Active Directory Architect

Key Responsibilities and Accountabilities:

• Accountable for all Enterprise AD and Azure AD environments hosted and maintained in and for Alstom Transport IS&T infrastructure.
• Responsible for planning and designing of Active Directory installations across the organization.
• Drive the execution of the next generation of Active Directory (AD) technologies, M365 services, Intune including owning the overall roadmap.
• Designing and deploying Intune related policies and features (which may also include SCEP profiles/VPN/WIFI profiles deployment)
• Work closely with technology and business stakeholders across the organization
• Establish AD security architecture and strategies
• Securely manage authentication and authorization solutions for on-premise and cloud solutions
• Develop metrics that demonstrate the current risk state, indicators of progress, and directory services business alignment
• Monitor technology and security developments to ensure the company's security framework follows industry best practices
• Participate in the analysis, design and implementation of future infrastructure systems and services
• Perform capacity planning, upgrades and expansion of Active Directory environment
• Maintain effective communications with vendors, peers and clients in support of assigned projects
• Collaborate with business partners and the various IT functional areas to prioritize projects, and develop and implement system plans that address the functional requirements of the business, and adhere to established strategic business and systems objectives

MAIN CHALLENGES OF THE ROLE :

• Work in a complex evolving environment where a lot of new technologies are being evaluated and implemented
• Ensure the right solution with the right cost and right end user experience is deployed in the environment considering the complexities of project deployment and ease of maintenance and supportability
• Persuasion skills, engagement with senior management and able to collaborate with people inside and outside of IT.
• Work closely with vendor and partners to deliver solutions
• Work in merger and acquisitions, identifying ways to integrate/carve out solutions and companies

PROFILE:

To be considered for this role, candidate need to demonstrate the following skills experience and attributes:

• Graduated with an engineering degree, preferably in information technology, you have more than 8 years of relevant experience
• Should have very good general design and architecture knowledge.
• Good knowledge of ITIL processes and framework
• Ability to collaborate, influence and motivate cross-functional teams.
• Ability and flexibility to adapt to change, including shifting and competing priorities.
• Demonstrates strong customer, quality, cost and delivery focus.
• Advanced understanding of IAM solutions and related technologies including Azure AD, Microsoft Identity Manager (MIM), Kerberos, LDAP, SAML, group and role mapping, PKI, DNS, DHCP and GPO implementations.
• AD Migration projects (company acquisitions AD merge, consolidation or optimization AD environment) hands on experience.
• Good Knowledge on M365 services and Intune solutions.
• Should have hands on experience in DR tests/gone through DR activity.
• Good to have experience in handling security/compliance Audits related to Active Directory
• Project experience with AD migration activities and infra upgradation activities (OS upgrade, functional level upgrade)