Wintel Active Directory Senior Technical Lead

Sopra Steria; Dadri; On-site; INR 1,000,000 - 1,500,000; Full time

Job summary

Sopra Steria is looking for an experienced professional in Active Directory & Wintel to assess and design enterprise AD solutions. The successful candidate will need a strong background in Microsoft Active Directory and Azure Active Directory, alongside others like SSO, MFA, and server management.

The role requires a minimum of 8 years of total experience, with hands-on experience in Azure resources and related operations.

Qualifications

• 8-10 years of total experience expected.
• Hands-on experience with Azure VM and compute services.
• Understanding of identity and access management.

Responsibilities

• Assess and design enterprise Active Directory solutions.
• Implement Active Directory security and recovery measures.
• Migrate applications to Azure and support infrastructure teams.

Skills

Microsoft Active Directory

Azure Active Directory

SSO and MFA implementations

Active Directory security

Server hardening

Azure architecture

Job description

Active Directory & Wintel

1. Excellent working knowledge of Microsoft Active Directory and Azure Active Directory, with the ability to assess enterprise onprem AD environments and design and implement target solutions.
2. Strong expertise in Active Directory design and implementation, including:
3. AD forest and domain design
4. Sites and subnets
5. FSMO role placement
6. NTP configuration
7. RODC management
8. Experience with onpremises Active Directory and Azure Active Directory integration and migration.
9. Indepth knowledge of PKI, Certificate Services, ADFS, and identity federation technologies.
10. Handson experience with Active Directory security, resilience, and recovery, including tools such as Semperis (AD Forest Recovery, AD Security & Audit).
11. Strong understanding of SSO and MFA implementations.
12. Experience in automating Active Directory and Azure AD tasks, and proposing and implementing infrastructure improvements and enhancements.
13. Proven experience with:
14. Domain Controller promotion and decommissioning
15. GPO design, creation, and implementation
16. Active Directory operational support and project work
17. Good knowledge of DNS, DHCP, File Services, DFS, and other ADdependent services.
18. Expertise in securing Microsoft client and server operating systems, including:
19. Authentication and authorization mechanisms
20. Encryption technologies
21. Certificate Authority services
22. Security hardening and compliance
23. Install, configure, tune, maintain, monitor, and troubleshoot Windows Server 2012 / 2016 / 2019 / 2022.
24. Strong experience in server hardening, patching, and vulnerability remediation.
25. Experience managing and supporting HyperV, SCVMM, and Failover Clustering.
26. Ability to support application and infrastructure teams for ADrelated business requirements and incident resolution.
27. Manage work queues for incidents, problems, changes, tasks, and service requests, ensuring effective workload management.
28. Excellent written, verbal, and interpersonal communication skills.

Azure

1. Handson experience in Azure architecture, deployment, and operations.
2. Strong experience with:
3. Azure Virtual Machines and compute services
4. Azure Storage (Accounts, Snapshots, Monitoring)
5. Azure Backup (MARS)
6. Azure Site Recovery
7. Azure Monitor
8. Experience migrating onprem applications and workloads to Azure.
9. Experience with Azure Arc for managing and governing onpremises and multicloud resources from Azure.
10. Knowledge and handson experience with:
11. Azure Active Directory
12. Single SignOn (SSO)
13. Identity and access management
14. Understanding of cloud cost monitoring and optimization.
15. Deploy, manage, and support Azure resources using best practices and governance standards.

CyberArk (Secondary)

1. Basic experience with CyberArk PAM, including onboarding and managing privileged accounts (Windows, Active Directory, service accounts).
2. Familiarity with core CyberArk components (PVWA, CPM, PSM) and password rotation concepts.
3. Experience supporting CyberArkrelated incidents and access requests.
4. Understanding of privileged access security best practices and AD/Azure AD integration.

Total Experience Expected: 08-10 years