Directory Services Engineer

Job Title:- Directory Services Engineer

Jo Type:- Full Time

Job Location:- Vishakhapatnam

JD:-

About the Role As a Directory Services Engineer at Eisai Global Digital Business Transformation (GDBT), you will be responsible for designing, implementing, and maintaining robust identity and access management infrastructures.
You will lead initiatives around Active Directory (AD), Entra ID, and hybrid identity services, ensuring security, scalability, and high availability for enterprise systems.
Key Responsibilities Design, implement, and manage Active Directory and Entra ID environments, including hybrid configurations, replication, and domain/forest trust relationships.
Handle user-raised tickets related to directory services for e.
g.
slow logons, account lockouts etc Troubleshooting Active Directory Replication, file replication, Replication Propagation and Site Management etc Working on Change tickets using ITSM tools related to Active Directory, Entra ID, PKI and related identity technologies Troubleshoot account lockouts Troubleshoot PKI and certificate services related issues Configure and maintain MFA, Conditional Access, Privileged Identity Management (PIM), and Identity Protection policies.
Troubleshoot and resolve complex issues involving directory replication, Group Policy Objects (GPO), Kerberos authentication, and PKI infrastructure.
Perform system state backups, authoritative/non-authoritative restores, and disaster recovery operations for AD.
Perform domain and forest migrations for small, medium, and large enterprises.
Implement and maintain Microsoft Identity Manager (MIM) for synchronization and identity lifecycle management.
Automate repetitive administrative tasks using PowerShell and other scripting languages.
Collaborate with InfoSec, Compliance, and Infrastructure teams to ensure adherence to corporate security standards.
Required Skills In-depth expertise in Active Directory, DNS, DHCP, Group Policy, and Entra ID.
Strong knowledge of Kerberos, SSPI, and Windows authentication mechanisms.
Hands-on experience with PKI, certificates, and directory replication tools (Dcdiag, Repadmin, Replmon).
Scripting proficiency in PowerShell and experience with automation frameworks.
Strong understanding of Azure Security Center, Defender for Identity, and Microsoft Compliance tools.
Preferred Skills Experience with hybrid identity design and Zero Trust frameworks. Familiarity with SIEM tools and security auditing for identity systems. Exposure to cloud-native IAM solutions (CyberArk, Delinea, ADFS etc) is a plus. Exposure to Microsoft Identity Manager server is a plus Education & Certifications Bachelor s degree in Computer Science, Information Technology, or related field. Microsoft Certified: Identity and Access Administrator Associate or Microsoft 365 Certified: Enterprise Administrator Expert preferred.