Administer and support on premises Active Directory environments, including domains, forests, trusts, DNS, Group Policy, and domain controllers.
Manage and support Microsoft Entra ID in a hybrid identity configuration, integrated with on prem AD.
Operate and maintain directory synchronization and identity flows between AD and Entra ID (e.g., users, groups, devices, and service accounts).
Troubleshoot hybrid authentication, identity replication, and access issues across on prem and cloud resources.
Support identity services required for Microsoft 365, cloud hosted applications, and enterprise platforms.
Administer Entra ID users, groups, roles, and administrative access.
Support Conditional Access technical configurations in alignment with Cybersecurity requirements.
Implement and maintain authentication methods (e.g., password policies, MFA enforcement as defined by Cyber).
Support device identity and registration models (hybrid join, cloud join, and directory integrated authentication).
Assist with access governance features such as access reviews, lifecycle controls, and role scoping (as defined by Cyber standards).
Support Entra integrated applications and enterprise authentication models.
Support Active Directory usage across corporate IT systems and OT / manufacturing environments, ensuring authentication and authorization services meet operational needs without impacting plant uptime, safety, or availability.
Support segmentation and security boundaries between IT and OT identity workloads where required.
Implement IAM controls and technical configurations aligned with Cybersecurity's identity and access management strategy.
Remediate IAM related compliance gaps identified through audits, security assessments, or Cyber reviews.
Support privileged access controls, directory security hardening, and authentication standards.
Assist in providing technical evidence and validation for audits and compliance requirements.
Perform user, group, device, and service account lifecycle management across AD and Entra ID.
Ensure directory hygiene through regular review and remediation of stale, orphaned, or misconfigured identities.
Support integrations between identity platforms and enterprise applications, infrastructure, and cloud services.
Participate in change management activities related to identity enhancements, upgrades, and operational improvements.
Basic requirements
BTech/BE in related fields.
Minimum 12-15 years of experience.
Strong handson experience administering onpremises Microsoft Active Directory in enterprise environments.
Proven experience supporting hybrid identity environments using Microsoft Entra ID integrated with AD.
Solid technical understanding of identity synchronization, authentication, authorization, and directory security.
Experience supporting identity services in both IT and OT / manufacturing environments.
Working knowledge of IAMrelated cybersecurity concepts, compliance remediation, and access control enforcement.
Strong troubleshooting skills in complex, operationally sensitive environments.
Preferred Qualifications
Experience in manufacturing, industrial, or OT integrated enterprises.
Experience supporting Microsoft 365 and cloud applications using Entra ID authentication.
Exposure to Conditional Access, access governance, or privileged identity models.
Microsoft identity certifications or equivalent real world experience.
