About Astellas
Astellas is a global life sciences company committed to turning creative science into VALUE for patients. We provide transformative therapies in disease areas that include oncology, ophthalmology, urology, immunology and women's health. Through our research and development programs, we are pioneering new healthcare solutions for diseases with high unmet medical need. Learn more at Astellas.com.

Are you driven to make a real difference in the lives of patients?
We're seeking passionate individuals who thrive in dynamic environments, embrace new ideas, and aren't afraid to take intelligent risks. People who act with unwavering integrity and are deeply committed to making a tangible impact.

Purpose and Scope:

As an Identity Engineer, you will be responsible for the architecture, administration, security, and modernization of enterprise Active Directory services, including hybrid identity integration with Microsoft Entra ID. The role focuses on strengthening identity security, improving directory service reliability, driving automation, and supporting Active Directory transformation initiatives across global on-premises and cloud environments.

Responsibilities and Accountabilities:

- Administer, maintain, and support enterprise Microsoft Active Directory services, including Domain Controllers, Forests, Domains, DNS, Sites & Services, Organizational Units (OUs), and Group Policy Objects (GPOs).
- Monitor, troubleshoot, and optimize Active Directory health, availability, replication, authentication services, and performance to ensure stable and secure identity operations.
- Manage Active Directory security controls, including privileged groups, delegated administration, password policies, account policies, authentication protocols, and directory hardening.
- Perform Active Directory assessments, health checks, security reviews, remediation activities, and operational improvements aligned with Microsoft and industry best practices.
- Support hybrid identity environments integrating Active Directory with Microsoft Entra ID, identity synchronization, authentication services, and cloud identity platforms.
- Administer and maintain core Active Directory services, including DNS, DHCP integration, Sites & Services, trusts, schema updates, FSMO roles, and SYSVOL replication.
- Implement and support identity security initiatives, including Tier-0 protection, Privileged Access Management (PAM),



Multi-Factor Authentication (MFA), Conditional Access, and Zero Trust controls.
- Troubleshoot and resolve complex Active Directory issues related to replication, authentication, DNS, Kerberos, LDAP, Group Policy, and domain controller operations.
- Develop and maintain automation solutions using PowerShell and related scripting technologies to improve operational efficiency and reduce manual effort.
- Support backup, recovery, disaster recovery testing, and Active Directory Forest Recovery readiness to ensure business continuity.
- Partner with Infrastructure, Security, Application, and Cloud teams to support enterprise identity integrations, modernization initiatives, and transformation programs.
- Maintain operational documentation, technical standards, governance procedures, audit evidence, and compliance requirements related to Active Directory services.

Required Qualifications:

- 8 to 12+ years of hands-on experience managing Microsoft Active Directory and enterprise identity infrastructure.
- Strong practical experience with AD DS, Domain Controllers, DNS, Group Policy (GPO), LDAP, Active Directory replication, and Microsoft Entra ID.
- Demonstrated hands-on expertise in: Active Directory Domains, Forests, Trusts, Sites & Services, FSMO roles, and OU management.
- DNS, Kerberos, LDAP, Group Policy administration, and security hardening.
- Hybrid identity environments using Microsoft Entra Connect and Microsoft Entra ID.
- PowerShell scripting and automation for Active Directory administration and reporting.
- Identity security controls including MFA, Conditional Access, PAM, and Zero Trust.
- Experience supporting Active Directory modernization, migration, consolidation, and security improvement initiatives.
- Strong troubleshooting, analytical, and problem-solving skills within complex enterprise environments.
Effective verbal and written communication skills, capable of working with technical and non-technical stakeholders.
-

Preferred Qualifications:

- Experience with large-scale, multi-domain and multi-forest Active Directory environments,



including directory consolidation, migration, and modernization initiatives.
- Experience with Microsoft Entra ID, Entra Connect, Conditional Access, Privileged Identity Management (PIM), and hybrid identity architectures.
- Experience implementing Active Directory security best practices, including Tier-0 administration, Microsoft Defender for Identity (MDI), Privileged Access Management (PAM), and Zero Trust principles.
- Experience with PowerShell automation, Active Directory health assessments, disaster recovery, Forest Recovery, and security hardening activities.
Microsoft certifications such as SC-300, AZ-104, AZ-500, Windows Server Hybrid Administrator Associate, or equivalent Microsoft infrastructure/security certifications. Legacy certifications such as MCSE are also valued. Experience in healthcare or other regulated industries is a plus.

Working Environment:

This position is based in Bengaluru, India and will require on-site work. At Astellas we recognize the importance of work/life balance, and we are proud to offer a hybrid working solution allowing time to connect with colleagues at the office with the flexibility to also work from home. We believe this will optimize the most productive work environment for all employees to succeed and deliver. Hybrid work from certain locations may be permitted in accordance with Astellas’ Responsible Flexibility

What awaits you at Astellas?

- Global collaboration: Become part of a connected global business of like-minded life science leaders, all dedicated to improving patients' lives worldwide.
- Real-world patient impact: Contribute to transformative therapies that reach patients around the world, knowing your work makes a difference every day.
- Relentless Innovation: Join a company at the forefront of scientific breakthroughs, where you'll have the opportunity to shape the future of healthcare.
- A Culture of Growth: Chart your own course within a supportive environment that values your contributions, champions your development, and empowers you to pursue your passions.

Our Organizational Values and Behaviors

Values: Innovation, Integrity and Impact sit at the heart of what we do.

Behaviors: We come together as ‘One Astellas’, working with courage and a sense of urgency. We are outcome focused and consistently take accountability for our personal contribution.

📌 Identity Engineer, Identity Management (Bengaluru)
🏢 Astellas
📍 Bengaluru