Role: Active Directory SME

Experience: 8+ years

Location: Chennai

Job Requirements*

- 10+ years of experience in Active Directory architecture and enterprise identity solutions
- Strong expertise in:
- Active Directory (Forest/Domain design, Trusts, Replication, Sites)
- ADFS / Federation Services
- Azure AD (Entra ID) & Hybrid Identity
- Proven experience in:
- Large-scale AD migrations, consolidations, and domain restructuring
- Designing high availability, disaster recovery, and global AD architectures
- Deep understanding of:
- DNS, DHCP, LDAP, Kerberos authentication
- Identity lifecycle management and RBAC models
- Experience with:
- Security frameworks (Zero Trust, Tiered AD model, Privileged Access Workstations)
- MFA and Conditional Access
- Solid knowledge in:
- Group Policy design, governance, and optimization
- Good understanding of:
- Infrastructure dependencies (Windows Server, Networking, Security)
- Expertise in automation using:
- PowerShell scripting

Key Responsibilities*

Architecture & Strategy

- Define enterprise-wide Active Directory architecture, including forest/domain structures and trust models
- Design scalable, secure, and highly available identity platforms aligned with business requirements
- Establish architecture standards, governance policies, and best practices

AD & Identity Solutions

- Architect and implement:




- Active Directory (on-premises & hybrid)
- ADFS and federation solutions
- Azure AD / Entra ID integration
- Design authentication and authorization frameworks across enterprise applications

Security & Compliance

- Implement AD security hardening strategies (Tier Model, Least Privilege, PAM/PIM)
- Define identity protection strategies including:
- Conditional Access
- MFA
- Ensure compliance with enterprise security and regulatory requirements

Migration & Transformation

- Lead AD transformation initiatives:
- Domain consolidation
- Forest migrations
- Hybrid identity enablement
- Define migration strategies, tools, and rollout plans

Operational Excellence

- Define DR, backup, and resilience strategies
- Monitor and ensure AD availability, performance, and reliability
- Establish operational runbooks, SOPs, and documentation

Automation & Optimization

- Drive automation using PowerShell for:
- User provisioning
- Policy enforcement
- Monitoring and reporting
- Optimize AD performance, replication, and GPO structures

Stakeholder Management

- Collaborate with:
- Infra, Security, and Application teams
- Translate business requirements into technical architecture
- Support presales, solutioning, and customer discussions

📌 Active Directory Subject Matter Expert (Chennai)
🏢 Tata Consultancy Services
📍 Chennai