L3 Identity Engineer

Location : Bangalore WFO (All 5 Days)

Fulltime Permanent Role )

Key sills :PIM, Access Package, Conditional Access, MFA, SSPR.

Interview Mode: Interview Mode - 3 Rounds. We are planning for Monday and Tuesday .Every round will be F2F, or 2 will be virtual, and then final round will be F2F.

NB: Must be open to rotational shifts (Night shifts are included).

Cab facility – Yes

About the Role

This role owns the workforce identity platform across Microsoft Entra ID and on-premises Active

Directory. Day to day, you will engineer authentication, access, and governance - Joiner-Mover-Leaver automation, Conditional Access, Privileged Identity Management, and Group Policy - keeping identity secure, compliant, and seamless for a global workforce in a PCI DSS environment.

Key Responsibilities

● Identity platform — Engineer and operate Microsoft Entra ID and hybrid on-premises

Active Directory, including sync, federation, and domain services.

● Joiner-Mover-Leaver — Design and automate the JML lifecycle and access provisioning; ensure timely, accurate, and auditable joiner, mover, and leaver processing.

● Access & Conditional Access — Own Conditional Access policies, MFA, and risk-

based access to protect users and data.

● Privileged access — Administer Privileged Identity Management (PIM) and least-

privilege, just-in-time access for administrative roles.





● Group Policy & configuration — Maintain and rationalise Group Policy (GPO) and directory configuration across the hybrid estate.

● Identity governance — Run access reviews, entitlement management, and certification to meet security and compliance requirements.

● Automation — Automate identity operations with PowerShell and the Microsoft

Graph API.

● Escalation & 3rd line — Act as the highest escalation point for identity and access incidents and problems.

Essential Skills & Experience

● Deep hands-on experience with Microsoft Entra ID (Azure AD) - authentication,

Conditional Access, and identity protection.

● Strong on-premises Active Directory and hybrid identity experience (Entra Connect,

DNS, sites, trusts).

● Expertise in Joiner-Mover-Leaver automation and identity lifecycle / provisioning.

● Hands-on Privileged Identity Management (PIM) and privileged access models.

● Strong Group Policy (GPO) design and administration.

● Identity governance experience - access reviews, entitlement management, and certification.

● Strong scripting with PowerShell and the Microsoft Graph API.

● Experience in a regulated, ITIL change-controlled workplace (PCI DSS an advantage).

● Microsoft Identity and Access Administrator (SC-300) certification desirable.

📌 Identity Engineer (Bengaluru)
🏢 Protonlogics IT Solutions
📍 Bengaluru