Active Directory Subject Matter Expert

Role Overview

Tata Consultancy Services is looking for an Active Directory Subject Matter Expert to lead enterprise identity architecture and transformation work. The position is based in Chennai and requires deep hands-on experience in directory services, hybrid identity, and security-focused identity design.

Experience

8+ years overall, with at least 10 years of experience in Active Directory architecture and enterprise identity solutions.

Location

Chennai, India.

What You Need to Bring

• Strong command over Active Directory architecture, including forest and domain planning, trust relationships, replication, and site design.
• Working knowledge of ADFS and federation-based identity setups.
• Practical experience with Azure AD / Entra ID and hybrid identity environments.
• Background in major AD migration programs, domain mergers, consolidation work, and restructuring efforts.
• Ability to design resilient global identity architectures with high availability and disaster recovery built in.
• Solid understanding of DNS, DHCP, LDAP, and Kerberos authentication.
• Experience with identity lifecycle management and role-based access control models.
• Exposure to security approaches such as Zero Trust, tiered AD design, and Privileged Access Workstations.
• Knowledge of MFA and Conditional Access controls.
• Strong grasp of Group Policy design, governance, and tuning.
• Comfort working across Windows Server, networking, and security dependencies.
• Automation skills using PowerShell scripting.

Key Responsibilities

• Own the enterprise Active Directory architecture, including forest/domain layout and trust strategy.
• Build secure, scalable, and highly available identity platforms aligned to business needs.
• Set architecture standards, governance rules, and technical best practices.
• Design and implement on-premises and hybrid Active Directory solutions.
• Develop ADFS, federation, and Azure AD / Entra ID integration approaches.
• Create authentication and authorization patterns for enterprise applications.
• Apply AD security hardening through tiered administration, least privilege, PAM, and PIM concepts.
• Define identity protection measures using Conditional Access and MFA.
• Support enterprise security and regulatory compliance requirements.
• Lead AD transformation initiatives such as domain consolidation, forest migration, and hybrid identity rollout.
• Plan migration methods, tooling, and deployment phases.
• Set backup, disaster recovery, and resilience strategies for the directory environment.
• Track and improve availability, performance, and reliability of AD services.
• Produce operational runbooks, SOPs, and technical documentation.
• Automate provisioning, policy enforcement, monitoring, and reporting through PowerShell.
• Improve AD performance, replication behavior, and Group Policy structures.
• Work closely with infrastructure, security, and application teams.
• Translate business requirements into practical technical designs.
• Contribute to presales, solution design, and customer-facing discussions.

Eligibility

Any graduate can apply.

Additional Information

This role is focused on enterprise identity architecture, directory transformation, operational resilience, and stakeholder collaboration in a large-scale IT services environment.