Track Manager - Microsoft Forefront Identity Manager, Azure Active Directory

Experience: 8 to 12 years

Location: Gautam Buddha Nagar, India

Skills: Microsoft Defender for Identity, Active Directory, identity threat detection, authentication mechanisms, credential theft, pass-the-hash, lateral movement, authentication logs, security alerts, identity behavior anomalies, identity threat hunting, security incident investigation, SOC operating models, incident management, security response procedures

Job Summary
The MDI L3 Engineer is responsible for advanced administration, monitoring, and investigation of identity-based threats detected by Microsoft Defender for Identity. The role focuses on maintaining the health of MDI sensors, analyzing identity security alerts, performing threat investigations, and improving detection capabilities within the Active Directory setting. The engineer will work closely with security operations teams to ensure timely response to identity-related threats and strengthen identity security monitoring.

Key Responsibilities
Provide advanced operational and engineering support for Microsoft Defender for Identity across the enterprise Active Directory environment.
• Monitor the health and performance of MDI sensors deployed across domain controllers and ensure proper telemetry collection.
• Investigate complex identity-related security alerts generated by Microsoft Defender for Identity.
• Perform deep analysis of suspicious authentication activities, privilege escalation attempts, lateral movement patterns, and abnormal user behaviors.
• Conduct identity threat hunting activities using MDI alerts, logs, and behavioral analytics.
• Tune identity security alerts and detection rules to reduce false positives and improve detection accuracy.
• Coordinate with Security Operations Center (SOC)



teams for incident response and escalation of identity-related security incidents.
• Analyze security events related to Active Directory authentication and identify potential identity compromise scenarios.
• Support remediation efforts for identity threats identified through MDI alerts and investigations.
• Perform root cause analysis for high-severity identity security incidents.
• Ensure continuous monitoring of domain controller activity through MDI sensors and investigate anomalies affecting sensor health.
• Support deployment validation and operational maintenance of MDI sensors in the Active Directory infrastructure.
• Generate operational reports related to identity threat detections, alert trends, and investigation outcomes.
• Support security audits and compliance activities related to identity threat monitoring.
• Maintain operational documentation including investigation procedures, detection use cases, and monitoring guidelines.
• Collaborate with identity and infrastructure teams to strengthen identity security posture and detection capabilities.

Skill Requirements
Hands-on experience working with Microsoft Defender for Identity or identity threat detection platforms.
• Strong understanding of Active Directory security architecture and authentication mechanisms.
• Knowledge of identity attack techniques such as credential theft, pass-the-hash, and lateral movement.
• Experience analyzing authentication logs, security alerts, and identity behavior anomalies.
• Familiarity with identity threat hunting and security incident investigation processes.
• Understanding of enterprise security monitoring and SOC operating models.
• Experience working with incident management and security response procedures.

Other Requirements
8-12 years with certification

📌 Track Manager Microsoft Forefront Identity Manager, Azure Active (Noida)
🏢 HCL Technologies
📍 Noida