Senior Identity Engineer - AD

Location: Bangalore, India

• Assess the current state of the client’s Active Directory and Azure/Entra ID deployment, including forest design, site design, domain design, security group topology, deployment architecture, organizational unit (“OU”) design, authentication, and group policy design.
• Run PowerShell queries against the client AD to determine relevant statistics of current AD and Azure objects, including users, accounts, groups, organizational units (OUs), computer objects, and related identity objects
• Review AD configurations, processes, and documentation to understand the client’s current deployment and operating model.
• Identify configuration and operational gaps in the client’s AD domains, infrastructure, architecture, and deployment.
• Prioritize identified gaps based on criticality and risk.
• Provide recommendations to address critical gaps and risks across AD and Entra ID environments.
• Discover and assess current processes for AD group management, AD group policy management, and AD account management.
• Suggest modifications and refinements to existing processes and create new processes if required.
• Determine the resources and skills necessary to complete remediation activities and achieve defined milestones.
• Provide an estimated budget to accomplish remediation as outlined during the assessment phases.
• Leverage client tools such as ADUC (Active Directory Users & Computers), ManageEngine, StealthAUDIT, or other AD scanning utilities as needed to accomplish data-gathering activities.

• Strong experience as an Active Directory Architect, including domain consolidation, AD assessment, and enterprise identity infrastructure review.
• Hands-on knowledge of Active Directory forest, site, domain, OU, security group, authentication, and group policy design.
• Experience assessing Azure/Entra ID deployments and hybrid identity environments.
• Ability to run and interpret PowerShell queries against AD domains to gather statistics on users, accounts, groups, OUs, computer objects, and related AD/Azure objects.
• Ability to identify configuration and operational gaps and prioritize them based on criticality and risk.
• Experience reviewing AD configurations, processes, and documentation.
• Working knowledge of tools such as ADUC, Group Polcies, DNS, AD Trusts, AD Sites and services, AD Replications, and other AD scanning utilities.
• Ability to provide practical recommendations, remediation planning inputs, resource estimates, skill requirements, and budget estimates.
• Strong communication skills to document findings, recommendations, risks, and remediation plans for stakeholders.
• Disaster Recovery & Backup, review AD forest recovery readiness, backup schedules, and Azure Entra disaster recovery setup.
• Monitoring & Alerting, Evaluate monitoring tools (SCOM, ManageEngine, Azure Monitor) and alert thresholds for AD/Entra events.
• Privileged Access Management, Assess privileged account handling, tiered admin models, and PAM/JIT/JEA usage.
• Certificate & PKI Integration, Review AD CS/PKI setup, certificate lifecycle management, and Entra authentication integration.
• Hybrid Identity & Federation, Evaluate ADFS, Pass‑through Authentication, Seamless SSO, and hybrid identity configurations.
• Conditional Access & MFA, Review conditional access policies, MFA enforcement, and exception handling.
• Lifecycle Management, Assess joiner/mover/leaver processes, automation, and HR system integration.
• Audit & Compliance, Review logging, audit trails, and compliance with ISO, SOC2, GDPR, etc.
• Patch & Update Management, Validate patch/update cadence for Domain Controllers and Entra connectors.
• Third‑Party Integrations, Identify external apps/services integrated with AD/Entra and assess their security posture.

Simeio is an equal opportunity employer. If you require assistance with completing this application, interviewing, completing any pre-employment testing, or otherwise participating in the employee selection process, please direct your inquiries to any of the recruitment team at recruitment@simeio.com or +1 404-882-3700.