Windows AD

• *Active Directory (On\-Prem AD):**

• Manage and troubleshoot Domain Controllers, replication issues, and DNS/DHCP related dependencies.
• Perform Group Policy management (GPO creation, modification, troubleshooting).
• Analyze AD health using tools like dcdiag, repadmin, netdom, event viewer.
• Manage OU structure, group policies, service accounts, and privileged access groups.
• Troubleshoot trust relationship issues between systems and domain.
• Perform AD cleanup activities (stale objects, dormant accounts).
• Assist in AD backup/restore operations (with L3 guidance).
• Experience supporting large\-scale enterprise environments (50k\+ users)
• Clear understanding of Tier‑2 AD operations and delegated access

• *Security \& Compliance:**

• Monitor identity\-related security alerts (Risky Users, Suspicious sign\-ins).
• Ensure compliance with organizational security policies.
• Manage privileged identity roles using PIM (Privileged Identity Management).
• General Responsibilities:
• Handle L1 escalations and provide guidance to L1 team.
• Participate in root cause analysis (RCA) and problem management.
• Support implementation of identity\-related changes and enhancements.
• Maintain system documentation and SOPs.
• Work with vendors (Microsoft) when required.

• *Required Skills \& Knowledge:**

• Perform end‑to‑end Active Directory \- Account Management within defined scope (Tier‑2 Workstations only).
• Handle/Manage L1/L2 incidents and service requests related to users, groups, computers, and GPOs.
• user lifecycle activities – provisioning, de‑provisioning, access modification, account unlocks, password resets.
• Administer Tier‑2 workstation objects, including LAPS password read/reset.
• Manage GPO operations (link, unlink, modify, delete) for Tier‑2 Workstations.
• Coordinate with L3 teams for Tier‑0 / Tier‑1 activities (DCs, PKI, Schema, Trusts).
• Ensure adherence to CISO security baseline and compliance requirements.
• Participate in Change Management, impact analysis, and validation activities.
• Monitor account activities, group changes, OU updates, and incident trends.
• Prepare and publish monthly \& yearly KPI/KSI and SLA reports.
• Support audit activities by providing evidence, logs, and documentation.
• Perform stale object cleanup and periodic access reviews as per governance cadence.

• Exposure to Hybrid AD (AD \+ Entra ID)
• Knowledge of Privileged Access Management (PAM)
• Experience with automation / self‑service enablement
• Awareness of Zero Trust and modern identity security practices

• *Location**

Chennai

• *Job Function**

IT INFRASTRUCTURE SERVICES

• *Role**

Engineer

• *Job Id**

417368

• *Desired Skills**

Windows Admin

Desired Candidate Profile

• *Qualifications** : BACHELOR OF ENGINEERING