Active Directory & Azure AD SME / Engineer

Overview

Senior Identity & Access Management (IAM) leader and subject matter expert providing L3 technical leadership and operational governance for Carrier's global identity platforms, including Microsoft Entra ID, Active Directory, Okta, SailPoint, BeyondTrust, and customer identity environments.

What you'll do

• Own enterprise architecture and governance for on-premises Active Directory and Microsoft Entra ID.
• Lead hybrid identity architecture, synchronization, federation, SSO, MFA, Conditional Access, Privileged Identity Management (PIM), and Self-Service Password Reset (SSPR).
• Define identity standards, lifecycle management processes, naming standards, and security baselines.
• Provide technical approval for enterprise identity designs and integrations.
• Govern SailPoint identity lifecycle processes, access certifications, birthright access, role management, and segregation-of-duty controls.
• Drive User Access Reviews (UAR), Privileged Access Reviews (PAR), SOX controls, and audit remediation efforts.
• Establish governance for workforce, contractor, service, and privileged accounts.
• Ensure compliance with internal cybersecurity and regulatory requirements.
• Lead strategic programs such as Okta-to-Entra migration, CIAM modernization, and cloud identity transformation.
• Own migration planning, readiness assessments, architecture governance, application onboarding, and executive reporting.
• Collaborate with Microsoft, implementation partners, and business stakeholders to deliver enterprise-scale IAM initiatives.
• Provide L3 escalation support for critical IAM incidents and authentication issues.
• Lead resolution of complex identity, federation, provisioning, and SSO integration challenges.
• Establish service management processes, SOPs, operational metrics, SLAs, and technology roadmaps.
• Manage vendors, contractors, and managed service providers supporting IAM operations.
• Oversee BeyondTrust PAM operations and privileged account governance.
• Establish controls for service account lifecycle management, credential rotation, password propagation, and privileged access controls.
• Drive least-privilege and zero-trust initiatives across identity platforms.
• Provide IAM architecture guidance for GitHub, AWS, ServiceNow, Spacelift, enterprise SaaS applications, and custom integrations.
• Design scalable access models leveraging Entra groups, SCIM provisioning, federation, and automated access governance.
• Support CI/CD and DevOps identity integration requirements.

What you'll need

• 12+ years of Identity & Access Management experience.
• 8+ years administering and architecting Active Directory and Microsoft Entra ID.
• Deep expertise in Active Directory, Microsoft Entra ID, Azure AD Connect / Cloud Sync, Federation Services, Conditional Access, MFA, Privileged Identity Management, Self-Service Password Reset, Identity Governance, and Hybrid Identity Architecture.

Nice to have

• CISSP, CISM, Microsoft Identity certifications, SailPoint certifications, or BeyondTrust certifications.
• Experience with CIAM platforms and B2B/B2C identity architectures.
• Experience supporting cloud engineering platforms such as GitHub, AWS, Azure, Terraform, or Spacelift.

Details

• Location: Bangalore/Hyderabad.
• Employment type: Full Time.
• Supports over 60,000 workforce identities, external identities, and critical business applications.