Tech Mahindra represents the connected world, offering innovative and customer-centric information technology experiences, enabling Enterprises, Associates, and the Society to Rise. It has 150,000+ professionals working for 1000+ Global Customers (including Fortune 500 companies) in 90 Countries. We're part of the esteemed Mahindra group, headquartered in India. Under a new CEO, Tech Mahindra is committed to a transformative journey with Scale @ Speed as our guiding principle.
Key Responsibilities
1) On‑Prem Active Directory (AD DS) Administration
- Administer AD DS components: forests, domains, trusts, OUs, users/groups, and delegation models.
- Manage and maintain Domain Controllers, ensuring health, capacity, patching, and lifecycle compliance.
- Configure and maintain Group Policy Objects (GPOs) including security baselines, hardening, and troubleshooting.
- Monitor and troubleshoot AD replication, SYSVOL issues, DFSR/FRS (as relevant), and domain controller health.
- Manage AD-integrated DNS including zones, records, scavenging, forwarders, and resiliency architecture.
- Perform AD upgrades/migrations (domain/forest functional levels, DC replacement, OS upgrades) with minimal downtime.
- Support Active Directory Certificate Services (AD CS) operations such as CRL publishing/renewals (if in scope).
2) Azure AD / Microsoft Entra ID (Cloud Identity)
- Administer Azure AD / Entra ID tenant configuration and identity services for enterprise users and applications.
- Implement and manage Conditional Access, MFA, Identity Protection, and risk-based access controls.
- Manage Privileged Identity Management (PIM) and privileged access policies (JIT/JEA, role assignment governance).
- Configure and support SSO, Enterprise Applications, App registrations, OAuth permissions, and federation settings.
- Operate and optimize hybrid identity services (cloud-only and synced identities) aligned to security standards.
3) Hybrid Identity & Synchronization (Azure AD Connect / Cloud Sync)
- Deploy and maintain Azure AD Connect / Cloud Sync for identity synchronization and writeback (where applicable).
- Manage synchronization rules, troubleshooting (staging mode, metaverse, connector space), and sync monitoring.
- Support hybrid authentication models: Password Hash Sync, Pass-through Authentication, or Federation (AD FS).
- Manage hybrid features like Seamless SSO, device writeback, group writeback, and lifecycle operations.
4) Security, Compliance & Governance
- Enforce identity security baseline: least privilege, tiering model, administrative boundaries, and secure admin workstations.
- Support audits by providing evidence: access reviews, privileged role logs, change records, and security reports.
- Implement and maintain RBAC, delegated admin permissions, and standard operating procedures for identity operations.
- Drive remediation for vulnerabilities and security findings related to directory services and identity components.
5) Operations, Monitoring & ITSM Processes
- Provide L2/L3 support for incidents and service requests related to AD, Entra ID, SSO, and authentication.
- Manage changes through Change Management, create implementation plans, rollback procedures, and conduct PIRs/RCA.
- Maintain monitoring dashboards and alerts for AD DS, DNS, AAD Connect, Entra sign-in activity, and service health.
- Create and maintain knowledge articles, runbooks, SOPs, and operational documentation.
6) Integration & Stakeholder Collaboration
- Work with Security/IAM teams on access governance, privileged access, and policy enforcement.
- Collaborate with Messaging/M365, Endpoint, Network, and Application teams for identity integrations and SSO enablement.
- Provide technical inputs for enhancements, standardization, and continuous improvement of identity services.
Deliverables / Expected Outcomes
- Stable and secure AD DS and Entra ID operations with minimal incidents.
- Consistent enforcement of identity governance (MFA/CA/PIM, privileged access, access reviews).
- Healthy synchronization and authentication across hybrid workloads (Azure AD Connect, SSO).
- Audit-ready evidence and updated documentation (SOPs, diagrams, runbooks, baseline policies).
