Role: Active Directory L3 SME

Location: Bangalore/Hyderabad

Full/ Part-time: Full Time

About Carrier

Carrier Global Corporation global leader in intelligent climate and energy solutions is committed to creating innovations that bring comfort safety and sustainability to life. Through cutting-edge advancements in climate solutions such as temperature control air quality and transportation we improve lives empower critical industries and ensure safe transport of food life-saving medicines and more. Since inventing modern air conditioning in 1902 we lead with purpose: enhancing the lives we live and the world we share. We continue to lead because of our world-class inclusive workforce that puts the customer at the center of everything we do. For more information visit or follow Carrier on social media at @Carrier

Carrier is seeking a senior Identity & Access Management (IAM) leader and subject matter expert (SME) to provide technical leadership and operational governance for Carriers global identity platforms including Microsoft Entra ID Active Directory Okta SailPoint BeyondTrust and customer identity environments. The role is responsible for identity strategy platform architecture operational excellence security governance compliance and large-scale transformation initiatives supporting over 60000 workforce identities external identities and critical business applications.

The individual will serve as the highest-level escalation point (L3) provide architecture leadership for identity modernization programs lead global IAM engineering teams and vendors and ensure secure compliant and scalable identity services for Carriers enterprise environments.

Key Responsibilities

Active Directory & Entra ID Leadership

Own enterprise architecture and governance for on-premises Active Directory and Microsoft Entra ID.

Lead hybrid identity architecture synchronization federation SSO MFA Conditional Access Privileged Identity Management (PIM)



and Self-Service Password Reset (SSPR).

Define identity standards lifecycle management processes naming standards and security baselines.

Provide technical approval for enterprise identity designs and integrations.

Identity Governance & Administration

Govern SailPoint identity lifecycle processes access certifications birthright access role management and segregation-of-duty controls.

Drive User Access Reviews (UAR) Privileged Access Reviews (PAR) SOX controls and audit remediation efforts.

Establish governance for workforce contractor service and privileged accounts.

Ensure compliance with internal cybersecurity and regulatory requirements.

IAM Transformation Programs

Lead strategic programs such as Okta-to-Entra migration CIAM modernization and cloud identity transformation.

Own migration planning readiness assessments architecture governance application onboarding and executive reporting.

Collaborate with Microsoft implementation partners and business stakeholders to deliver enterprise-scale IAM initiatives.

Operational Leadership

Provide L3 escalation support for critical IAM incidents and authentication issues.

Lead resolution of complex identity federation provisioning and SSO integration challenges.

Establish service management processes SOPs operational metrics SLAs and technology roadmaps.

Manage vendors contractors and managed service providers supporting IAM operations.

PAM & Service Account Governance

Oversee BeyondTrust PAM operations and privileged account governance.





Establish controls for service account lifecycle management credential rotation password propagation and privileged access controls.

Drive least-privilege and zero-trust initiatives across identity platforms.

Application & Cloud Identity Architecture

Provide IAM architecture guidance for GitHub AWS ServiceNow Spacelift enterprise SaaS applications and custom integrations.

Design scalable access models leveraging Entra groups SCIM provisioning federation and automated access governance.

Support CI/CD and DevOps identity integration requirements

Required Qualifications

12 years of Identity & Access Management experience.

8 years administering and architecting Active Directory and Microsoft Entra ID.

Deep expertise in: Active Directory Microsoft Entra ID Azure AD Connect / Cloud Sync Federation Services Conditional Access MFA Privileged Identity Management Self-Service Password Reset Identity Governance Hybrid Identity Architecture

Preferred Qualifications

CISSP CISM Microsoft Identity certifications SailPoint certifications or BeyondTrust certifications.

Experience with CIAM platforms and B2B/B2C identity architectures.

Experience supporting cloud engineering platforms such as GitHub AWS Azure Terraform or Spacelift.

Perks

We offer a competitive total rewards package that may include other benefits and wellbeing programs. Offerings vary by role and location and are designed to support employees health security and success

Apply Now!

Carrier is An Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race color religion sex sexual orientation gender identity national origin disability or veteran status age or any other federally protected class.

Job Applicants Privacy Notice:

Click on this link to read the Job Applicants Privacy Notice

Required Experience:

Director

📌 Active Directory & Azure AD SME Engineer (Bengaluru)
🏢 Carrier
📍 Bengaluru