IT Solutions Eng.-Microsoft Entra ID & Active Directory Engineer

Schaeffler Technologies AG & Co. KG; Kewanna (IN); On-site; USD 26,000 - 47,000; Full time

Job summary

SCHAEFFLER GLOBAL SERVICES INDIA PVT LTD is seeking an IT Solutions Engineer with hands-on experience in Microsoft Entra ID and on-premises Active Directory to design and optimize IAM for hybrid environments.

The role focuses on tenant governance, tiered administration, privileged access, and modern SSO architectures, enabling secure identity platforms for our organization and customers.

Qualifications

• Fluent English is mandatory.

Responsibilities

• Design, implement, and optimize identity and access management solutions in hybrid environments.

Job description

IT Solutions Eng.-Microsoft Entra ID & Active Directory Engineer

Location: Pune, IN, 412106

Job Requisition ID: 46939

Schaeffler is a dynamic global technology company and its success has been a result of its entrepreneurial spirit and long history of private ownership. Does that sound interesting to you? As a partner to all of the major automobile manufacturers, as well as key players in the aerospace and industrial sectors, we offer you many development opportunities.

Your Key Responsibilities

Job Description

We are looking for a hands-on IT Solution Engineer with deep expertise across Microsoft Entra ID and on-premises Active Directory to design, implement, and continuously optimize identity and access management solutions in hybrid enterprise environments.This role focuses on tenant and forest governance, tiered administration and privileged access, application and authentication lifecycle management, and modern SSO architectures — enabling secure, scalable, and automated identity platforms for our organization and customers.

Key Responsibilities:

• Design and operate hybrid identity architectures spanning Entra ID and on-premises AD DS.
• Design and enforce a tiered administration model (Tier 0/1/2), including PAWs, clean-source principles, and control-plane boundaries.
• Manage and optimize AD forests and domains: trusts, replication, sites and services, DNS, Group Policy, and delegation.
• Manage and optimize Entra ID tenants, including administrative units, RBAC, and security boundaries.
• Design privileged access concepts using Entra PIM, tier-0 protection, and Domain Controller hardening.
• Operate hybrid sync and authentication via Entra Connect / Cloud Sync, including migration to cloud-native models.
• Design and maintain Entra App Registrations and Enterprise Applications across their lifecycle.
• Implement SSO using OAuth, OpenID Connect, SAML, and Kerberos/NTLM where needed.
• Define authentication and authorization flows, including Conditional Access and Identity Protection.
• Automate AD and Entra ID via Infrastructure as Code, APIs, and scripting (Microsoft Graph, PowerShell, Terraform).
• Drive security hardening: attack-surface reduction, legacy auth decommissioning, and identity-attack defense.
• Establish automated testing, monitoring, and compliance checks across both platforms.
• Build a monitoring and governance framework, including tier-model compliance.
• Document architectures and processes, and train internal teams on identity, tiering, and DevOps topics.
• Act as a technical advisor to internal stakeholders and customers on IAM topics.

Your Qualifications

Qualification

• Fluent English is mandatory.
• Academic degree in Computer Science, Information Technology, or equivalent practical experience.
• 5 years of hands-on experience with both Entra ID (Azure AD) and on-premises AD in enterprise environments.
• Strong expertise inEntra ID tenant management, app registrations, enterprise apps, and SSO integrations.
• Demonstrable experience designing tiered administration models (Tier 0/1/2) and privileged access management.
• Solid AD DS internals: forests, domains, trusts, replication, Group Policy, DNS, and delegation.
• Practical experience withMicrosoft Graph API, automation, and scripting.
• Practical experience withhybrid identity (Entra Connect / Cloud Sync) and cloud migration.
• Solid knowledge ofConditional Access, Identity Protection, and Entra ID security best practices.
• Experience managing and optimizingAzure and Microsoft 365 identity-related services.
• Strong analytical skills, structured working style, and a security-first mindset.
• Ability to communicate complex identity concepts clearly to technical and non-technical audiences.

As a global company with employees around the world, it is important to us that we treat each other with respect and value all ideas and perspectives. By appreciating our differences, we inspire creativity and drive innovation. In this way, we contribute to sustainable value creation for our stakeholders and society as a whole. Together, we advance how the world moves.

Exciting assignments and outstanding development opportunities await you because we impact the future with innovation. We look forward to your application.

SCHAEFFLER GLOBAL SERVICES INDIA PVT LTD

Keywords:Experienced; Engineer; Full-Time ; Unlimited ; Digitalization & Information Technology;