Active Directory Engineer

Role Overview

We are seeking an experienced AD Engineer to join Terex's Global Infrastructure & Operations organization, aligned to the India Centre of Excellence. This role is hands-on and operationally focused, responsible for day-to-day operations, stability, and support of Terex's hybrid identity environment, spanning on-premises Active Directory and Azure AD (Entra ID).

The AD Engineer plays a key role in ensuring secure, reliable identity and access services across the enterprise, supporting authentication, authorization, directory services, and identity integrations. The role operates within a globally integrated, follow-the-sun support model, partnering closely with teams in the Northern Ireland Centre of Excellence and other regions.

Key Responsibilities

Active Directory & Azure AD Operations

• Provide day-to-day operational support for onpremises Active Directory and Azure AD (Entra ID) environments.
• Monitor directory health, replication, authentication, and synchronization processes.
• Support Azure AD Connect / hybrid identity synchronization, including troubleshooting sync and authentication issues.
• Ensure directory services meet availability, performance, and security standards.

Incident, Change & Problem Management

• Act as an escalation point for complex identity and authentication-related incidents.
• Execute directory and identity changes through structured change management processes, including validation and post-change review.
• Perform root cause analysis (RCA) for recurring or high-impact identity issues.
• Work closely with service desk, security, and application teams to restore identity services efficiently.

Identity, Access & Authentication Services

• Support user, group, and computer object lifecycle management across hybrid AD environments.
• Manage and support authentication mechanisms, including single sign-on and secure access integrations.
• Support identity integrations with enterprise applications and cloud services.
• Ensure identity configurations align with security, access, and governance standards.

Security, Governance & Compliance

• Support identity security controls, access models, and directory governance in alignment with Terex policies.
• Assist with privileged access, role-based access, and audit requirements related to directory services.
• Partner with security teams to remediate identity-related vulnerabilities and compliance findings.
• Support logging, monitoring, and alerting for identity and authentication services.

Operational Excellence & Documentation

• Maintain AD and Azure AD runbooks, standard operating procedures, and knowledge documentation.
• Support continuous improvement of identity monitoring, alerting, and operational practices.
• Identify opportunities to improve directory stability, security posture, and operational efficiency.
• Participate in on-call or follow-the-sun support rotations as required.

Required Qualifications

Experience

• 610 years of overall infrastructure or identity engineering experience.
• Proven experience supporting enterprise hybrid Active Directory and Azure AD environments.
• Strong operational discipline with experience in incident, change, and problem management.

Technical Skills

• Strong hands-on experience with onpremises Active Directory.
• Experience supporting Azure AD (Entra ID) and hybrid identity models.
• Solid understanding of directory services, authentication, and identity synchronization.
• Experience supporting identity security, access controls, and governance concepts.
• Strong troubleshooting skills across authentication, authorization, and directory services.
• Proven experience executing incident management, change management, and RCA.
• Familiarity with identity monitoring and health dashboards.

Education

• Bachelors degree in Computer Science, Engineering, Information Technology, or a related discipline.

Preferred Qualifications

• Microsoft certifications related to Active Directory, Azure AD, or Identity & Security.
• Experience supporting large-scale or global identity environments.
• Exposure to regulated or compliance-driven environments.
• Experience working in a global, follow-the-sun support model.
• Familiarity with ITIL-based operational processes.