Operations Engineer

Project Role : Operations Engineer

Project Role Description : Support the operations and/or manage delivery for production systems and services based on operational requirements and service agreement.

Must have skills : Microsoft Active Directory

Good to have skills : Okta Identity Management, Identity Access Management (IAM), CyberArk Privileged Access Management
Minimum 5 year(s) of experience is required

Educational Qualification : 15 years full time education

Summary:
As an Active Directory Engineer, provide Level 3 support for enterprise Active Directory environments, including complex incident resolution and root cause analysis. A typical day involves overseeing the smooth functioning of production systems and services, ensuring they meet operational requirements and service agreements. This role requires continuous monitoring, managing incidents, and coordinating with various teams to maintain system reliability and performance. The position demands proactive problem-solving and effective communication to support operational excellence and service delivery within a dynamic environment.

Roles Responsibilities:
1. Active Directory (Core L3 Responsibilities)
a) Administer and manage:
Domain Controllers (multi-domain / multi-forest)
AD Sites Services, replication, FSMO roles
Group Policy Objects (GPOs) and security baselines
b) Perform AD health checks, patching, backup/recovery, and performance optimization.
Troubleshoot:
Authentication issues (Kerberos, NTLM)
DNS, replication, AD Connect, and domain trust issues

2. Entra ID (Azure AD) Hybrid Identity
a) Manage and support hybrid identity setups (AD + Entra ID) including AD Connect sync.
Implement and manage:
Conditional Access policies, MFA, SSO
Identity Protection and risk-based policies
b) Administer:
RBAC, Administrative Units, roles, App Registrations
c) Troubleshoot:
SSO (SAML, OAuth, OIDC), sync issues, federation
d) Support Privileged Identity Management (PIM) and access governance activities.

3. IAM / PAM
a) Integrate IAM platforms with AD / Entra ID for SSO and access governance.
Support tools such as:
Okta (SSO, MFA, lifecycle management)
CyberArk (Privileged Access, vaulting, session management)
b) Manage:
User lifecycle (Joiner/Mover/Leaver)
Privileged account onboarding and governance
c) Troubleshoot authentication and identity issues across applications.

4. Incident, Problem Change Management
a) Act as escalation point for L1/L2 teams and resolve complex IAM incidents. expertia.ai
b) Perform root cause analysis (RCA) and implement long-term fixes.
c) Participate in:
Change reviews
Problem management
Service improvement initiatives

5. Client Interaction Stakeholder Management
a) Act as primary technical interface for clients
b) Lead:
Technical discussions
Workshops and requirement gathering sessions
c) Provide:
Status updates, incident communication, RCA reports
Translate technical solutions into business-friendly outcomes

6. Automation Documentation
a) Develop automation using:
PowerShell / scripting tools
b) Create and maintain:
SOPs, runbooks, design documents
c) Drive process improvements and standardization

7. Security, Governance Compliance
a) Implement IAM controls aligned with RBAC and least-privilege principles
Conduct:
Access reviews
Audits and compliance reporting
Support security initiatives such as:
Zero Trust
Identity threat monitoring

Professional Technical Skills:

Strong hands-on experience in:
Active Directory Domain Services (AD DS)
Microsoft Entra ID (Azure AD)

Expertise in:
SSO (SAML, OAuth, OIDC)
MFA, Conditional Access
AD Connect / Hybrid Identity

Experience with one or more : Okta / CyberArk / SailPoint / Saviynt

Additional Technical Exposure (Good to Have) :
PKI / Certificate Services
DNS, DHCP, networking fundamentals
Cloud IAM (Azure, AWS)
SIEM / Security tools integration

Soft Skills Professional Attributes

Strong client-facing experience (mandatory)

Excellent communication (verbal written)

Ability to handle high-pressure incidents and escalations

Strong analytical and troubleshooting mindset

Mentoring and leadership capabilities

Preferred Certifications

Microsoft Certified: Identity and Access Administrator (SC-300)

Microsoft Azure certifications (AZ-104 / AZ-500)

Okta / CyberArk certifications (preferred)

Nice-to-Have Experience in:

Identity Governance (IGA) tools

Zero Trust architecture implementation

Automation platforms and DevOps pipelines

The candidate should have minimum 5-10 years of total IT experience.

Minimum 3+ years in L3 or advanced IAM/AD role.

Experience in production support and global environments.

This position is based at our Bengaluru office.

A 15 years full time education is required.

Bachelor s degree in Computer Science / IT or equivalent

Willingness to work in UK shift model (including weekends/on-call)

Exposure to multi-region/global client environments

Qualification 15 years full time education