/Entra ID, and Active Directory.

Responsibilities

• Monitor and administer on-premises AD and Azure AD/Entra ID environments.
• Implement RBAC controls for least-privilege access.
• Manage user accounts, groups, and provisioning lifecycle.
• Support identity governance processes and access reviews.
• Coordinate disaster recovery exercises and security audits.
• Automate directory administration with PowerShell or Graph API.
• Maintain CMDB records for directory assets.
• Escalate incidents and collaborate with support teams.

Skills

RBAC

Azure AD/Entra ID

Active Directory

Tools

PowerShell

Microsoft Graph API

Job description

Job Summary

We are seeking an experienced Senior Entra ID and Active Directory Engineer to serve as the primary point of contact for directory setup, administration, and support. The role focuses on securely managing hybrid identity environments across on-premises Active Directory and Azure AD/Entra ID.

Role Description

Job Summary

We are seeking an experienced Senior Entra ID and Active Directory Engineer to serve as the primary point of contact for directory setup, administration, and support. The role focuses on securely managing hybrid identity environments across on-premises Active Directory and Azure AD/Entra ID.

The successful candidate will bring proficient expertise in RBAC, Azure AD/Entra ID, and Active Directory, along with experience in PAM, identity governance, and automation using PowerShell OR Microsoft Graph API scripting. This position plays a key role in identity lifecycle management, directory security, access governance, troubleshooting, and regulatory compliance.

Key Responsibilities

• Perform day-to-day monitoring, administration, and operational support across on-premises Active Directory and Azure AD/Entra ID environments.
• Implement and maintain RBAC controls to support least-privilege access and appropriate segregation of duties.
• Create, modify, disable, and delete individual or bulk user accounts and manage group memberships.
• Administer identity provisioning and de-provisioning for joiners, movers, and leavers.
• Support identity governance processes, including access reviews and identity lifecycle controls.
• Configure and maintain Group Policies, directory security settings, and access controls in accordance with established policies.
• Support PAM processes and controls for securing and governing privileged access.
• Develop or maintain directory administration automation using PowerShell OR Microsoft Graph API scripting.
• Investigate directory-related incidents, perform root cause analysis, and track issues through resolution.
• Escalate complex directory incidents and coordinate with relevant support teams as required.
• Lead, document, and evaluate directory architecture designs and changes through the established change-control procedure.
• Maintain accurate CMDB records for directory-related assets and configuration items.
• Participate in disaster recovery exercises, security audits, and regulatory compliance reviews.
• Coordinate with Service Desk and L1 support teams on account administration and escalated password-reset issues.
• Promote secure directory administration practices aligned with least-privilege access and ISO 27001 awareness.

Required Skills

Proficient

• RBAC
• Azure AD/Entra ID
• Active Directory

Intermediate

• PAM
• Identity governance

Basic

• PowerShell OR Microsoft Graph API scripting

Experience

• 9 to 11 years of experience in Identity and Access Management or Directory Services engineering roles.

Preferred Certifications

• Microsoft Certified: Identity and Access Administrator Associate (SC-300) or an equivalent Microsoft Identity certification is preferred.

Skills

Active Directory, Entra ID, RBAC