Project Role : Security Architect

Project Role Description : Define the cloud security framework and architecture, ensuring it meets the business requirements and performance goals. Document the implementation of the cloud security controls and transition to cloud security-managed operations.

Must have skills : Microsoft 365 Security & Compliance

Good to have skills : NA

Minimum 3 year(s) of experience is required

Educational Qualification : 15 years full time education Directory Services Operations

Operate and maintain a hybrid identity architecture based on on-premise Active Directory and Entra ID in the M365 cloud

Manage Azure AD Connect synchronization, includ ing monitoring, troubleshooting, and lifecycle man agement

Administer Active Directory core services, including:

o Domains and trusts o Sites and Services o Replication topology o DNS integration

Ensure high availability, performance, and stability of directory services

Identity and Access Management

Administer Entra ID and Microsoft 365 tenant con figuration

Manage and optimize

o Conditional Access Policies o Identity protection and authentication meth ods o Tenant-wide security and identity settings

Support application integrations and identity federa tion scenarios o Review and validate requests to ensure com pliance with internal standards and pro cesses o Implement approved requests in a controlled and auditable manner o Access management and permission delega tion through Quest Active Roles

Security, Hardening & Compliance

Harden AD, Entra ID, and M365 environments based on security best practices and frameworks

(e.g. CIS Benchmarks)

Ensure

o Least-privilege access models o Secure authentication and authorization de signs o Regular review of privileged roles and access paths o Minimize risks for cyber-attacks or similar vulnerabilities





Support audits, security assessments, and remedia tion activities

Governance, Auditing and Reporting of AD by using

Quest s Active Administrator, Change Auditor, En terprise Reporter and IT Security Search

Mergers & Acquisitions (M&A;)

Support M&A; activities from an identity perspec tive, including:

o B2B collaboration and external identity ena blement o Migration from legacy AD and M365 environ ments, including using Quest On-Demand

Migration o Tenant-to-tenant and directory consolidation scenarios

Design and execute secure migration strategies with minimal business disruption

Backup & Recovery

AD backup and recovery through Quest Recovery

Manager

Manage Commvault Cloud (Metallic) as the M365

backup and recovery solution Ensure:

o Regular backup validation o Recovery readiness for identities, M365

workloads, and configurations o Compliance with retention and recovery re quirements

Automation & IAM Integration

Automation of tasks through PowerShell scripting

Support the design and implementation of self-ser vice workflows for identity-related use cases

Collaborate closely with the IAM team to:

o Align AD and M365 processes with SailPoint o Migrate or redesign existing Quest Active

Roles workflows into SailPoint

Promote automation, standardization, and reduc tion of manual administrative effort

Service Management & Collaboration

Work within ITIL-based processes, including:





o Incident Management o Service Request Fulfilment o Problem Management

Act as a technical consultant for internal teams and stakeholders

Provide 2nd and 3rd level support for identity-re lated issues Required Skills and Qual ifications

Technical Skills

Robust expertise in on-premise Active Directory ar chitecture and operations

In-depth knowledge of Entra ID and Microsoft 365

identity services

Sophisticated scripting knowledge, especially Mi crosoft PowerShell

Hands-on experience with Azure AD Connect

Solid understanding of

o Authentication and authorization concepts o Identity lifecycle management

Experience with Quest Active Directory manage ment and migration tools

Knowledge of backup and recovery concepts for identity and M365 workloads, ideally based on

Commvault Cloud (also called Metallic)

Security & Governance

Strong understanding of identity security best prac tices including resilience against cyber-attacks Experience applying security frameworks (e.g. CIS)

Ability to assess risks and enforce governance standards

Familiarity with audit, compliance, and reporting requirements

Professional & Methodological Skills

Experience working in ITIL-based service organiza tions

Structured, analytical, and proactive working style

High level of service orientation and customer focus

Ability to prioritize tasks and work effectively under pressure

Strong problem-solving and troubleshooting skills

Communication & Personal Skills

Very good communication skills across technical and non-technical stakeholders

Team-oriented mindset with the ability to work in dependently

High level of responsibility and ownership

Resilience, flexibility, and adaptability in complex environments

Fluent English, written and verbal (German is a plus)

📌 Security Architect (Chennai)
🏢 Accenture
📍 Chennai