Active Directory SME

Role: Active Directory SME

Experience: 8+ years

Location: Chennai

Job Requirements*

• 10+ years of experience in Active Directory architecture and enterprise identity solutions
• Strong expertise in:
• Active Directory (Forest/Domain design, Trusts, Replication, Sites)
• ADFS / Federation Services
• Azure AD (Entra ID) & Hybrid Identity
• Proven experience in:
• Large-scale AD migrations, consolidations, and domain restructuring
• Designing high availability, disaster recovery, and global AD architectures
• Deep understanding of:
• DNS, DHCP, LDAP, Kerberos authentication
• Identity lifecycle management and RBAC models
• Experience with:
• Security frameworks (Zero Trust, Tiered AD model, Privileged Access Workstations)
• MFA and Conditional Access
• Strong knowledge in:
• Group Policy design, governance, and optimization
• Good understanding of:
• Infrastructure dependencies (Windows Server, Networking, Security)
• Expertise in automation using:
• PowerShell scripting

Key Responsibilities*

Architecture & Strategy

• Define enterprise-wide Active Directory architecture, including forest/domain structures and trust models
• Design scalable, secure, and highly available identity platforms aligned with business requirements
• Establish architecture standards, governance policies, and best practices

AD & Identity Solutions

• Architect and implement:
• Active Directory (on-premises & hybrid)
• ADFS and federation solutions
• Azure AD / Entra ID integration
• Design authentication and authorization frameworks across enterprise applications

Security & Compliance

• Implement AD security hardening strategies (Tier Model, Least Privilege, PAM/PIM)
• Define identity protection strategies including:
• Conditional Access
• MFA
• Ensure compliance with enterprise security and regulatory requirements

Migration & Transformation

• Lead AD transformation initiatives:
• Domain consolidation
• Forest migrations
• Hybrid identity enablement
• Define migration strategies, tools, and rollout plans

Operational Excellence

• Define DR, backup, and resilience strategies
• Monitor and ensure AD availability, performance, and reliability
• Establish operational runbooks, SOPs, and documentation

Automation & Optimization

• Drive automation using PowerShell for:
• User provisioning
• Policy enforcement
• Monitoring and reporting
• Optimize AD performance, replication, and GPO structures

Stakeholder Management

• Collaborate with:
• Infra, Security, and Application teams
• Translate business requirements into technical architecture
• Support presales, solutioning, and customer discussions