Back to search results Previous job Next job Overview The Directory Services Engineer within the Alight Identity Security team is responsible for the security, reliability, and availability of enterprise directory and identity platforms. This role supports Tier 0 and Tier 1 identity systems, safeguards privileged access, integrates identity and security technologies, and provides operational and incident‑response support across the enterprise. The ideal candidate will bring strong hands‑on experience with directory services, cloud platforms, IAM technologies, scripting and automation, and modern authentication and federation protocols.

Key Responsibilities
Platform Administration & Operations
• Ensure directory services platforms are secure, compliant, resilient, and highly available.
• Maintain performance, availability, and resilience of Tier 0 and Tier 1 identity systems.
• Proactively monitor systems for performance, stability, and reliability.
• Protect privileged identities by enforcing least‑privilege principles using RBAC, ACLs, and Just‑In‑Time access.
• Support security, compliance, and regulatory audits.
• Participate in incident response activities, including off‑hours support as required. Integration & Engineering
• Lead and support the integration, lifecycle management, and engineering of identity and security platforms.
• Collaborate with application development teams and end users to resolve incidents and complete service requests.
• Provide technical leadership and guidance to operational support team members.
• Support architectural decisions related to identity, authentication, authorization, and platform resilience. Upgrades, Support & Documentation
• Coordinate platform maintenance, upgrades, and operational support activities.
• Develop and maintain technical documentation, scripts, code repositories, and training materials.
• Ensure proper knowledge transfer, documentation, and operational readiness during platform changes and upgrades.




• Support ongoing operational improvements through documentation and process refinement. Required Qualifications
• 7+ years of professional experience in Directory Services and/or Identity & Access Management (IAM).
• Deep understanding of Active Directory Domain Services (AD DS) architecture, including forests, domains, trusts, FSMO roles, replication, and multi‑site topology.
• Hands‑on experience integrating with IAM platforms such as Saviynt, Microsoft Entra ID (Azure AD), SailPoint, Okta, and PingFederate.
• Strong knowledge of LDAP concepts, schema extensions, and directory query optimization.
• Experience with PKI and certificate lifecycle management, including CRLs, NDES/SCEP, and AD‑integrated certificate services.
• Proficiency in scripting and automation (PowerShell, Bash, Python, Ansible).
• Robust experience designing and managing Group Policy Objects (GPOs).
• Extensive experience with cloud platforms (AWS, Azure) and service models (IaaS, PaaS, SaaS), including cloud networking concepts.
• Excellent written and verbal communication skills. Preferred Qualifications
• Experience managing directory platforms such as Active Directory, eDirectory, and Radiant Logic (FID/SaaS).
• Familiarity with CI/CD pipelines and Infrastructure‑as‑Code tools (e.g., Terraform).
• Experience with Microsoft Entra Conditional Access and Entra Connect.
• Knowledge of Privileged Access Management (PAM) solutions.
• Strong understanding of authentication and authorization principles.
• Experience with ITSM platforms (ServiceNow).
• Hands‑on knowledge of SSO and federation standards (SAML 2.0,



OAuth 2.0, OIDC).
• Proven troubleshooting skills grounded in engineering best practices.
• Familiarity with Agile methodologies (Scrum, SAFe, Kanban).
• Experience with monitoring platforms and tuning alerts for performance, availability, and connectivity.
• Broad systems engineering experience including DNS, DHCP, TCP/IP, clustering, SIEM, IIS/Tomcat, virtualization (VMware/Hyper‑V), and load balancing (F5, NLB, ALB).

We offer
you a competitive total rewards package, continuing education & training, and tremendous potential with a growing worldwide organization. Disclaimer Nothing in this

job description
restricts management's right to assign or reassign duties and responsibilities of this job to other entities; including but not limited to subsidiaries, partners, or purchasers of Alight business units. Please do not use generative AI tools during the application process. We aim to understand your genuine interest in our company without the use of generative AI systems, and we also want to evaluate your non-generative AI assisted communication skills. Any use of generative AI tools in violation of this request may result in disqualification from consideration for the position. Under Department of Labor Regulations (29 CFR Part 471) federal contractors and subcontractors are required to inform employees of their rights under the National Labor Relations Act In an effort to avoid job scams, please keep in mind the items below in regards to opportunities at Alight Solutions.
• We do not make offers without interviewing
• We do not ask for security deposits on equipment
• We do not send checks through the mail or request payments through Western Union
• We do not ask for bank account numbers For more information on Job Scams, please click the link below to review information posted on the Federal Trade Commission Consumer Information site. https://www.consumer.ftc.gov/articles/0243-job-scams

📌 Directory Services Engineer (Hyderabad)
🏢 NGA Human Resources Belgium, an Alight
📍 Hyderabad