Active Directory(ADFS) Customer Engineer

Location: Bangalore/Hyderabad
Duration: Full Time
Experience level: 8-20 years

Role Overview: We are looking for a highly experienced Principal Solution Architect with 15+ years of expertise in Microsoft Active Directory, Active Directory Federation Services (ADFS), Public Key Infrastructure (PKI), and Microsoft Identity technologies to join the CSA Global Delivery (CSA GD) team. The successful candidate will serve as a technical authority and architecture leader for complex enterprise identity, authentication, federation, directory services, and PKI engagements. The role requires deep hands-on technical expertise combined with the ability to define enterprise architectures, lead complex implementations and transformations, troubleshoot critical environments, and provide technical direction to engineering teams and customers. The architect will work closely with Microsoft customers, CSA teams, engineering teams, program managers, and other technology stakeholders to design secure, scalable, resilient, and modern identity solutions.

• Solution Architecture & Design: Lead architecture and design of complex Microsoft Identity and Access Management solutions.
• Develop enterprise architectures covering: Active Directory Domain Services (AD DS); Active Directory Federation Services (ADFS); PKI / Active Directory Certificate Services (AD CS); Active Directory Domain Controllers; DNS and Group Policy; Windows authentication and authorization (Kerberos and NTLM); LDAP; Federation and SSO; Hybrid identity.
• Define High-Level Design (HLD), Low-Level Design (LLD), architecture diagrams, technical standards, and implementation strategies.
• Design highly available and resilient identity infrastructures across on-premises, hybrid, and cloud environments.
• Conduct architecture assessments and identify technical, security, scalability, and operational risks.
• Provide modernization strategies for legacy AD/ADFS/PKI environments.

• Provide deep architectural expertise in Active Directory Domain Services (AD DS).
• Design and optimize: Forest and domain architecture; Domain/forest trusts; Sites and Services; Replication topology; Global Catalog; FSMO role; DNS integration; Group Policy architecture; OU and delegation models; Authentication architecture.
• Troubleshoot complex AD issues involving: Replication failures; Kerberos authentication; DNS; SYSVOL/DFSR; Domain controller health; Trust relationships; Authentication failures; GPO processing.
• Lead AD forest/domain migrations, consolidations, restructures, and modernization initiatives.
• Develop AD recovery and business continuity strategies, including forest recovery.

• Provide subject-matter expertise in Active Directory Federation Services (ADFS) architecture and implementation.
• Design and troubleshoot complex ADFS components: ADFS farms, Federation services, Web Application Proxy (WAP), claims-based authentication, claims rules, relying party trusts, claims provider trusts, SAML, WS-Federation, and OAuth/OIDC integrations where applicable.
• Design highly available and secure ADFS architectures.
• Troubleshoot complex authentication and federation issues.
• Analyze ADFS event logs, authentication flows, token issuance, certificates, and claims.
• Lead ADFS migrations, upgrades, farm redesigns, and modernization programs.
• Develop strategies for transitioning legacy ADFS workloads to modern cloud-based identity platforms where appropriate.

• Provide principal-level architecture expertise in Microsoft PKI and Active Directory Certificate Services (AD CS).
• Design enterprise PKI architectures including: