System Engineer, Identity

• Job ID: 11237BR
• Location: India (Remote)
• Work Setup: Remote
• Job Category: Information Technology
• Posting Date: October 9, 2026

Key Responsibilities

Identity & Access Management (Primary Focus)

• Own the design, administration, and continuous improvement of Microsoft Entra ID and Active Directory, including user lifecycle management, hybrid identity, directory synchronization, and authentication services.
• Manage Active Directory domain services, replication, domain controllers, DNS integration, FSMO roles, Group Policy, and overall directory health.
• Design and support Conditional Access, MFA, passwordless authentication, and identity security controls aligned to Zero Trust principles.
• Manage Enterprise Applications, App Registrations, SSO integrations (SAML, OAuth, OIDC), SCIM provisioning, and access automation.
• Drive identity governance practices including RBAC, least-privilege access, access certifications, and integration with Saviynt.
• Automate identity operations using PowerShell, Microsoft Graph, and workflow automation platforms to improve efficiency and user experience.

Messaging & Collaboration (Supporting Scope)

• Administer Exchange Online, hybrid mail flow, and Microsoft Teams, including distribution lists, shared mailboxes, and transport rules.

• Troubleshoot escalated issues related to mail delivery, Outlook, calendaring, and their integration with identity services.

Operations, Reliability, and Incident Management

• Own resolution of complex incidents and service requests through ITSM platforms (e.g., ServiceNow), ensuring timely communication and adherence to SLAs.

• Lead or participate in on-call rotation and major incident response as a senior escalation point.

• Drive root cause analysis and problem management, translating recurring issues into permanent fixes and system improvements.

Automation and AI-Driven Process Improvement

• Design and maintain PowerShell scripts and automation workflows (including Microsoft Graph API) that streamline identity and access operations end-to-end.

• Champion an automation-first approach, identifying manual processes across identity platform operations that can be eliminated or self-serviced.

• Leverage AI-powered tools such as Microsoft Copilot, scripting assistants, and workflow automation platforms to accelerate troubleshooting, generate scripts, improve documentation, and surface operational insights.

• Apply AI to enhance identity governance activities such as access reviews, anomaly detection, and reporting.

User Experience and Continuous Improvement

• Partner with service desk, endpoint, and security teams to resolve identity and access issues and elevate the overall user experience.

• Analyze recurring access and authentication trends; build knowledge base content and self-service capabilities to reduce ticket volume.

• Mentor junior team members on identity concepts, tooling, and troubleshooting methodology.

Required Qualifications

• 5+ years of experience supporting enterprise Microsoft identity environments, with hands-on depth in Entra ID (Azure AD), Active Directory, and Microsoft 365 administration.

• Advanced troubleshooting skills across identity, authentication, and access management.

• Strong understanding of directory services, group policy, DNS, and access control models (RBAC, least privilege).

• Proficient automation & scripting with PowerShell, AI agents using Copilot & Claude, including experience with Microsoft Graph API/SDK for automation.

• Demonstrated experience designing or administering Conditional Access, MFA, and identity protection controls.

Preferred Qualifications

• Experience with identity governance concepts or platforms (e.g., Saviynt, SailPoint, Okta IGA, CyberArk) — access certifications, entitlement management, SoD.

• Familiarity with Microsoft Defender for Office 365 and broader identity-related security controls.

• Experience with audit, compliance, or access to attestation processes (e.g., SOX controls).

• Experience with ITSM platforms such as ServiceNow.

• Experience using AI tools and developing agents (e.g., Microsoft Copilot) to improve operational efficiency and automation.

• Microsoft certifications in Azure or Microsoft 365 (e.g., SC-300, MS-102) are a plus.

10%