Custom Software Engineer

Project Role : Custom Software Engineer

Project Role Description : Develop custom software solutions to design, code, and enhance components across systems or applications. Use modern frameworks and agile practices to deliver scalable, high-performing solutions tailored to specific business needs.

Must have skills : Microsoft Entra Verified ID, Microsoft Active Directory

Good to have skills : NA

Minimum 7.5 Year(s) Of Experience Is Required

Educational Qualification : 15 years full time education

Summary:

hybrid identity infrastructure, spanning on-premise Active Directory, Microsoft 365 tenant

and Entra ID. security hardening, identity governance, M&A integrations, and automation/self-service in close alignment with

IAM and security teams.

Roles & Responsibilities:

Operate and maintain a hybrid identity architecture

based on on-premise Active Directory and Entra ID

in the M365 cloud

Manage Azure AD Connect synchronization, includ

ing monitoring, troubleshooting, and lifecycle man

agement

Administer Active Directory core services, including:

• Domains and trusts
• Sites and Services
• Replication topology
• DNS integration
  
  

Ensure high availability, performance, and stability

of directory services

Identity and Access Management

Administer Entra ID and Microsoft 365 tenant con

figuration

Manage and optimize:

• Conditional Access Policies
• Identity protection and authentication methods
• Tenant-wide security and identity settings
  
  

Support application integrations and identity federation scenarios

• Review and validate requests to ensure compliance with internal standards and processes
• Implement approved requests in a controlled
  
  

and auditable manner

• Access management and permission delegation through Quest Active Roles
  
  

Security, Hardening & Compliance

Harden AD, Entra ID, and M365 environments

based on security best practices and frameworks

(e.g. CIS Benchmarks)

Ensure:

• Least-privilege access models
• Secure authentication and authorization de
  
  

signs

• Regular review of privileged roles and access
  
  

paths

• Minimize risks for cyber-attacks or similar
  
  

vulnerabilities

Support audits, security assessments, and remediation activities

Governance, Auditing and Reporting of AD by using

Quest s Active Administrator, Change Auditor, Enterprise Reporter and IT Security Search

Mergers & Acquisitions (M&A)

Support M&A activities from an identity perspective, including:

• B2B collaboration and external identity enablement
• Migration from legacy AD and M365 environments, including using Quest On-Demand
  
  

Migration

• Tenant-to-tenant and directory consolidation
  
  

scenarios

Design and execute secure migration strategies with

minimal business disruption

Backup & Recovery

AD backup and recovery through Quest Recovery

Manager

Manage Commvault Cloud (Metallic) as the M365

backup and recovery solution

Ensure:

• Regular backup validation
• Recovery readiness for identities, M365
  
  

workloads, and configurations

• Compliance with retention and recovery requirements
  
  

Automation & IAM Integration

Automation of tasks through PowerShell scripting

Support the design and implementation of self-ser

vice workflows for identity-related use cases

Collaborate closely with the IAM team to:

• Align AD and M365 processes with SailPoint
• Migrate or redesign existing Quest Active
  
  

Roles workflows into SailPoint

Promote automation, standardization, and reduction of manual administrative effort

Service Management & Collaboration

Work within ITIL-based processes, including:

• Incident Management
• Service Request Fulfilment
• Problem Management
  
  

Act as a technical consultant for internal teams and

stakeholders

Provide 2nd and 3rd level support for identity-related issues

Professional & Technical Skills:

Experience with managing incidents and

major outages

Medium to enterprise environment experience

ITIL Foundations

Service Request Management

Incident/Problem/Change Management

Strong security background

ISO27001 compliance (DE: KRITIS)

Hardening based on CIS Framework

Ethical hacking (optional)

PowerShell / GraphAPI scripting

Entra Connect

Conditional Access Policies

Identity protection and authentication methods

Tenant-wide security and identity settings

Application integrations and identity federation scenarios

General identity management principles

Least-privilege access models

Regular access reviews

M&A

B2B collaboration and identity federation

Legacy on-premise AD migration

M365 tenant-to-tenant migration

Backup & recovery including disaster recovery scenarios

On-premise AD (Quest Recovery Manager)

M365 (Commvault Cloud)

Quest Tools

Active Roles

Active Administrator

Change Auditor

Enterprise Reporter

IT Security Search

Quest Recovery Manage

On Demand Migration

Additional Information:

Desired soft skills

Fluent english with tolerable accent

Feedback mindset – gives & receives feedback openly

Empathy – shows genuine care for colleagues

Direct communication – speaks clearly & honestly

Emotional resilience – handles criticism without defensiveness

Accountability – owns outcomes & follows through

Active listening – understands before responding

Psychological safety mindset – encourages others to speak up

Growth mindset – sees feedback as a chance to improve Constructive conflict skills – disagrees productively

Transparency – honest, no hidden agendas