• Administer and support on‑premises Active Directory environments, including domains, forests, trusts, DNS, Group Policy, and domain controllers.

• Manage and support Microsoft Entra ID in a hybrid identity configuration, integrated with on‑prem AD.

• Operate and maintain directory synchronization and identity flows between AD and Entra ID (e.g., users, groups, devices, and service accounts).

• Troubleshoot hybrid authentication, identity replication, and access issues across on‑prem and cloud resources.

• Support identity services required for Microsoft 365, cloud‑hosted applications, and enterprise platforms.

• Administer Entra ID users, groups, roles, and administrative access.

• Support Conditional Access technical configurations in alignment with Cybersecurity requirements.

• Implement and maintain authentication methods (e.g., password policies, MFA enforcement as defined by Cyber).

• Support device identity and registration models (hybrid join, cloud join, and directory‑integrated authentication).

• Assist with access governance features such as access reviews, lifecycle controls, and role scoping (as defined by Cyber standards).

• Support Entra‑integrated applications and enterprise authentication models.

• Support Active Directory usage across corporate IT systems and OT / manufacturing environments, ensuring authentication and authorization services meet operational needs without impacting plant uptime, safety, or availability.

• Support segmentation and security boundaries between IT and OT identity workloads where required.

• Implement IAM controls and technical configurations aligned with Cybersecurity’s identity and access management strategy.

• Remediate IAM‑related compliance gaps identified through audits, security assessments, or Cyber reviews.

• Support privileged access controls, directory security hardening, and authentication standards.

• Assist in providing technical evidence and validation for audits and compliance requirements.

• Perform user, group, device, and service account lifecycle management across AD and Entra ID.

• Ensure directory hygiene through regular review and remediation of stale, orphaned, or misconfigured identities.

• Support integrations between identity platforms and enterprise applications, infrastructure, and cloud services.

• Participate in change management activities related to identity enhancements, upgrades, and operational improvements.

Basic requirements

• BTech/BE in related fields.
• Minimum 12-15 years of experience.
• Strong hands‑on experience administering on‑premises Microsoft Active Directory in enterprise environments.
• Proven experience supporting hybrid identity environments using Microsoft Entra ID integrated with AD.
• Solid technical understanding of identity synchronization, authentication, authorization, and directory security.
• Experience supporting identity services in both IT and OT / manufacturing environments.
• Working knowledge of IAM‑related cybersecurity concepts, compliance remediation, and access control enforcement.
• Strong troubleshooting skills in complex, operationally sensitive environments.

Preferred Qualifications

• Experience in manufacturing, industrial, or OT‑integrated enterprises.
• Experience supporting Microsoft 365 and cloud applications using Entra ID authentication.
• Exposure to Conditional Access, access governance, or privileged identity models.
• Microsoft identity certifications or equivalent real‑world experience.