Identity Engineer - Active Directory

Overview

Administer and secure enterprise Active Directory, Microsoft Entra ID, and public key infrastructure, with a primary focus on AD CS and certificate lifecycle management. Troubleshoot complex identity, directory, certificate, and authentication issues across on-premises, cloud, and hybrid environments.

What you'll do

• Administer AD CS, including certificate authorities, templates, and enrollment policies.
• Manage certificate issuance, renewal, revocation, and expiration monitoring.
• Maintain Active Directory and LDAP forests, domains, replication, group policy, OUs, and schemas.
• Manage Entra Connect synchronization rules, attribute flows, and synchronization troubleshooting.
• Troubleshoot DNS, Kerberos/NTLM, LDAPS, certificate chains, SAML, MFA, and SSO issues.
• Develop PowerShell and Python/REST API automation for certificates, reporting, and PKI monitoring.
• Plan disaster recovery procedures and document configurations, procedures, and incidents.

What you'll need

• 10+ years of experience in cybersecurity, systems administration, or identity and access management.
• 5+ years of hands-on AD CS and enterprise PKI administration experience.
• Strong knowledge of PKI architecture, certificate authorities, templates, CRL/OCSP, and key management.
• Deep knowledge of Active Directory, LDAP, hybrid identity synchronization, and Microsoft Entra ID.
• Experience with PowerShell, Python, REST APIs, log analysis, SIEM integration, and incident response.
• Knowledge of SOX, PCI-DSS, NIST, ISO 27001, and zero trust principles.
• Bachelor's degree recommended; equivalent experience considered.

Nice to have

• Microsoft Certified: Identity and Access Administrator (SC-300) or equivalent certification.
• Cloud or security certifications such as AWS, Azure, GCP, CISSP, CISM, or Security+.

Details

• Location: India, Karnataka, India.
• Bonus eligibility is included in the total compensation package.