• Role Title: Active Directory Engineer / Technical SME
• Function: Identity & Access Management (IAM)
• Role Type: Technical Engineering Role Purpose The role is responsible for providing engineering ownership and subject matter expertise for Enterprise Active Directory services across both IT and OT (Operational Technology) environments. The engineer will manage:
• Active Directory architecture
• Domain Controller lifecycle management
• Security hardening
• Group Policy administration
• Authentication services (LDAP/LDAPS)
• Monitoring and automation tools
• Configuration management
• Technical remediation activities The objective is to ensure secure, secure, compliant, and highly available Active Directory services across the enterprise.

Key Responsibilities
1. Active Directory Administration & Infrastructure
• Engineer and maintain Active Directory domains.
• Manage Domain Controllers.
• Maintain AD Sites and Services.
• Design and support Organizational Unit (OU) structures.
• Ensure healthy AD infrastructure operations. 2. OU Design & Delegation
• Design and review OU hierarchy.
• Define Group Policy boundaries.
• Implement delegation models.
• Ensure secure and standardized administrative access. 3. Domain Controller Lifecycle Management Own end-to-end lifecycle activities including:
• Deployment
• Upgrades
• Replacements
• Decommissioning
• Security patching
• Configuration management
• Hardening
• Monitoring and health management 4. Security Remediation
• Investigate AD security findings.
• Review inactive users and computer accounts.
• Manage service account remediation.
• Coordinate with business teams before implementing changes that may impact production. 5. Group Policy Management
• Manage GPO infrastructure.
• Maintain ADMX templates.




• Ensure backup/version control before modifications.
• Govern Group Policy changes. 6. LDAP / LDAPS & Certificates
• Configure LDAP and LDAPS.
• Support certificate lifecycle management.
• Assess authentication dependencies.
• Plan validation and rollback activities. 7. Monitoring & Operations
• Maintain Active Directory monitoring.
• Evaluate monitoring platforms.
• Ensure privileged administrative separation.
• Support operational health reviews. 8. OT Active Directory Support
• Support Operational Technology (OT) domains.
• Manage OT-based Domain Controllers.
• Coordinate with infrastructure, security, QA and application teams. 9. Automation & Tools
• Support AD administrative tools.
• Assess automation opportunities.
• Manage environments outside strategic IGA solutions when required. 10. Documentation & Governance
• Create technical documentation.
• Maintain operational procedures.
• Record changes and standards.
• Support audits and operational handover processes. Required Technical Skills Core Active Directory Skills ✅ Microsoft Active Directory Domain Services (AD DS) ✅ Domain Controllers ✅ AD Sites & Services ✅ DNS ✅ Replication Concepts ✅ Organizational Units (OU) ✅ Administrative Delegation ✅ Group Policy Objects (GPO) ✅ GPO Filtering ✅ ADMX Templates Authentication & Security ✅ LDAP ✅ LDAPS ✅ Microsoft PKI ✅ Certificates ✅ Windows Authentication ✅ AD Security Hardening ✅ Privileged Account Management ✅ Service Account Lifecycle Management ✅ Computer Account Management Infrastructure & Monitoring ✅ Windows Server Administration ✅ Active Directory Monitoring ✅ Microsoft SCOM ✅ ManageEngine ADManager Plus (Preferred) ✅ ManageEngine OpManager (Preferred) Nice-to-Have ✅ Experience in regulated environments ✅ GxP compliance knowledge ✅ Validation and change-control processes ✅ IT + OT environment experience

📌 Active Directory Engineer (Hyderabad)
🏢 Tek Grove
📍 Hyderabad