Role: Active Directory Lead

Location: Bangalore, Delhi, Chennai, Hyderabad, Mumbai

Contract

Responsibilities

We are looking for an L3 Active Directory Architect/Lead to own identity strategy,

architecture, and governance across hybrid environments.

You will design secure, scalable AD/Entra ID solutions, lead complex migrations, and set standards aligned to Zero Trust principles.

· Define AD/Entra ID architecture, standards, and roadmaps; lead multi-forest/domain designs and trust models.

· Drive security posture: tiered administration model, PAWs, break-glass accounts, privileged access governance (PIM).

· Own Conditional Access strategy, MFA, passwordless (FIDO2), and authentication method policies.

· Lead M&A; identity integration, domain consolidation/decommissioning, and coexistence strategies.

· Design and supervise DR/BCP for identity, including authoritative restores and recovery exercises.

· Establish baselines (CIS, MS security baselines) and GPO architecture; approve patterns and reviews.

· Oversee Azure AD Connect/Entra Connect architecture (multi-forest, staging, writeback, cloud sync).

· Integrate identity with SIEM/SOAR; define logging, monitoring, and alerting requirements.

· Sponsor automation frameworks; code reviews for PowerShell modules; IaC patterns for identity resources.

· Lead major incident management and executive communication; provide RCA and remediation programs.

Key Responsibilities

· Expert knowledge of AD and Entra ID internals, replication, and authentication flows. ·

Enterprise PKI/Certificate Services, gMSA, SPNs, constrained delegation,



and protocol transition mastery. · Cross-forest trust, SID filtering, selective authentication, and migration planning expertise. · Zero Trust alignment, identity governance frameworks,

and risk management. · Strong stakeholder management and vendor engagement skills.

Skill Requirements

· Forest/domain design, functional level planning, schema extensions, and upgrade strategies. · Advanced GPO design (loopback, WMI filters, security baselines) and impact analysis. · High availability designs for DCs, sites, and replication; capacity planning. · Disaster recovery leadership including authoritative restore scenarios and table-top exercises. · Automation leadership in PowerShell; integration with pipelines and code repositories. · SSO architecture across heterogeneous apps; ADFS retirement and Entra ID Enterprise App patterns.

Must Have skills

Proven experience leading large-scale AD/Entra ID programs and migrations. · Security hardening, audit compliance, and governance ownership. · Designing and operating cross-domain/forest trusts and selective authentication. · Conditional Access strategy and passwordless adoption (FIDO2). · Defender for Identity and threat modeling for AD.

Positive to have skills

· Deep IGA exposure (SailPoint/Entra ID Governance) and lifecycle orchestration. ·

Integration with SIEM (Microsoft Sentinel/others) and response playbooks. · Experience with identity in cloud-native architectures and Zero Trust adoption programs. · Broad network/security knowledge (Kerberos across NAT, firewalls, tiering).

📌 Active Directory Specialist :: Contract :: Bangalore, Delhi, Chennai, Hyderabad, Mumbai (Bengaluru)
🏢 AceStack
📍 Bengaluru