Role

Subject Matter Expert

Required Technical Skill Set**

Active Directory SME

No of Requirements**

Desired Experience Range**

8 to 15 Years

Location of Requirement

Bengalauru Yeshwantpur / Electronic City

Desired Competencies (Technical/Behavioral Competency)

Must-Have**

(Ideally should not be more than 3-5)

1. Hands-on enterprise Active Directory / Windows Server (2016/2019/2022) administration at L3 level with deep expertise in AD DS design — multi-DC forests/domains, OUs, trusts, GPO management, DNS, Kerberos, and AD replication.
2. Proven experience with HA / DR domain controller architecture and AD backup/restore (including krbtgt & DSRM recovery).
3. Working knowledge of PAM and MFA integration and least-privilege / SoD / RBAC enforcement.
4. Strong PowerShell scripting for automation and reporting.

Positive-to-Have Candidate should have strong hands-on knowledge in one or more of the following platforms:

- Exposure to Azure AD / Entra ID and hybrid identity setups.
- Hands-on with PAM tools (Arcon / BeyondTrust) and MFA solutions used in the SSC stack.
- Familiarity with ITSM tools (ServiceNow / ManageEngine ServiceDesk Plus) for request/change workflows.




- Understanding of BFSI regulatory compliance (RBI, CERT-In, MeitY) and sovereign / secure cloud operating models.
- Relevant certifications (e.g., Microsoft Certified: Windows Server / Identity & Access Administrator).

Responsibility of / Expectations from the Role The person in this role is expected to:

- Design and administer Active Directory Domain Services (AD DS) on Windows Server 2022 — forests, domains, OUs, trees, trusts, and Group Policy Objects (GPOs).
- Architect and maintain High-Availability AD and multi-Domain-Controller setup with DR failover across data centers.
- Manage the full identity lifecycle — user/admin/service account onboarding, modification, and offboarding — enforcing least privilege, Segregation of Duties, and RBAC.
- Administer Kerberos authentication, DNS, NTP, AD replication, krbtgt/DSRM password resets, and scheduled AD backups & restores.
- Integrate AD with PAM and MFA for privileged/vaulted account management.
- Automate reporting and routine tasks via PowerShell, and produce audit/compliance evidence for security reviews.ties

📌 Walk-in || Active Directory Administrator_Walk in Drive (Bengaluru)
🏢 Tata Consultancy Services
📍 Bengaluru