Job Summary
Hybrid Active Directory (L3) Job Summary The Hybrid Active Directory (Hybrid AD) Subject Matter Expert (SME) is responsible for the design, implementation, administration, security, and optimization of enterprise identity infrastructure across on-premises Active Directory and Microsoft Entra ID (Azure AD). The role ensures seamless identity synchronization, authentication, access management, and integration with Microsoft 365, Azure services, and enterprise applications while maintaining high availability, security, and compliance. Experience 8–12+ years of experience in Active Directory and Identity & Access Management 8–12+ years of hands-on experience with Microsoft Entra ID (Azure AD) and Hybrid Identity environments. Primary Responsibilities Active Directory Administration Design, implement, and manage Hybrid Active Directory environments integrating on-premises Active Directory with Microsoft Entra ID. Lead identity modernization, migration, and transition activities for Hybrid AD services. Configure and maintain Microsoft Entra Connect (Azure AD Connect) and Microsoft Entra Cloud Sync. Administer Active Directory Domain Services (AD DS), Domain Controllers, DNS, DHCP, Group Policy Objects (GPO), and Organizational Units (OUs). Implement and manage Microsoft Entra ID features including Conditional Access, Identity Protection, Self-Service Password Reset (SSPR), Multi-Factor Authentication (MFA), and Passwordless Authentication. Manage identity synchronization, user provisioning, group management, and device registration. Support Hybrid Join, Microsoft Entra Join, and Microsoft Intune integration. Design and implement Role-Based Access Control (RBAC), Privileged Identity Management (PIM), and least-privilege access models. Monitor directory health, replication, authentication, synchronization, and identity-related services. Troubleshoot complex identity, authentication, Kerberos, LDAP, DNS, and replication issues. Perform Active Directory health assessments, security hardening, and vulnerability remediation. Plan and execute Active Directory upgrades, migrations, domain consolidations, and disaster recovery activities. Develop automation using PowerShell, Microsoft Graph API, and Azure CLI. Collaborate with security, cloud, infrastructure, networking, and application teams to deliver secure identity solutions. Create technical documentation, SOPs, architecture diagrams, and operational runbooks.Hybrid Identity Management Administer Microsoft Entra ID (Azure AD). Manage Azure AD Connect, synchronization, staging mode, and failover. Configure Password Hash Sync (PHS), Pass-through Authentication (PTA), and Federation (ADFS). Troubleshoot synchronization and authentication issues. Support tenant mergers, migra
Key Responsibilities
2. To provide support for complex incidents, escalated by analysts, perform root cause analysis, and implement solutions to resolve technical & security issues.
3. To work on value adding activities such as maintainenace of a comprehensive Knowledge base , act as a mentor to junior analysts,and deliver training programs for freshers, equipping them with essential skills to become productive .
4. To contribute to a positive customer experience and high CSAT scores by providing fast, accurate, and secure resolutions, fostering customer trust and satisfaction.
5. To proactively identify and address potential security vulnerabilities to protect customer data and prevent security incidents.