AD / Entra / IAM Security Consultat

About the Role

We are seeking a highly skilled Active Directory (AD) & Identity and Access Management (IAM) Specialist to join our team. The ideal candidate will be responsible for strengthening, securing, and maintaining enterprise Active Directory environments, addressing audit findings, fixing vulnerabilities, and ensuring compliance with industry standards.

In addition, this role requires expertise in modern IAM platforms such as Microsoft Entra ID, Ping Identity, and other leading identity solutions. The candidate should be able to design, implement, and optimize identity and access governance frameworks that align with security best practices and business needs.

Key Responsibilities

• Perform Active Directory audits and remediation of identified issues, risks, and vulnerabilities.
• Harden AD infrastructure by implementing security best practices, tiering models, and privileged access controls.
• Troubleshoot, optimize, and maintain multi-domain, multi-forest AD environments.
• Implement and manage IAM platforms including Microsoft Entra ID (Azure AD), Ping Identity
• Develop and enforce IAM policies: provisioning, de-provisioning, access governance, authentication, and authorization.
• Integrate IAM solutions with on-premises and cloud applications.
• Support compliance and governance by ensuring IAM configurations meet audit and regulatory requirements (NIST, CIS, ISO 27001, etc.).
• Collaborate with Security, Infrastructure, and Application teams to define and implement Zero Trust principles.
• Provide technical leadership in identity lifecycle management, SSO, MFA, and federation services.

Required Skills & Qualifications

• Strong expertise in Microsoft Active Directory: domain controllers, replication, DNS, GPOs, trusts, AD CS,ADFS etc.
• Hands-on experience in fixing AD vulnerabilities and implementing hardening frameworks.
• In-depth knowledge of IAM products:
• Microsoft Entra ID (Azure Active Directory)
• Ping Identity
• Okta (Workforce Identity, Adaptive MFA, SSO)
• Strong understanding of authentication & federation protocols: SAML, OIDC, OAuth, Kerberos, LDAP.
• Experience with Privileged Identity Management (PIM),PAM, Conditional Access, and Identity Protection.
• Familiarity with regulatory compliance standards (NIST CSF, CIS Benchmarks, ISO 27001).
• Proficiency in PowerShell scripting and automation for AD/IAM tasks.
• Experience with hybrid identity models (on-prem AD integrated with cloud IAM).
• Excellent troubleshooting and problem-solving skills.
• Strong communication and documentation skills.

Job Types: Full-time, Part-time, Permanent

Pay: ₹40,000.00 - ₹60,000.00 per month

Expected hours: No more than 4 per week