Specialist Technology Engineer (IAM) – Active Directory

Talent et au-dela; Hyderabad; On-site; INR 1,800,000 - 2,400,000; Full time

Job summary

Talent et au-dela in Hyderabad is seeking an experienced Specialist - Technology Engineer (IAM) focused on on-premises Active Directory and hybrid identity with Entra ID support. The role emphasizes operational reliability, security, and incident remediation for a large directory services environment.

You will maintain AD health, apply least-privilege controls, and collaborate with application teams to ensure secure identity services across critical systems.

Qualifications

• BE / BTech with 8-10 years of hands-on experience administering and maintaining Microsoft Active Directory.
• Understanding of AD objects, domains, forests, OUs, groups and accounts.
• Experience with domain controller health, directory services operations, GPOs, and troubleshooting.
• Knowledge of Kerberos, NTLM and LDAP authentication protocols.

Responsibilities

• Administer and maintain Active Directory domains, forests, OUs, groups, user and computer accounts.
• Monitor domain controller health, directory service availability, replication, and performance.
• Manage Group Policy Objects and directory configuration.
• Support authentication protocols and troubleshoot related issues (Kerberos/NTLM/LDAP).
• Perform routine maintenance, health checks, and operational hygiene for AD services.
• Identify and remediate directory-related vulnerabilities in collaboration with teams.
• Support hybrid identity integration with Microsoft Entra ID and on-premises AD.
• Maintain operational documentation and assist with backup/recovery for directory services.

Skills

Active Directory administration

Group Policy

Kerberos

NTLM

LDAP

PowerShell scripting

Hybrid identity

Monitoring & troubleshooting

Security best practices

Education

BE / BTech

Tools

PowerShell

Microsoft Entra ID

Azure

Job description

Specialist - Technology Engineer (IAM) – Active Directory

Position Summary

The Specialist, Technology Engineer (IAM) supports the availability, health, maintenance, and security of Nationwide’s directory and identity infrastructure. The role is primarily operational, with a strong focus on on-premises Microsoft Active Directory and supporting hybrid identity capabilities with Microsoft Entra ID. The associate helps maintain critical directory services, remediate vulnerabilities, support application teams, and ensure the reliability and security of identity services serving a large enterprise environment.

Key Responsibilities

• Administer and maintain Active Directory domains, forests, organizational units (OUs), groups, user accounts, computer accounts, and directory objects.
• Monitor domain controller health, directory service availability, replication, and performance; investigate and resolve operational issues.
• Manage and support Group Policy Objects (GPOs), directory configuration, and related identity infrastructure.
• Support authentication and directory protocols, including Kerberos, NTLM, and LDAP, and troubleshoot related issues.
• Perform routine maintenance, health checks, reporting, and operational hygiene for Active Directory services.
• Identify, assess, and remediate directory-related vulnerabilities and security risks in collaboration with relevant teams.
• Support application and infrastructure teams that depend on directory services; investigate and resolve directory-related incidents and service issues.
• Support hybrid identity integration and synchronization between on-premises Active Directory and Microsoft Entra ID.
• Follow identity security practices, including least privilege, separation of duties, privileged access controls, and secure configuration standards.
• Maintain operational documentation, procedures, and configuration records.
• Support backup, recovery, and disaster recovery activities for directory services as required.

Qualification Criteria

Required Skills and Experience

• BE / BTech with 8 - 10 years of Hands-on experience administering and maintaining Microsoft Active Directory in an enterprise environment.
• Practical understanding of Active Directory objects and structure, including domains, forests, OUs, groups, and accounts.
• Experience supporting domain controller health, directory service operations, Group Policy, and troubleshooting.
• Understanding of authentication and directory protocols such as Kerberos, NTLM, and LDAP.
• Working knowledge of cybersecurity fundamentals relevant to identity infrastructure, including least privilege, separation of duties, patching, and vulnerability remediation.
• Ability to investigate operational issues, perform routine maintenance, and support business-critical services.

Strongly Preferred Skills

• PowerShell scripting experience, including building and executing scripts for administrative tasks and automation. This is a strong preference and close to a must-have but should not automatically disqualify an otherwise suitable Active Directory candidate.
• Experience with Microsoft Entra ID and hybrid identity synchronization.
• Experience supporting enterprise-scale directory environments serving a large employee and contractor population.
• Exposure to identity stores, non-human identities (NHIs), or the use of AI/agents in relevant operational workflows.

Additional Information

Role Context

This is a run/operations-focused role rather than a project-build position. The immediate priority is strong Active Directory capability; Microsoft Entra ID experience is beneficial but can be learned on the job. The associate will help maintain critical identity services and support routine operations, risk remediation, service health, and application-team needs.

Additional / Nice-to-Have Knowledge

• Active Directory Forest recovery and disaster recovery approaches.
• Microsoft Defender, Conditional Access, Privileged Identity Management (PIM), and related identity security controls.
• Cloud platforms such as Azure or AWS.
• PowerShell automation and operational reporting.