Staff Engineer, Microsoft Active Directory

🔥 0 minutes ago

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Nagarro

WebsiteLinkedInAll Job Openings

10,000+ employees

Founded 1996

💼 Consulting

📣 Marketing

🏥 Healthcare

Consulting • Marketing • Healthcare

Nagarro is a global leader in digital engineering and technology consulting. The company helps clients become innovative, digital-first businesses by leveraging technology to drive business breakthroughs. Known for its entrepreneurial agility and CARING mindset, Nagarro offers a wide range of services, including digital engineering, intelligent enterprise solutions, and experience and design services. With over 17,900 employees across 37 countries, Nagarro collaborates with industry leaders to accelerate digitalization and technology-led innovation.

📋 Description

• Design, administer, and optimize enterprise Microsoft Active Directory and Microsoft Entra ID environments • Manage Domain Controllers, AD replication, FSMO roles, trusts, schema, NTDS, DFSR, and AD Sites & Services • Implement, maintain, and secure Group Policy (GPO) frameworks across enterprise environments • Administer Windows Server, DNS, DHCP, IIS, and core identity infrastructure services • Design and enforce Conditional Access, MFA, SSO, RBAC, PIM, and identity governance policies • Manage Hybrid Identity using Microsoft Entra Connect (Azure AD Connect) and ensure seamless directory synchronization • Administer Microsoft 365 identity services, Exchange Online, and Hybrid Exchange environments • Manage mail flow, connectors, authentication protocols, and compliance-related identity configurations • Develop and maintain PowerShell automation scripts and leverage Microsoft Graph API for administration and reporting • Lead Active Directory upgrades, migrations, consolidations, backup, recovery, and disaster recovery initiatives • Troubleshoot and resolve complex authentication issues involving OAuth, SAML, Kerberos, and NTLM • Perform root cause analysis for critical production incidents and implement preventive solutions • Collaborate with cloud, infrastructure, and security teams to strengthen enterprise identity services • Monitor identity security posture, ensure compliance, and continuously improve identity management processes and automation

🎯 Requirements

• Total experience: 5.5+ years • Strong experience in Microsoft Active Directory administration across enterprise, multi-site environments • Must-have expertise in Microsoft Entra ID (Azure AD) administration and Hybrid Identity (Entra Connect/AD Connect) • Strong experience in managing Domain Controllers, AD Replication, FSMO Roles, Schema, Trusts, NTDS, DFSR, and AD Sites & Services • Hands-on experience with Windows Server (2012–2022+), DNS, DHCP, IIS, and Group Policy (GPO) administration • Experience designing and implementing Conditional Access, SSO, MFA, RBAC, PIM, and Identity Lifecycle Management • Strong understanding of Microsoft 365 identity services, Exchange Online, and Hybrid Exchange administration • Experience managing mail flow, connectors, SPF, DKIM, DMARC, licensing, and directory synchronization • Hands-on experience troubleshooting OAuth, SAML, Kerberos, and NTLM authentication issues • Strong scripting experience using PowerShell and automation with Microsoft Graph API • Experience with Active Directory migrations, upgrades, consolidations, backup, disaster recovery, and high availability • Good knowledge of identity security, IAM best practices, compliance, and enterprise authentication • Experience using Active Directory administration and migration tools such as Quest is preferred • Strong analytical, troubleshooting, communication, and stakeholder management skills • Bachelor’s or master’s degree in computer science, Information Technology, or a related field