Identity & Access Operations Engineer L2 – Active Directory, LDAP, ADFS

This is a fully remote position, open to applicants in India.

📋 Description

• Deliver L2 support for incidents, alerts, and service requests related to Active Directory.

• Manage user accounts, groups, computer accounts, password resets, account unlocks, and access permissions.

• Diagnose authentication failures, account lockouts, Group Policy complications, and domain connectivity issues.

• Assist with AD replication, conduct domain controller health assessments, and troubleshoot DNS and time synchronization.

• Provide support for LDAP directory services, including incidents related to connectivity and authentication.

• Resolve LDAP bind failures, connection problems, directory queries, and access permissions issues.

• Offer L2 support for ADFS authentication, federation, and single sign-on incidents.

• Troubleshoot token issuance failures, federation errors, certificate complications, and authentication challenges.

• Monitor the infrastructure of AD, LDAP, and ADFS, investigating service health, replication, and synchronization matters.

• Address identity-related incidents and service requests within established SLAs.

• Implement approved changes while adhering to access management and security protocols.

• Assist in major incident recovery, problem analysis, and root-cause investigations.

• Maintain runbooks, operational documentation, incident logs, and shift handover records.

• Collaborate with L1/L3, Security, IAM, Network, Windows, and Application teams.

• Ensure prompt escalation, SLA adherence, and effective APAC–EMEA–NLAM shift transitions.

⛳️ Requirements

• Practical experience in Active Directory administration and troubleshooting.

• In-depth knowledge of users, groups, account lockouts, authentication processes, Group Policy, and AD replication.

• Familiarity with LDAP, directory queries, bind operations, and application integrations.

• Experience in supporting ADFS, federation services, SSO, and issues related to certificates.

• Understanding of DNS, Kerberos, NTLM, SSL/TLS, and various authentication protocols.

• Knowledge of service accounts, access permissions, privileged access, and identity security measures.

• Experience with monitoring tools and ServiceNow or similar ITSM platforms.

• Familiarity with ITIL frameworks for Incident, Problem, Change, and Request Management.

• Basic PowerShell scripting skills for identity management and troubleshooting.

• Background in enterprise-level 24x7 production operations and SLA-focused support.

🏝️ Benefits

• Dynamic work environment with robust customer and partner networks.

• Culture that encourages innovation, collaboration, and continuous learning.

• Commitment to fostering a diverse and inclusive workplace.

• Equal opportunity employer.