DTICI_IAM_ActiveDirectory Professional
Daimler India Commercial Vehicles · Bengaluru · onsite · Posted 29d ago
Undisclosed5–10 yrsfulltimeSourced from
About a minute. You'll make an account on the way through.
About this role
Role Summary:
We are looking for a skilled Active Directory (AD) and Tier-0 ILM specialist to own and improve identity lifecycle processes for privileged and high-impact identities in a complex enterprise environment. This role will focus on secure Joiner-Mover-Leaver (JML) operations, Tier-0 account governance, privileged group control, and automation-driven compliance to strengthen security posture, reduce operational risks, and ensure audit readiness.
The candidate will partner with IAM, Cybersecurity, GRC, and infrastructure teams to implement least privilege, strong approval controls, access reviews, and standardized workflows across Tier-0 environments.
Required Skills Experience
- 5+ years experience in Active Directory operations/engineering in enterprise scale environments.
- Strong expertise in:
- AD DS, DCs, Sites Services, trusts, DNS basics
- AD security fundamentals: privileged groups, GPO, delegation, ACLs
- Identity lifecycle fundamentals: JML, approvals, access governance
- Strong scripting / automation:
- PowerShell (advanced): modules, error handling, structured logging
- Experience working with audit/compliance teams:
- Evidence collection, control validation, remediation execution
Key Responsibilities
1) Tier-0 Identity Lifecycle Management (ILM / JML)
- Own end-to-end Joiner-Mover-Leaver (JML) lifecycle for Tier-0 / privileged identities, including:
- Admin account provisioning, modifications, de-provisioning
- Role-based access changes based on org movement or job changes
- Emergency access workflows with strict governance
- Implement and maintain time-bound access and just-in-time principles where feasible.
- Ensure lifecycle controls cover:
- Identity proofing, approvals, segregation of duties (SoD)
- Re-certification and removal of stale/unused privileges
- Consistent naming standards lifecycle tagging for privileged accounts
2) Privileged Access Governance (Tier-0 Focus)
- Manage and govern Tier-0 AD groups and delegated rights, including:
- Domain Admins, Enterprise Admins, Schema Admins, built-in privileged groups
- GPO delegated permissions, OU ACLs, admin role delegation
- Drive least privilege and role engineering for Tier-0 operations:
- Convert broad admin models into role-based admin groups
- Reduce permanent membership and enforce approvals/expiry
- Own privileged identity hygiene:
- Remove orphaned accounts, stale memberships, excessive ACLs
- Identify and remediate privilege escalation paths
3) Automation Workflow Enablement
- Build automation for ILM workflows using PowerShell (and/or Python), including:
- Provisioning/de-provisioning privileged accounts
- Group membership changes with approval controls
- Scheduled access review reports evidence generation
- Automated detection of privilege drift and policy violations
- Integrate workflows with ITSM tools (e.g., ServiceNow) and approval gates.
- Maintain audit-friendly logs, traceability, rollback, and change history for all ILM actions.
4) Compliance, Controls Audit Readiness
- Ensure Tier-0 ILM controls align to enterprise security policies and audit expectations:
- Access review cycles, periodic recertifications, and evidence packages
- SOX/ISO/internal audit support, control testing, remediation tracking
- Maintain documentation:
- Standard Operating Procedures (SOPs), runbooks, control mappings
- Who has access to what traceability for Tier-0 privileges
5) Monitoring, Risk, and Continuous Improvement
- Continuously improve Tier-0 posture by tracking:
- Privileged membership changes
- Unauthorized access attempts and abnormal activity indicators
- Failures in joiner/mover/leaver execution (missed removals, delays)
- Work with cybersecurity teams to support investigations and incident response for identity events.
Disclaimer: This job posting and location has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.
Sourced from naukri
Skills
AutomationScriptingschemaitsmDNSActive Directoryaws iamEnterprise SecurityIncident ResponsegrcBuild Automationitsm toolsError HandlingInternal AuditControl TestingPythonCyber SecurityoperationscompliancePowershell
About Daimler India Commercial Vehicles
Daimler India Commercial Vehicles
Automobile
4.0k+
employees
1886
140 years old
Chennai, Tamil Nadu
India
₹10.4L PA avg
Avg at Daimler India Commercial Vehicles
About
Daimler India Commercial Vehicles (DICV) is a wholly-owned subsidiary of Daimler Truck AG, and a full-fledged commercial vehicle player with a brand dedicated to its home market of India: BharatBenz.
Industries
AutomobileIndustrial Machinery
Employee ratings
10 reviews
4.0/ 5
Culture
3.7
Career growth
3.3
Work-life
4.2
Employees rate it well for
Work-Life Balance40Overall Company40
Find them on