Job Title: O365/AD Admin – L2+

nBand: Band 2

nExperience: 4 to 8 years

nLocation: Chennai (work from Office)

nAbout the Role

nWe are looking for an experienced L2+ O365/AD Admin to manage, support, and troubleshoot our Microsoft 365 (O365) and Active Directory (AD) environment as a dedicated function within the EUC tower. The ideal candidate will handle day-to-day mailbox and messaging administration, identity and access management, user lifecycle (Joiner/Mover/Leaver) activities, and endpoint productivity services support, working closely with L1 support and L3/EUC Architects to ensure secure, reliable, and well-governed collaboration and identity platforms.

nKey Responsibilities

nOffice 365 / Exchange Online Administration

n

n
- Manage and support Exchange Online mailbox administration — mailbox creation, permissions, distribution lists, shared/resource mailboxes, and mail flow/transport rules.
n
- Handle L2 escalations from L1 for mailbox and messaging issues — mail flow delays, delivery failures, quota/size issues, and mobile device (ActiveSync) sync problems — within defined SLAs.
n
- Perform user account provisioning and deprovisioning within Microsoft 365, including license assignment/management and application access setup.
n
- Provide L2 support for Microsoft 365 applications — Outlook, Teams, OneDrive, SharePoint Online — including access, sync, and performance issues.
n
- Support endpoint productivity services — Microsoft 365 apps deployment, activation issues, and integration with endpoint management tools.
n
- Monitor Microsoft 365 service health and communicate proactively on service incidents/advisories impacting mailbox or collaboration services.
n

nActive Directory Administration

n

n
- Manage on-premises and/or Azure AD (Entra ID) user account administration — creation, modification, disablement, and deletion in line with defined processes.
n
- Administer security and distribution groups, organizational units (OUs), and permission structures, ensuring least-privilege access principles.
n
- Support authentication and access control — password resets, account lockouts, MFA configuration issues, and conditional access-related troubleshooting.
n
- Execute Joiner/Mover/Leaver (JML)



activities end-to-end — account provisioning for new hires, access/role changes for role movements, and timely de-provisioning for leavers.
n
- Perform identity administration and policy enforcement — Group Policy Objects (GPO), password/account policies, and directory hygiene/cleanup activities.
n
- Support AD replication health checks, DNS/DHCP-related identity issues, and hybrid identity synchronization (Azure AD Connect/Entra Connect) monitoring.
n

nTroubleshooting

n

n
- Diagnose and resolve mailbox and mail flow issues — message tracing, transport rule conflicts, spam/quarantine issues, and connector failures.
n
- Troubleshoot Active Directory authentication failures, replication errors, GPO application issues, and account lockout root causes.
n
- Investigate Azure AD Connect/Entra Connect sync errors and hybrid identity mismatches between on-premises AD and Microsoft 365.
n
- Debug user access issues spanning both O365 and AD — license/permission mismatches, group membership errors, and conditional access blocks.
n
- Perform root cause analysis for recurring incidents and drive permanent fixes in coordination with L3/EUC Architecture teams.
n

nSecurity & Access

n

n
- Implement and manage role-based access control (RBAC) within Microsoft 365 admin centers and Active Directory for secure, least-privilege access.
n
- Support compliance and data protection features — mailbox auditing, retention policies, DLP alerts, and litigation hold requests.
n
- Ensure JML processes are executed within SLA to minimize orphaned accounts, excess access, and audit findings.
n
- Ensure compliance with patch SLAs, access review cycles, and audit/regulatory requirements related to identity and messaging platforms.
n

nPlatform & Automation

n

n
- Automate routine O365/AD administrative tasks using PowerShell (Exchange Online PowerShell, AzureAD/Microsoft Graph, ActiveDirectory module).
n




- Contribute to standardization of onboarding/offboarding checklists, naming conventions, and access request workflows.
n
- Work with monitoring and reporting tools to proactively track license utilization, mailbox growth, and AD account hygiene.
n
- Support integration between O365/AD processes and endpoint/automation platforms used within the broader EUC tower.
n
- Document runbooks, SOPs, and knowledge base articles for recurring O365 and AD issues.
n
- Participate in on-call/shift-based support rotation and support during planned maintenance or major directory/tenant changes.
n

nRequired Skills & Qualifications

n

n
- Bachelor's degree in Computer Science, IT, or related field (or equivalent experience).
n
- 4 to 8 years of hands-on experience in Office 365/Exchange Online administration and Active Directory/Azure AD administration.
n
- Robust hands-on experience with Exchange Online mailbox management, mail flow troubleshooting, and Microsoft 365 admin center administration.
n
- Solid working knowledge of on-premises Active Directory and Azure AD (Entra ID), including group/OU management and hybrid identity concepts.
n
- Demonstrated experience executing Joiner/Mover/Leaver (JML) processes and identity lifecycle management within an enterprise environment.
n
- Working knowledge of PowerShell scripting for Exchange Online and Active Directory administration and automation.
n

nPreferred / Good to Have

n

n
- Microsoft Certified: Modern Desktop Administrator Associate, Identity and Access Administrator Associate, or Microsoft 365 Certified: Administrator Expert.
n
- Experience with Azure AD Connect/Entra Connect configuration and troubleshooting for hybrid identity environments.
n
- Exposure to conditional access, Multi-Factor Authentication (MFA), and Microsoft Purview compliance/data protection features.
n
- Experience working within an ITSM/ticketing platform for incident, request, and change management.
n
- Familiarity with endpoint management tools (Microsoft Intune) and their integration with Azure AD-based identity.
n
- Exposure to automation/scripting for bulk account operations and reporting (PowerShell, Microsoft Graph API).
n

📌 & AVD Administrator (Tamil Nadu)
🏢 Neurealm
📍 Tamil Nadu