Security Transformation Practitioner - Identity and Access Management Specialist

Security Transformation Practitioner

Project Role : Security Transformation Practitioner
Project Role Description : Design, develop, and implement security solutions to safeguard digital assets and business operations. Integrate security controls into enterprise systems, applications, and processes to protect against cyber threats, unauthorized access, and data breaches.
Must have skills : Identity and Access Management (IAM) Operations
Good to have skills : NA
Minimum 2 year(s) of experience is required
Educational Qualification : 15 years full time education

Summary:
We are seeking an experienced Identity and Access Management (IAM) professional with strong expertise in Active Directory & Microsoft Azure Active Directory (Entra ID).
The role involves working closely with application owners, security teams, and business stakeholders to ensure secure, compliant, and seamless access management across enterprise applications.


Roles & Responsibilities:
- Manage and maintain Active Directory forests, domains, and trusts.
- Perform advanced user, group, and organizational unit (OU) management.
- Configure and manage Group Policies (GPOs) at enterprise scale.
- Administer DNS, DHCP, and replication services tied to AD.
- Ensure high availability and disaster recovery readiness for AD infrastructure.
- Experience in Microsoft Tiering model
- Patching of Tiering servers
- Handle escalated incidents from teams (authentication failures, replication issues, GPO conflicts).
- Diagnose and resolve complex AD-related issues (FSMO roles, Kerberos, NTLM, LDAP).
- Perform root cause analysis and provide permanent fixes.
- Implement and enforce AD security best practices (password policies, privileged access management).
- Manage and audit service accounts, delegation, and role-based access control.
- Support AD migrations, upgrades, and consolidations.
- Automate routine tasks using PowerShell scripting.
- Optimize AD performance and replication topology.
- Work closely with network, security, and application teams to ensure seamless identity integration.
- Document processes, configurations, and troubleshooting guides.
- Mentor L1/L2 engineers and provide knowledge transfer.
- Lead end-to-end onboarding of applications into Azure AD / Entra ID.
- Configure Single Sign-On (SSO) using SAML, OAuth, OpenID Connect, or WS-Fed.
- Set up Provisioning / De-provisioning
- MFA, Conditional access policies, RBAC
- Privilege identity Management for Entra roles
- Collaborate with application owners to define authentication and authorization requirements.
- Ensure proper role-based access control (RBAC) and least privilege principles.
- Document integration steps, configuration details, and support guides.



Professional & Technical Skills:
- Strong expertise in Active Directory, DNS, Subnets & Sites, LDAPs, Kerberos, and GPOs.
- Hands-on experience with PowerShell scripting for automation.
- Knowledge of Azure AD / hybrid identity integrations.
- Familiarity with PKI, certificates
- Experience in incident management, change management, and ITIL processes.
- Strong hands-on experience with Azure Active Directory / Microsoft Entra ID.
- Expertise in SSO protocols (SAML, OAuth2.0, OpenID Connect, WS-Fed).
- Knowledge of SCIM provisioning and API-based integrations.
- Experience with Conditional Access, MFA, RBAC, and PIM.
- Familiarity with Azure AD Application Proxy and hybrid identity scenarios.
- Understanding of security compliance
- Excellent communication and stakeholder management skills.


Additional Information:
- The candidate should have minimum 2 years of experience in Identity and Access Management (IAM) Operations.
- This position is based at our Bengaluru office.
- A 15 years full time education is required.
- Microsoft certifications such as SC-300 (Identity and Access Administrator) or AZ-104 (Azure Administrator).
- Experience with automation tools (PowerShell, Graph API).
- Willing to work 24*7
- Supportive mindset