On-prem AD identity lifecycle: Administer on-premises Active Directory authentication and authorization, including full user and group lifecycle management (creation, modification, moves, deprovisioning) and joiner-mover-leaver processes.

Hybrid identity & directory sync: Manage and troubleshoot on-prem AD to Entra ID synchronization (Entra Connect / Connect Sync / Cloud Sync), ensuring reliable, secure, and consistent identity flow between environments.

Entra ID administration: Operate and administer Microsoft Entra ID and Microsoft 365 technologies, including tenant configuration, directory objects, and hybrid join scenarios.

Entra role management: Design, assign, and govern Entra roles and administrative delegation, applying least-privilege principles and separation of duties across administrative functions.

Conditional Access & access controls: Build, maintain, and continuously improve Conditional Access policies and broader access controls to enforce Zero Trust, MFA, device compliance, and risk-based access.

Password less authentication: Design, roll out, and operate password less authentication across the estate - Windows Hello for Business, FIDO2 security keys, Microsoft Authenticator (passkeys / phone sign-in), and certificate-based authentication - driving adoption and reducing reliance on passwords.

O365 access & license management: Manage Microsoft 365 access, service controls, license assignment and optimization, ensuring users have the correct entitlements and unused licenses are reclaimed.

Exchange Online administration: Administer Exchange Online mailboxes, shared mailboxes, mail flow rules, connectors, and mailbox permissions; manage hybrid Exchange coexistence during migrations.

Microsoft 365 groups & Teams governance:



Manage Microsoft 365 Groups and Teams lifecycle, membership, ownership, expiration, and naming/creation policies to keep collaboration sprawl under control.

Share Point Online & One Drive access: Configure and govern Share Point Online and One Drive access, external/guest sharing settings, and site-level permissions in line with data-protection standards.

Microsoft 365 security & compliance: Apply Microsoft Purview / compliance controls such as data loss prevention (DLP), retention policies, sensitivity labels, and eDiscovery/legal hold in coordination with security and compliance teams.

Endpoint & device access (Intune): Support device-based access through Microsoft Intune compliance and enrollment policies as inputs to Conditional Access and Zero Trust enforcement.

Service health & tenant operations: Monitor Microsoft 365 service health, manage tenant-wide settings, and maintain reporting on usage, adoption, and security posture across the M365 estate.

Post-sync on-prem account governance: Manage and control on-prem accounts and, critically, govern application access for those accounts after synchronization to Entra, ensuring access remains accurate and compliant across the hybrid boundary.

Least-privileged application access: Administer Entra licensing tied to application access, granting least-privileged access to applications through group-based and role-based entitlement models.

Distribution list migration: Plan and execute the migration of Distribution Lists (DLs) from on-prem-managed Exchange to Entra/Exchange Online-managed groups, minimizing disruption to mail flow and ownership.

Standards & documentation: Define IAM standards, runbooks, and architecture documentation; act as escalation point for complex identity incidents; mentor junior engineers.

📌 IDAM Engineer (India)
🏢 TRIGENT SOFTWARE PRIVATE
📍 India