System Engineer, Identity

Deltek; India; On-site; INR 2,400,000 - 4,200,000; Full time

Job summary

Deltek is seeking a senior Identity & Access Management specialist to design and operate Entra ID, Active Directory, and hybrid identity services for our global teams.

You will own authentication, access governance, SSO integrations, and automation workflows, collaborating with security, IT operations, and service desks. The role emphasizes proactive improvements, incident response, and mentoring junior staff across regions.

Qualifications

• 5+ years of experience supporting enterprise Microsoft identity environments, with hands-on depth in Entra ID (Azure AD), Active Directory, and Microsoft 365 administration.
• Advanced troubleshooting skills across identity, authentication, and access management.
• Strong understanding of directory services, group policy, DNS, and access control models (RBAC, least privilege).
• Proficient automation & scripting with PowerShell, AI agents using Copilot & Claude, including experience with Microsoft Graph API/SDK for automation.
• Demonstrated experience designing or administering Conditional Access, MFA, and identity protection controls.

Responsibilities

• Own design, administration, and improvement of Entra ID and Active Directory, including user lifecycle and hybrid identity.
• Manage AD domain services, replication, DNS, GPOs, and domain controllers.
• Design and support Conditional Access, MFA, and zero-trust controls.
• Manage Enterprise Applications, SSO integrations (SAML, OAuth, OIDC), SCIM provisioning, and access automation.
• Automate identity operations using PowerShell and Microsoft Graph.
• Administer Exchange Online and Teams in hybrid mail flow.
• Lead on-call rotation and major incident response as senior escalation point.
• Drive root cause analysis and problem management.
• Leverage AI tools to accelerate troubleshooting and script generation.
• Mentor junior teammates on identity concepts and tooling.

Skills

Entra ID

Active Directory

M365 Admin

PowerShell

Automation scripting

RBAC

MFA

Conditional Access

Identity protection

Microsoft Graph API/SDK

Copilot

Claude

Tools

Copilot

Claude

Microsoft Graph API/SDK

Job description

Key Responsibilities

Identity & Access Management (Primary Focus)

• Own the design, administration, and continuous improvement of Microsoft Entra ID and Active Directory, including user lifecycle management, hybrid identity, directory synchronization, and authentication services.
• Manage Active Directory domain services, replication, domain controllers, DNS integration, FSMO roles, Group Policy, and overall directory health.
• Design and support Conditional Access, MFA, passwordless authentication, and identity security controls aligned to Zero Trust principles.
• Manage Enterprise Applications, App Registrations, SSO integrations (SAML, OAuth, OIDC), SCIM provisioning, and access automation.
• Drive identity governance practices including RBAC, least-privilege access, access certifications, and integration with Saviynt.
• Automate identity operations using PowerShell, Microsoft Graph, and workflow automation platforms to improve efficiency and user experience.

Messaging & Collaboration (Supporting Scope)

• Administer Exchange Online, hybrid mail flow, and Microsoft Teams, including distribution lists, shared mailboxes, and transport rules.
• Troubleshoot escalated issues related to mail delivery, Outlook, calendaring, and their integration with identity services.

Operations, Reliability, and Incident Management

• Own resolution of complex incidents and service requests through ITSM platforms (e.g., ServiceNow), ensuring timely communication and adherence to SLAs.
• Lead or participate in on-call rotation and major incident response as a senior escalation point.
• Drive root cause analysis and problem management, translating recurring issues into permanent fixes and system improvements.

Automation and AI-Driven Process Improvement

• Design and maintain PowerShell scripts and automation workflows (including Microsoft Graph API) that streamline identity and access operations end-to-end.
• Champion an automation-first approach, identifying manual processes across identity platform operations that can be eliminated or self-serviced.
• Leverage AI-powered tools such as Microsoft Copilot, scripting assistants, and workflow automation platforms to accelerate troubleshooting, generate scripts, improve documentation, and surface operational insights.
• Apply AI to enhance identity governance activities such as access reviews, anomaly detection, and reporting.

User Experience and Continuous Improvement

• Partner with service desk, endpoint, and security teams to resolve identity and access issues and elevate the overall user experience.
• Analyze recurring access and authentication trends; build knowledge base content and self-service capabilities to reduce ticket volume.
• Mentor junior team members on identity concepts, tooling, and troubleshooting methodology.

As the recognized global standard for project-based businesses, Deltek delivers software and information solutions to help organizations achieve their purpose. Our market leadership stems from the work of our diverse employees who are united by a passion for learning, growing and making a difference. At Deltek, we take immense pride in creating a balanced, values-driven environment, where every employee feels included and empowered to do their best work. Our employees put our core values into action daily, creating a one-of-a-kind culture that has been recognized globally. Thanks to our incredible team, Deltek has been named one of America's Best Midsize Employers by Forbes, a Best Place to Work by Glassdoor, a Top Workplace by The Washington Post and a Best Place to Work in Asia by World HRD Congress. www.deltek.com

At Deltek, security isn't a gate at the end of the process — it's in the foundation. Enterprise Security & Technology Services (ESTS) brings together security, infrastructure, and technology operations under one organization, led by our CISO, with a mandate to make sure Deltek builds and operates with integrity at every layer.

We're a passionate team of technologists and security professionals who work across the entire company — embedded in how services are built, delivered, and supported. We run agile, we embrace intelligent automation to amplify what our people can do, and we hold ourselves to a high standard because the organizations that depend on Deltek's platform are doing work that can't afford mistakes. If you take your craft seriously, want visibility into how a complex, global technology organization really operates, and believe security should be a first principle — not an afterthought — this is a team that will feel like home.

Required Qualifications

• 5+ years of experience supporting enterprise Microsoft identity environments, with hands-on depth in Entra ID (Azure AD), Active Directory, and Microsoft 365 administration.
• Advanced troubleshooting skills across identity, authentication, and access management.
• Strong understanding of directory services, group policy, DNS, and access control models (RBAC, least privilege).
• Proficient automation & scripting with PowerShell, AI agents using Copilot & Claude, including experience with Microsoft Graph API/SDK for automation.
• Demonstrated experience designing or administering Conditional Access, MFA, and identity protection controls.

Preferred Qualifications

• Experience with identity governance concepts or platforms (e.g., Saviynt, SailPoint, Okta IGA, CyberArk) — access certifications, entitlement management, SoD.
• Familiarity with Microsoft Defender for Office 365 and broader identity-related security controls.
• Experience with audit, compliance, or access to attestation processes (e.g., SOX controls).
• Experience with ITSM platforms such as ServiceNow.
• Experience using AI tools and developing agents (e.g., Microsoft Copilot) to improve operational efficiency and automation.
• Microsoft certifications in Azure or Microsoft 365 (e.g., SC-300, MS-102) are a plus.

10%

Candidate Privacy Notice

Deltek is committed to the protection and promotion of your privacy. In connection with your application for employment with us at Deltek, it is necessary for us to collect, store and use information about you (“Personal Data”) to administer and evaluate your application. We are the “controller” of the Personal Data you provide us and will process any such Personal Data in accordance with applicable law and the statements contained in this

Additionally, we have not sold and do not sell Personal Data you provide to us through the job application process.