Technical Lead - Active Directory & Entra ID Services

Job Title

Technical Lead - Active Directory & Entra ID Services

Mandatory Skills

Active Directory, Entra ID

Job Summary

Seeking a highly skilled Tech Lead Active Directory & Entra ID Services to lead a small team of engineers responsible for delivering and supporting enterprise-level identity and access management services. The ideal candidate will possess deep technical expertise in Active Directory (AD), Entra ID (Azure AD), and related hybrid identity services, coupled with strong customer management, Shift management and service ownership skills.

This role involves leading day-to-day operations, driving service excellence, mentoring team members, and acting as the key point of contact for technical support, escalations, reporting, and customer communications.

Key Responsibilities

Leadership & Service Delivery

• Lead a team of engineers for L2/L3 support for Active Directory and Entra ID environments.
• Own and drive technical delivery, ensuring SLAs, KPIs, and compliance targets are met.
• Act as a primary technical and operational escalation point for identity and directory-related incidents.
• Coordinate and manage incident, problem, and change management processes for AD/Entra services.
• Participate in reviews with stakeholders and provide actionable insights.
• Prepare and deliver service performance reports, and management updates.
• Drive continuous improvement, automation, and standardization across the environment.
• Collaborate with project teams to support new implementations, migrations, and transformations.
• Maintain strong customer relationships, ensuring satisfaction and proactive communication.

People & Team Management

• Manage day-to-day operations of the team, including workload allocation and task prioritization.
• Provide mentoring, and support skills development plans for team members.
• Promote a collaborative and high-performance culture within the team.
• Drive training initiatives and knowledge sharing sessions to strengthen team capabilities.

Technical Responsibilities

• Administer and support Active Directory Domain Controllers, forests, and trust relationships.
• Perform promotion/demotion of domain controllers and forest-level administration.
• Manage Group Policy Objects (GPOs), Sites and Services, and replication configurations.
• Conduct regular AD health checks, database cleanup, and replication remediation.
• Manage SYSVOL, Global Catalogue, FSMO roles, and Windows Time Services.
• Implement and support Active Directory backup, recovery, and disaster recovery procedures.
• Configure and manage Certificate Services and Public Key Infrastructure (PKI).
• Manage roaming profiles, folder redirection, and cloud storage access control (Azure Storage).
• Lead Active Directory domain migrations and consolidation projects.
• Ensure security hardening and vulnerability management of domain controllers.

Entra ID / Hybrid Identity

• Administer and support Entra Connect / Sync servers and synchronization rules.
• Manage Azure AD roles, Administrative Units, and RBAC.
• Configure and manage Conditional Access Policies, Application Registrations (OIDC, SAML), and Dynamic Groups.
• Oversee Privileged Identity Management (PIM) and Service Principals.
• Support custom domain management and identity lifecycle processes.
• Collaborate on integrations with OKTA or other IAM solutions.

Automation, Documentation & Process

• Develop and maintain PowerShell scripts for automation, reporting, and health monitoring.
• Maintain up-to-date technical documentation, architecture diagrams, and standard operating procedures (SOPs).
• Drive process efficiency by implementing best practices and automation frameworks.
• Support audit and compliance requirements by maintaining accurate records and configurations.
• Prepare Root cause analysis and related documentations for incidents and problem management.
• Shift management to ensure round the clock support.

Required Skills

• 10–12 years of relevant experience in Active Directory and Entra ID management, with at least 2–3 years in a leadership role.
• Deep understanding of Windows Server infrastructure, DNS, PKI, and IAM principles.
• Strong PowerShell scripting and automation experience.
• Demonstrated experience in customer-facing service delivery and technical leadership.
• Excellent communication, stakeholder management, and reporting skills.
• Strong problem-solving and analytical mindset with the ability to manage critical incidents under pressure.

Preferred Certifications

• Microsoft Certified: Identity and Access Administrator (SC-300)
• Microsoft Certified: Azure Administrator Associate (AZ-104)
• Microsoft Certified: Windows Server Hybrid Administrator Associate
• ITIL Foundation Certification