Technical Lead
Noida, Uttar Pradesh
Job Summary
Job Title: Microsoft Entra Identity & Provisioning Consultant
Job Summary
We are seeking an experienced Microsoft Entra Identity & Provisioning Consultant to lead the design, implementation, and optimization of enterprise identity lifecycle management solutions. The ideal candidate will possess deep expertise in Microsoft Entra ID (formerly Azure AD) , Workday-to-Entra provisioning , Active Directory synchronization , and identity governance processes .
This role requires a hands-on technical architect who can design and implement end-to-end identity provisioning architectures across complex, multi-domain enterprise environments. The candidate will be responsible for configuring automated user lifecycle management, designing synchronization strategies, troubleshooting provisioning issues, and ensuring secure, scalable identity management solutions that align with organizational security and compliance requirements.
Key Responsibilities
Identity Provisioning & Lifecycle Management
Design, configure, and support Microsoft Entra Provisioning Services for automated user lifecycle management.
Implement and maintain Workday-to-Microsoft Entra integration using Enterprise Applications and provisioning connectors.
Configure provisioning scopes, attribute mappings, transformation expressions, and synchronization rules.
Analyze and work with Workday GetWorker XML payloads, including XPath expressions and attribute transformations.
Ensure accurate onboarding, updates, transfers, and offboarding of user identities across connected systems.
Microsoft Entra & Directory Services Architecture Architect and implement enterprise-grade identity management solutions using Microsoft Entra ID.
Define and manage identity synchronization strategies between on-premises Active Directory and Microsoft Entra.
Configure and optimize Microsoft Entra Connect across complex enterprise environments.
Design high-availability and scalable identity architectures supporting multiple business units, regions, and domains.
Active Directory & Synchronization Management Configure synchronization between Local Active Directory and Microsoft Entra across multiple domain controllers and servers.
Develop and maintain advanced synchronization rules, attribute mappings, and transformation logic.
Manage and troubleshoot synchronization issues, duplicate identities, and provisioning failures.
Work with AD organizational structures including:
Forests Trees Root Domains Child Domains Organizational Units (OUs) Multi-Domain and Regional Provisioning Strategy Design identity routing strategies for organizations operating across multiple countries and regions.
Leverage parentDistinguishedName and directory hierarchy structures to direct provisioning traffic appropriately.
Configure synchronization and provisioning workflows across geographically distributed domain environments.
Ensure consistent identity governance and security policies across multiple Active Directory domains.
Identity Governance & Access Management Support identity governance initiatives, role-based access control (RBAC), and access lifecycle processes.
Collaborate with security, infrastructure, HR, and application teams to ensure secure identity management practices.
Contribute to access review, compliance, audit, and governance programs. Recommend best practices for identity security, automation, and provisioning governance.
Troubleshooting & Optimization
Diagnose and resolve provisioning, synchronization, and integration issues. Perform root-cause analysis for identity lifecycle management failures.
Optimize synchronization performance and provisioning processes.
Develop technical documentation, architecture diagrams, and operational procedures.
Required Skills & Qualifications
Technical Skills
Microsoft Entra ID
Strong expertise in Microsoft Entra ID administration and architecture.
Experience configuring and managing Entra Enterprise Applications.
Deep understanding of Entra Provisioning Service and lifecycle management.
Workday Integration
Hands-on experience integrating Workday with Microsoft Entra. Experience working with: Workday GetWorker API XML payloads XPath expressions Attribute mapping and transformations Familiarity with HR-driven identity lifecycle workflows.
Microsoft Entra Connect
Solid experience configuring and managing Microsoft Entra Connect. Expertise in identity synchronization between on-premises Active Directory and Microsoft Entra.
Experience with:
Synchronization rules Metaverse concepts Attribute flows Filtering and scoping configurations
Active Directory
Deep understanding of: Active Directory Domain Services (AD DS) Forests and trust relationships Root and child domains Organizational Units Group Policies Distinguished Names and LDAP structures
Identity & Access Management (IAM)
Strong understanding of: Identity lifecycle management Joiner-Mover-Leaver processes Role
Skill Requirements
- Experience with API-driven provisioning and identity integrations.
- Experience integrating SaaS applications with Microsoft Entra.
- Knowledge of SCIM-based provisioning.
- Experience with Microsoft Identity Governance capabilities.
- Familiarity with PowerShell automation for identity management.
- Understanding of authentication protocols:
- - SAML
- OAuth 2.0
- OpenID Connect
- WS-Federation
- Experience working within enterprise security and compliance frameworks.
- Exposure to Privileged Identity Management (PIM) and Conditional Access configurations.
Experience Requirements
- 8+ years of experience in Identity & Access Management (IAM).
- 5+ years of hands-on experience with Microsoft Entra ID / Azure AD.
- Proven experience implementing Workday-to-Entra provisioning solutions.
- Experience managing large-scale Active Directory and hybrid identity environments.
- Demonstrated experience as a Technical Architect or Lead Engineer in Identity Management projects.
Other Requirements
Preferred Skills
- Experience with API-driven provisioning and identity integrations.
- Experience integrating SaaS applications with Microsoft Entra.
- Knowledge of SCIM-based provisioning.
- Experience with Microsoft Identity Governance capabilities.
- Familiarity with PowerShell automation for identity management.
- Understanding of authentication protocols:
- - SAML
- OAuth 2.0
- OpenID Connect
- WS-Federation
- Experience working within enterprise security and compliance frameworks.
- Exposure to Privileged Identity Management (PIM) and Conditional Access configurations.
Experience Requirements
- 8+ years of experience in Identity & Access Management (IAM).
- 5+ years of hands-on experience with Microsoft Entra ID / Azure AD.
- Proven experience implementing Workday-to-Entra provisioning solutions.
- Experience managing large-scale Active Directory and hybrid identity environments.
- Demonstrated experience as a Technical Architect or Lead Engineer in Identity Management projects.
📌 Technical Lead (Noida)
🏢 HCLTech
📍 Noida