METRO
Microsoft Entra ID & Active Directory Engineer
Pune, Maharashtra, India · Hybrid · Full-time
Apply on the employer’s site ↗See how well you match this job
You apply directly with the employer. ROLIVA does not submit applications from this page and is not the employer.
About the role
Description from the employer’s posting. Check the employer’s page for the current version.
- EmployerMETRO
- LocationPune, Maharashtra, 411014, India
- Work styleHybrid
- Employment typeFull-time
- Employer posted
Microsoft Entra ID (Advanced Implementation)
- Implement and optimize Conditional Access policies based on approved designs
- Support and operationalize:
- Risk‑based access policies
- Authentication Strengths and phishing‑resistant MFA
- Lead operational implementation of Privileged Identity Management (PIM):
- Role assignments
- Approval workflows
- Just‑in‑Time access configuration
- Secure application and workload identities:
- App registrations and service principals
- OAuth permission governance
On‑Prem Active Directory (Security & Hardening)
- Support and enforce AD security best practices:
- Tiered admin model (Tier 0 / 1 / 2)
- Privileged account separation
- Lead AD hardening activities:
- LAPS
- Protected Users
- Delegation and admin access restrictions
Show full description
- Troubleshoot complex AD security and authentication issues
Hybrid Identity & Integration
- Support Entra Connect configuration and lifecycle management
- Assist in evaluating authentication models and hybrid trust decisions
- Support integration of identity with:
- Azure subscriptions
- Third‑party SaaS applications
Threat Detection & Operations
- Support CyberDefence team for Identity (MDI) investigations and tuning
- Act as a technical escalation point during identity‑related incidents
Collaboration & Mentoring
- Mentor mid‑level engineers and provide technical guidance
- Participate in design reviews and provide implementation feedback
- Work closely with Identity Architects, Security, and Platform teams
- 8–10 years of experience in identity and access management
- Strong hands‑on experience with:
- Microsoft Entra ID P2
- Conditional Access at scale
- Privileged Identity Management
- Active Directory security
- Experience supporting hybrid AD environments
- Advanced PowerShell scripting and automation
- Strong understanding of identity‑based attack techniques and mitigations
- Solid grasp of Zero Trust principles (implementation‑focused)
- Experience with:
- Concepts around IGA
- Defender for Identity
- Passwordless authentication (FIDO2, WHfB)
- VDI or shared device environments
- Certifications:
- SC‑300
- AZ‑500
- Microsoft Security certifications
Check your resume against this job Free, no sign-up. Nothing you paste is stored.
Staying safe while you apply
- Never pay to apply, interview or accept an offer. ROLIVA never asks you for payment to apply to a job.
- Apply only through the official “Apply on the employer’s site” button, on the employer’s own site, and check that a recruiter’s email uses that employer’s own domain rather than a free email address.
- Be cautious of an offer made with no real interview, or pressure to decide quickly or share financial details early.
Does something look wrong with this listing? Use “Report broken link” in the role details, or read ROLIVA’s full job-safety guidance ↗.
Preparing for this role with ROLIVA
- Check the fit.
Compare the requirements with the experience you have confirmed, including gaps.
- Prepare honestly.
Build interview stories and application drafts from your own evidence.
- Keep track.
Save the role and record your own application status and follow-ups.
At a glance
- Work styleHybrid
- Employment typeFull-time
- SeniorityMid level
- Employer posted
- Added to ROLIVA
- Last checked
Skills in this posting
Skills ROLIVA found in the employer’s own description above. A mention is not a requirement.