- On-prem AD identity lifecycle: Administer on-premises Active Directory authentication and authorization, including full user and group lifecycle management (creation, modification, moves, deprovisioning) and joiner-mover-leaver processes.
- Hybrid identity & directory sync: Manage and troubleshoot on-prem AD to Entra ID synchronization (Entra Connect / Connect Sync / Cloud Sync), ensuring reliable, secure, and consistent identity flow between environments.
- Entra ID administration: Operate and administer Microsoft Entra ID and Microsoft 365 technologies, including tenant configuration, directory objects, and hybrid join scenarios.
- Entra role management: Design, assign, and govern Entra roles and administrative delegation, applying least-privilege principles and separation of duties across administrative functions.
- Conditional Access & access controls: Build, maintain, and continuously improve Conditional Access policies and broader access controls to enforce Zero Trust, MFA, device compliance, and risk-based access.
- Password less authentication: Design, roll out, and operate password less authentication across the estate - Windows Hello for Business, FIDO2 security keys, Microsoft Authenticator (passkeys / phone sign-in), and certificate-based authentication - driving adoption and reducing reliance on passwords.
- O365 access & license management: Manage Microsoft 365 access, service controls, license assignment and optimization, ensuring users have the correct entitlements and unused licenses are reclaimed.
- Exchange Online administration: Administer Exchange Online mailboxes, shared mailboxes, mail flow rules, connectors, and mailbox permissions; manage hybrid Exchange coexistence during migrations.
- Microsoft 365 groups & Teams governance:



Manage Microsoft 365 Groups and Teams lifecycle, membership, ownership, expiration, and naming/creation policies to keep collaboration sprawl under control.
- SharePoint Online & OneDrive access: Configure and govern SharePoint Online and OneDrive access, external/guest sharing settings, and site-level permissions in line with data-protection standards.
- Microsoft 365 security & compliance: Apply Microsoft Purview / compliance controls such as data loss prevention (DLP), retention policies, sensitivity labels, and eDiscovery/legal hold in coordination with security and compliance teams.
- Endpoint & device access (Intune): Support device-based access through Microsoft Intune compliance and enrollment policies as inputs to Conditional Access and Zero Trust enforcement.
- Service health & tenant operations: Monitor Microsoft 365 service health, manage tenant-wide settings, and maintain reporting on usage, adoption, and security posture across the M365 estate.
- Post-sync on-prem account governance: Manage and control on-prem accounts and, critically, govern application access for those accounts after synchronization to Entra, ensuring access remains accurate and compliant across the hybrid boundary.
- Least-privileged application access: Administer Entra licensing tied to application access, granting least-privileged access to applications through group-based and role-based entitlement models.
- Distribution list migration: Plan and execute the migration of Distribution Lists (DLs) from on-prem-managed Exchange to Entra/Exchange Online-managed groups, minimizing disruption to mail flow and ownership.
- Standards & documentation: Define IAM standards, runbooks, and architecture documentation; act as escalation point for complex identity incidents; mentor junior engineers.

📌 IDAM Engineer (Hyderabad)
🏢 Trigent Software
📍 Hyderabad