EDS Consultant

Job Description Title Technical Consultant ? EDS Department Enterprise Technology Services Location India - Flexible Reports To Mohamed Guizani Level Senior Technical Consultant We?re proud to have been helping our clients build better financial futures for over 50 years. How have we achieved this By working together - and supporting each other - all over the world. So, join our team and feel like you?re part of something bigger. About your team The Enterprise Directory Services (EDS) team engineers and manages solutions and infrastructure supporting Fidelity?s global enterprise directory services and identity & access management, including Microsoft Active Directory and Microsoft Entra ID. About your role You?ll join the EDS team as a hands-on engineer focused on day-to-day operations and security hardening across Active Directory and Microsoft Entra ID (Azure AD). You will work with platform SMEs and the wider team to deliver BAU tickets, implement hardening baselines, and execute engineering changes. The emphasis is on collaboration and delivery?contributing expert work under established standards and designs rather than owning product roadmaps or leading programs. About you In this role, you will be responsible for efficiently triaging and resolving incidents, service requests, and standard changes across AD/Entra ID, PKI, AD FS, and Quest Active Roles, ensuring adherence to SLAs. You will implement Tier-0/DC hardening, manage GPO governance, and enhance security through Kerberos/LDAP protections and Conditional Access/PIM controls. Your engineering expertise will be pivotal in executing changes based on SME/architect designs, utilising PowerShell and Microsoft Graph for automation and configuration management. You will conduct security remediation using tools like BloodHound/AzureHound and PingCastle, whilst also contributing to monitoring, ops quality, and compliance processes. Collaboration with SMEs and various teams is essential, alongside actively participating in major-incident support and knowledge sharing. Experience & qualifications ? Microsoft Identity Expertise ? Strong hands-on experience with Active Directory, Entra ID (Azure AD), AD FS, and Azure AD Connect, including AD 2016/2019 design, troubleshooting, and administration. ? Privileged Access & Security ? Solid understanding of AD security (Tier-0/Tier-1, PAWs), lateral movement risks, and secure PAW/jump server rollout. ? Hardening & Governance ? Skilled in applying CIS-aligned baselines, securing domain controllers, GPO design, service account hygiene, and identity governance. ? Cloud Identity & Access Controls ? Experienced with Conditional Access, MFA, device/risk-based policies, Privileged Identity Management (PIM), and secure Entra ID operations at scale. ? Automation & Tooling ? Proficient with PowerShell, Graph API, Terraform, KQL, and automation frameworks for audits, enforcement, and remediation; hands-on with BloodHound, PingCastle, and identity monitoring tools. ? Protocols, Standards & Communication ? Strong grasp of OAuth2, OIDC, SAML, PKI/AD CS, and Windows security standards; clear communicator with ability to engage both technical and senior stakeholders.