AD, Azure AD and PKI Architect

Overview

Architect for enterprise identity and certificate services covering Active Directory, Microsoft Entra ID, and PKI. Owns design, implementation, operation, security, and continuous improvement across on-premises and cloud identity platforms.

What you'll do

• Design, deploy, configure, and maintain enterprise Active Directory Domain Services, including forests, domains, sites, and trusts.
• Engineer hybrid identity integration between on-premises AD and Microsoft Entra ID, including sync, pass-through authentication, and federation where applicable.
• Administer and engineer Microsoft Entra ID capabilities, identity access patterns, and Conditional Access and authentication controls.
• Design and administer enterprise PKI services, including Microsoft AD CS, certificate templates, and certificate lifecycle operations.
• Lead incident investigation and remediation for identity, authentication, directory, and certificate services using logs and root-cause analysis.
• Build automation and operational reporting using PowerShell, Microsoft Graph API, and REST APIs; maintain runbooks and architecture diagrams.

What you'll need

• 10+ years in Enterprise IAM/Infrastructure Engineering.
• At least 5+ years in a dedicated Lead or Solution Architect capacity.
• Deep hands-on expertise in Windows Active Directory and related hybrid identity concepts.
• Advanced experience with Microsoft Entra ID/Entra Connect/Cloud Sync, Conditional Access, and authentication methods.
• Deep hands-on experience with the Keyfactor ecosystem (Keyfactor Command, Orchestrators, Certificate Managers, and Keyfactor API).
• Deep understanding of PKI principles and X.509 certificate validation including CRL/OCSP.
• Expert-level scripting/automation skills (PowerShell, Python, or Bash) with REST API integration.

Details

• Location: Pune, India.
• Flexible work: at least 50% of time each quarter in the office or in the field (role-dependent); remote home office roles may come together in offices at times.