Identity & Directory Services Tech Lead – Workplace & Security

Company Profile

At CGI, we’re a team of builders. We call our employees members because all who join CGI are building their own company - one that has grown to 72,000 professionals located in 40 countries. Founded in 1976, CGI is a leading IT and business process services firm committed to helping clients succeed.

We have the global resources, expertise, stability and dedicated professionals needed to achieve. At CGI, we’re a team of builders. We call our employees members because all who join CGI are building their own company - one that has grown to 72,000 professionals located in 40 countries.

Founded in 1976, CGI is a leading IT and business process services firm committed to helping clients succeed. We have the global resources, expertise, stability and dedicated professionals needed to achieve results for our clients - and for our members. Come grow with us.

Learn more at www.cgi.com.

This is a great opportunity to join a winning team. CGI offers a competitive compensation package with opportunities for growth and professional development.

Benefits for full-time, permanent members start on the first day of employment and include a paid time-off program and profit participation and stock purchase plans. We wish to thank all applicants for their interest and effort in applying for this position, however, only candidates selected for interviews will be contacted. No unsolicited agency referrals please.

Job Title: Tech Lead

Position: Identity & Directory Services Tech Lead – Workplace & Security

Experience: 5+ Years

Category: IT Infrastructure

Main location: Bangalore/Chennai

Position ID: J0726-0896

Employment Type: Full Time

Identity & Directory Services Tech Lead – Workplace & Security

Scope: Identity & Directory Services – Global Workplace environments

Key interfaces

. L1 / L2 Support (Onshore & Offshore)

. L3 Workplace / Infrastructure / Security teams

. IT Projects / Build / Transformation teams

. Change, Release & CAB

. Security, IAM & Compliance teams

Job Summary

The Active Directory Expert / Identity Architect role is part of a major Workplace and Identity transformation, operating in a hybrid Microsoft environment combining On Prem Active Directory and Microsoft Entra ID, deployed across more than 43 countries.

The role combines advanced technical expertise, Run accountability, security reinforcement and architectural contribution, in an international, complex and security critical setting, subject to strong regulatory and compliance constraints.

This is a senior global reference role, embedded within a global Workplace organization composed of onshore (France) and offshore (India) resources. The expert acts as the ultimate technical reference for Identity and Active Directory, ensuring standards, consistency and best practices across all environments.

Key Responsibilities

1. Active Directory Architecture Reference (core responsibility)

. Own and promote AD standards at enterprise scale . Design, maintain and evolve: Forest and domain architectures

Trust relationships

Replication models

.



Challenge project design choices and ensure Run, security and resilience compliance

. Validate Active Directory and Identity designs from a production and security standpoint

This is a decision making and reference role, not limited to administration.

1. Hybrid Identity & Microsoft Entra ID (reinforced expectations)

. Advanced expertise in Hybrid Identity architectures . Full mastery of integration between:

Active Directory On Prem

Microsoft Entra ID (Azure AD)

Azure AD Connect / Cloud Sync

Hybrid authentication flows

Complex identity synchronization scenarios

. Ability to analyze and explain Identity impacts on:

Workplace services

Security

Business applications The role requires a functional and security oriented understanding of authentication flows, not just directory synchronization.

1. Active Directory Security & Hardening (key pillar)

. Act as a key authority on Active Directory security posture . Deep understanding of Active Directory attack techniques and attack paths

Tiering model (Tier 0 / 1 / 2)

Privileged account separation

Domain Controller hardening

. Actively challenge projects and changes that do not meet security requirements

. Contribute to:

Security audits

Risk assessments

Remediation action plans The role includes real technical and security authority over the Identity perimeter.

1. Core AD Services (DNS, GPO, Dependencies)

. Strong expertise in Active Directory integrated DNS, considered a critical service

Complex DNS architectures

Name resolution issues impacting authentication and services

. Advanced mastery of:

Group Policy design, optimization and troubleshooting

GPO impacts on security and Workplace services

. Understanding of DHCP dependencies, where applicable

1. PKI & Identity Related Security Services

. Strong hands on knowledge of Enterprise PKI . Clear understanding of:

Certificate lifecycle management

Certificate roles in authentication and encryption

. Ability to troubleshoot complex certificate related identity issues

. Awareness of data protection and classification services (AIP)

1. Run, N3 Support & Advanced Troubleshooting

. Act as N3 Identity / Active Directory expert, final escalation point . Handle incidents that are:

Complex

Critical

Non documented

. Advanced troubleshooting on:

AD replication issues

Authentication failures

Trust and federation problems

. Ability to analyze:

System logs

Security events

Abnormal infrastructure behavior

. Ability to operate under high operational pressure and crisis situations
1. Change Management, Standards & Governance

. Perform impact analyses and define rollback strategies . Define, formalize and enforce Active Directory and Identity standards

. Produce, validate and maintain:

Technical procedures

Architecture documentation (DAT)





Runbooks

. Actively contribute to the maturity and autonomy of L2 teams

1. Automation & Continuous Improvement

. Expert use of PowerShell for:

Administrative automation

Run activities

Reporting and AD health checks

. Identify structural weaknesses and recurring incidents

. Propose and lead continuous improvement initiatives for Identity services

Required Skills

Technical Skills

. Expert level Active Directory knowledge

Microsoft Entra ID

Complex hybrid Identity architectures

. Strong expertise in:

Active Directory security and hardening

DNS / GPO

PKI

. Recognized advanced troubleshooting capabilities

. Strong PowerShell proficiency

Functional Skills

. Ability to operate in a global, multi entity environment

. Strong understanding of Run / Build / Project organizations

. Solid familiarity with ITIL processes

. Proven experience working with onshore and offshore teams

Posture & Soft Skills

. Senior N3 / global reference expert posture, credible and recognized

. Natural technical authority and ability to challenge decisions

. High autonomy and strong sense of ownership

. Structured, rigorous and security driven mindset

. Excellent communication skills in international contexts

Target Profile

. Bachelor's to Master's degree in IT (or equivalent experience)

. 5 to 8+ years of experience in Active Directory / Identity

. Strong experience in hybrid Microsoft environments

. International exposure is a strong plus

. Professional English mandatory (written and spoken)

This is a senior Active Directory / Identity expert role, acting as a global technical reference, accountable for stability, security and evolution of enterprise Identity services

Your future duties and responsibilities

Required qualifications to be successful in this role

Together, as owners, let’s turn meaningful insights into action.

Life at CGI is rooted in ownership, teamwork, respect and belonging. Here, you’ll reach your full potential because…

You are invited to be an owner from day 1 as we work together to bring our Dream to life. That’s why we call ourselves CGI Partners rather than employees. We benefit from our collective success and actively shape our company’s strategy and direction.

Your work creates value. You’ll develop innovative solutions and build relationships with teammates and clients while accessing global capabilities to scale your ideas, embrace new opportunities, and benefit from expansive industry and technology expertise.

You’ll shape your career by joining a company built to grow and last. You’ll be supported by leaders who care about your health and well-being and provide you with opportunities to deepen your skills and broaden your horizons.

That same commitment to fairness extends to how we use technology. To support our recruitment team, AI tools may be used to help assess applications though they never replace human judgement. All hiring decisions remain entirely in the hands of our recruitment professionals.

Come join our team—one of the largest IT and business consulting services firms in the world.

📌 Identity & Directory Services Tech Lead – Workplace & Security (Bengaluru)
🏢 CGI
📍 Bengaluru