Operations Engineer

Project Role : Operations Engineer

Project Role Description : Support the operations and/or manage delivery for production systems and services based on operational requirements and service agreement.

Must have skills : Microsoft Active Directory

Good to have skills : Okta Identity Management, Identity Access Management (IAM), CyberArk Privileged Access Management

Minimum 5 Year(s) Of Experience Is Required

Educational Qualification : 15 years full time education

Summary:

As an Active Directory Engineer, provide Level 3 support for enterprise Active Directory environments, including complex incident resolution and root cause analysis. A typical day involves overseeing the smooth functioning of production systems and services, ensuring they meet operational requirements and service agreements. This role requires continuous monitoring, managing incidents, and coordinating with various teams to maintain system reliability and performance. The position demands proactive problem-solving and effective communication to support operational excellence and service delivery within a dynamic environment.

Roles & Responsibilities:

• Active Directory (Core L3 Responsibilities)
• Administer and manage:
• Domain Controllers (multi-domain / multi-forest)
• AD Sites & Services, replication, FSMO roles
• Group Policy Objects (GPOs) and security baselines
• Perform AD health checks, patching, backup/recovery, and performance optimization.
  
  

Troubleshoot:

• Authentication issues (Kerberos, NTLM)
• DNS, replication, AD Connect, and domain trust issues
• Entra ID (Azure AD) & Hybrid Identity
• Manage and support hybrid identity setups (AD + Entra ID) including AD Connect sync.
  
  

Implement and manage:

• Conditional Access policies, MFA, SSO
• Identity Protection and risk-based policies
• Administer:
• RBAC, Administrative Units, roles, App Registrations
• Troubleshoot:
• SSO (SAML, OAuth, OIDC), sync issues, federation
• Support Privileged Identity Management (PIM) and access governance activities.
• IAM / PAM
• Integrate IAM platforms with AD / Entra ID for SSO and access governance.
  
  

Support tools such as:

• Okta (SSO, MFA, lifecycle management)
• CyberArk (Privileged Access, vaulting, session management)
• Manage:
• User lifecycle (Joiner/Mover/Leaver)
• Privileged account onboarding and governance
• Troubleshoot authentication and identity issues across applications.
• Incident, Problem & Change Management
• Act as escalation point for L1/L2 teams and resolve complex IAM incidents. expertia.ai
• Perform root cause analysis (RCA) and implement long-term fixes.
• Participate in:
• Change reviews
• Problem management
• Service improvement initiatives
• Client Interaction & Stakeholder Management
• Act as primary technical interface for clients
• Lead:
• Technical discussions
• Workshops and requirement gathering sessions
• Provide:
• Status updates, incident communication, RCA reports
• Translate technical solutions into business-friendly outcomes
• Automation & Documentation
• Develop automation using:
• PowerShell / scripting tools
• Create and maintain:
• SOPs, runbooks, design documents
• Drive process improvements and standardization
• Security, Governance & Compliance
• Implement IAM controls aligned with RBAC and least-privilege principles
  
  

Conduct:

• Access reviews
• Audits and compliance reporting
  
  

Support security initiatives such as:

• Zero Trust
• Identity threat monitoring
  
  

Professional & Technical Skills:

• Strong hands-on experience in:
• Active Directory Domain Services (AD DS)
• Microsoft Entra ID (Azure AD)
• Expertise in:
• SSO (SAML, OAuth, OIDC)
• MFA, Conditional Access
• AD Connect / Hybrid Identity
• Experience with one or more : Okta / CyberArk / SailPoint / Saviynt
• Additional Technical Exposure (Good to Have) :
• PKI / Certificate Services
• DNS, DHCP, networking fundamentals
• Cloud IAM (Azure, AWS)
• SIEM / Security tools integration
  
  

Soft Skills & Professional Attributes

• Strong client-facing experience (mandatory)
• Excellent communication (verbal & written)
• Ability to handle high-pressure incidents and escalations
• Strong analytical and troubleshooting mindset
• Mentoring and leadership capabilities
  
  

Preferred Certifications

• Microsoft Certified: Identity and Access Administrator (SC-300)
• Microsoft Azure certifications (AZ-104 / AZ-500)
• Okta / CyberArk certifications (preferred)
  
  

Nice-to-Have Experience in:

• Identity Governance (IGA) tools
• Zero Trust architecture implementation
• Automation platforms and DevOps pipelines
  
  

Additional Information:

• The candidate should have minimum 5-10 years of total IT experience.
• Minimum 3+ years in L3 or advanced IAM/AD role.
• Experience in production support and global environments.
• This position is based at our Bengaluru office.
• A 15 years full time education is required.
• Bachelor s degree in Computer Science / IT or equivalent
• Willingness to work in UK shift model (including weekends/on-call)
• Exposure to multi-region/global client environments