AceStack
Website:
ace-stack.com
Company:
https://www.linkedin.com/company/acestack
Seniority: Mid-Senior level
Industries: Software Development and IT Services and IT Consulting
Job details:
Role: Active Directory Lead
Location: Bangalore, Delhi, Chennai, Hyderabad, Mumbai
Contract
Responsibilities
We are looking for an L3 Active Directory Architect/Lead to own identity strategy,
architecture, and governance across hybrid environments.
You will design secure, scalable AD/Entra ID solutions, lead complex migrations, and set standards aligned to Zero Trust principles.
· Define AD/Entra ID architecture, standards, and roadmaps; lead multi-forest/domain designs and trust models.
· Drive security posture: tiered administration model, PAWs, break-glass accounts, privileged access governance (PIM).
· Own Conditional Access strategy, MFA, passwordless (FIDO2), and authentication method policies.
· Lead M&A identity integration, domain consolidation/decommissioning, and coexistence strategies.
· Design and supervise DR/BCP for identity, including authoritative restores and recovery exercises.
· Establish baselines (CIS, MS security baselines) and GPO architecture; approve patterns and reviews.
· Oversee Azure AD Connect/Entra Connect architecture (multi-forest, staging, writeback, cloud sync).
· Integrate identity with SIEM/SOAR; define logging, monitoring, and alerting requirements.
· Sponsor automation frameworks; code reviews for PowerShell modules; IaC patterns for identity resources.
· Lead major incident management and executive communication; provide RCA and remediation programs.
Key Responsibilities
· Expert knowledge of AD and Entra ID internals, replication, and authentication flows. ·
Enterprise PKI/Certificate Services, gMSA, SPNs, constrained delegation, and protocol
transition mastery. · Cross-forest trust, SID filtering, selective authentication, and
migration planning expertise. · Zero Trust alignment, identity governance frameworks,
and risk management. · Strong stakeholder management and vendor engagement
skills.
Skill Requirements
· Forest/domain design, functional level planning, schema extensions, and upgrade
strategies. · Advanced GPO design (loopback, WMI filters, security baselines) and
impact analysis. · High availability designs for DCs, sites, and replication; capacity
planning. · Disaster recovery leadership including authoritative restore scenarios and
table-top exercises. · Automation leadership in PowerShell; integration with pipelines
and code repositories. · SSO architecture across heterogeneous apps; ADFS retirement
and Entra ID Enterprise App patterns.
Must Have skills
Proven experience leading large-scale AD/Entra ID programs and migrations. · Security
hardening, audit compliance, and governance ownership. · Designing and operating
cross-domain/forest trusts and selective authentication. · Conditional Access strategy
and passwordless adoption (FIDO2). · Defender for Identity and threat modeling for AD.
Good to have skills
· Deep IGA exposure (SailPoint/Entra ID Governance) and lifecycle orchestration. ·
Integration with SIEM (Microsoft Sentinel/others) and response playbooks. · Experience
with identity in cloud-native architectures and Zero Trust adoption programs. · Broad
network/security knowledge (Kerberos across NAT, firewalls, tiering).
Click on Apply to know more.