Job Description
What will you contribute? As Expert Engineer for Active Directory, Entra ID, Microsoft 365, and IAM (CyberArk) you will play a central role in ensuring the reliability, security, and evolution of the company’s identity and collaboration platforms. You will act as a technical referent, expert supports IT, Cybersecurity, and business teams in designing, securing, and operating Microsoft environments and privileged access solutions. Key contributions include:
• Ensuring stability, performance, and security of identity platforms (Active Directory, Entra ID).
• Configuring applications access through LDAP
- based authentication and Azure/ Entra ID
• Administrate Microsoft 365 services (Exchange Online, Teams, SharePoint…).
• Supporting and enhancing the Privileged Access Management (PAM) platform, particularly CyberArk.
• Providing Level 3 expertise for complex incidents across the Microsoft and IAM ecosystem.
• Participating in transformation projects involving cloud adoption, authentication security (MFA, Conditional Access), and automation. Responsibilities & Deliverables: Active Directory & Entra ID
• Administer, secure, and optimize Active Directory (GPOs, Sites & Services, DNS, delegation models).
• Administer corporate applications access ( Ldap/ Azure Entra ID)
• Manage Entra ID (Azure AD): synchronization (AD Connect), RBAC, Conditional Access, MFA policies.
• Implement and maintain security and hardening standards for identity environments.
• Oversee identity lifecycle management, privileged accounts, service accounts,



and group structure. Microsoft 365 (O365)
• Administer Exchange Online: transport rules, mail flow, connectors, anti-spam/anti-phishing.
• Provide advanced support for Teams, including voice, collaboration, and governance aspects.
• Manage SharePoint Online site collections, permissions, access policies.
• Apply compliance and security policies: DLP, retention labels, auditing, eDiscovery, data governance. IAM / PAM (CyberArk)
• Support the operation and evolution of the CyberArk platform.
• Integrate applications, protected structures, privileged accounts, and automation processes.
• Contribute to onboarding/offboarding workflows for sensitive access. Support & Expert Assistance
• Deliver Level 3 technical support across AD/Entra/M365/IAM environments.
• Troubleshoot complex authentication, synchronization, or workload-related issues.
• Assist internal teams with escalations and technical guidance.
• Participate in on-call rotations when required.
• Documentation & Governance
• Produce and maintain technical documentation, architecture diagrams, and operating procedures.




• Contribute to security posture improvement and operational excellence.
• Define and enforce standards for identity management, naming conventions, and access governance. Expected Deliverables
• Identity & M365 architecture documentation
• Configuration baselines and automated scripts (PowerShell)
• CyberArk safe/account configurations and onboarding packages
• Technical procedures, runbooks, troubleshooting guides
• Regular security and compliance reports
• Project deliverables for migrations, hardening, and IAM improvements Required

Experience:
• Minimum 4 years of hands‑on experience administering and securing Active Directory environments (GPOs, DNS, OU structure, replication, hardening).
• Proven experience managing Entra ID (Azure AD), including Conditional Access, MFA, RBAC, application integrations, and identity lifecycle management.
• Solid operational experience administering Microsoft 365 workloads, including Exchange Online, Teams, and SharePoint Online.
• Practical experience working with IAM/PAM solutions, ideally CyberArk (Vault, PSM, onboarding of privileged accounts and applications).
• Strong background supporting authentication mechanisms such as LDAP, Kerberos, NTLM, OAuth2, SAML, and configuring application access via LDAP directories or Azure/Entra ID.
• Demonstrated success in delivering Level 3 support for complex identity, authentication, and M365 issues. Hands-on experience with PowerShell scripting for automation, provisioning, and reporting

📌 Expert Engineer, Active Directory (Bengaluru)
🏢 Teciem
📍 Bengaluru