Systems Engineering Specialist (Active Directory/Azure AD/Identity)

NTT DATA is a global business and technology services company. The company is seeking a security-oriented Systems Engineering Specialist Advisor to support, troubleshoot, upgrade, and architect Active Directory, Azure AD, MFA, and related identity technologies. The role also involves migration planning, security auditing, vulnerability management, scripting, vendor proof-of-concepts, and providing security recommendations.

Responsibilities:

• Active Directory designing, Architecture Solutions, Integration with platforms & Applications
• Certificate Management and PKI
• Develop an architecture of directory solutions for Windows, Unix, and related platforms
• Experience in consolidations of multiple forest and domains and demonstrated understanding on User accounts, machine accounts, GPOs
• Understand the requirement and create a migration plan for any services i.e. DNS, DHCP, and Certificate Services (PKI) etc
• Analyzing the requirement and design a solution to fulfil the requirement with zero impact to other platforms
• Develop a power shell scripting with AD modules or VB .Net based on the requirements
• Manage Azure active directory design, Architect Solutions, Integration with platforms & Applications and AD connector to Azure
• Auditing the security logs and integrating with SIEM
• Conducting POC with multiple vendors for AD solutions and prepare detailed test cases. Create a clear recommendation document with pros and cons for senior management
• Vulnerability Assessment and Management related to Active Directory, DNS & Windows platforms
• Active Directory consolidations including application integration working with application teams
• Recommend security best practices to achieve stated business objectives, advises on risk assumptions for any variances granted, and provides alternatives to achieve desired end results

Requirements:

• 10+ years relevant experience in Architecture and designing, solutions & Migrating Active Directory, Azure AD, Entra ID MFA, Cisco Duo MFA Windows & End points
• Strong Demonstrated experience with Active Directory migration tool or equivalent and consolidation of Global Forest and Domains. Hands on experience in successful consolidation of AD Forests and Domains
• Must have hands-on experience working on Azure AD (Azure Active Directory)
• Extensive Experience working as Azure Admin for enterprise Active Directory setup and maintenance
• Strong experience in AD Trusts, two-way Trusts and one-way Trusts and deep knowledge of Active Directory Schemas and meta data
• Strong Knowledge on Azure AD Identity Management & Integration with on premise
• Strong knowledge of Azure Active Directory technologies, including authentication models, federation, Multifactor Authentication (MFA), conditional access policies and other relevant capabilities
• Knowledge of best practices in AD/Azure Privileged access management and modern AD/Azure Secured Administration practices
• Strong PowerShell scripting