Required Technical Skill Set :

Active Directory

Desired Experience Range : 8 to 15 Years

Location of Requirement Bengalauru Yeshwantpur

Competencies (Technical/Behavioral Competency)

Must-Have**Hands-on enterprise Active Directory / Windows Server (2016/2019/2022) administration at L3 level with deep expertise in AD DS design — multi-DC forests/domains, OUs, trusts, GPO management, DNS, Kerberos, and AD replication.Proven experience with HA / DR domain controller architecture and AD backup/restore (including krbtgt & DSRM recovery).Working knowledge of PAM and MFA integration and least-privilege / SoD / RBAC enforcement.

Strong

PowerShell scripting for automation and reporting.

Positive-to-HaveCandidate should have strong hands-on knowledge in one or more of the following platforms:Exposure to Azure AD / Entra ID and hybrid identity setups.Hands-on with PAM tools (Arcon / BeyondTrust) and MFA solutions used in the SSC stack.Familiarity with ITSM tools (ServiceNow / ManageEngine ServiceDesk Plus) for request/change workflows.Understanding of BFSI regulatory compliance (RBI, CERT-In, MeitY)



and sovereign / secure cloud operating models. Relevant certifications (e.g., Microsoft Certified: Windows Server / Identity & Access Administrator).

Responsibility of / Expectations from the Role

- Design and administer Active Directory Domain Services (AD DS) on Windows Server 2022 — forests, domains, OUs, trees, trusts, and Group Policy Objects (GPOs).
- Architect and maintain High-Availability AD and multi-Domain-Controller setup with DR failover across data centers.
- Manage the full identity lifecycle — user/admin/service account onboarding, modification, and offboarding — enforcing least privilege, Segregation of Duties, and RBAC.
- Administer Kerberos authentication, DNS, NTP, AD replication, krbtgt/DSRM password resets, and scheduled AD backups & restores.
- Integrate AD with PAM and MFA for privileged/vaulted account management.
- Automate reporting and routine tasks via PowerShell, and produce audit/compliance evidence for security reviews.

📌 Walk-in || Active Directory Subject Matter Expert (Bengaluru)
🏢 Tata Consultancy Services
📍 Bengaluru