Identity Management Consultant

The Role

We are seeking an Identity Operations Engineer to join our Identity and Access Management (IAM) Operations team.

The successful candidate will be responsible for the day-to-day operational support of Active Directory, Microsoft Entra ID, Public Key Infrastructure (PKI), Application Registrations, and Single Sign-On (SSO) services.

This role will focus on identity lifecycle management, authentication and access support, certificate management, application onboarding, incident resolution, and operational monitoring to ensure the availability, security, and compliance of enterprise identity services.

Key Responsibilities

• Active Directory (AD) Administration
• Manage user, group, and computer accounts within Active Directory.
• Perform user provisioning, deprovisioning, account modifications, and access changes.
• Handle password resets, account unlocks, and authentication-related requests.
• Manage security groups, distribution groups, and organizational units (OUs).
• Support Group Policy administration and troubleshooting.
• Assist in monitoring AD replication and Domain Controller health.
• Analyze and troubleshoot AD-related incidents and service requests.
• Microsoft Entra ID Administration
• Administer Microsoft Entra ID users, groups, and identity-related configurations.
• Support onboarding and offboarding activities across cloud and hybrid environments.
• Troubleshoot sign-in issues, Multi-Factor Authentication (MFA), and Self-Service Password Reset (SSPR).
• Monitor and investigate Entra ID sign-in logs, audit logs, and identity-related alerts.
• Support Conditional Access policy troubleshooting and user access validation.
• Monitor Entra Connect synchronization and escalate issues when required.
• Conditional Access impact analysis.
• Entra ID sign-in log investigation and Entra Connect synchronization troubleshooting.
• PowerShell scripting and automation
• Application Registration & Enterprise Applications
• Create, manage, and maintain Application Registrations and Enterprise Application support.
• Support Enterprise Application onboarding and lifecycle management.
• Configure and manage SSO integrations using SAML, OAuth 2.0, and OpenID Connect.
• Manage application permissions, service principals, application secrets, and certificates.
• Support application access requests and user/group assignments.
• Troubleshoot authentication, authorization, and SSO-related issues.
• Assist application owners with application onboarding and operational support.
• Monitor application authentication logs and resolve access-related incidents.
• PKI & Certificate Management
• Perform certificate issuance, renewal, revocation, and lifecycle management activities.
• Monitor certificate expiration and support proactive renewals.
• Troubleshoot certificate enrollment and authentication issues.
• Support Microsoft Certificate Services and enterprise PKI environments.
• Maintain certificate documentation, inventories, and compliance records.
• Coordinate certificate-based authentication support for applications and services.
• Incident, Request & Change Management
• Provide operational support within defined SLA and KPI targets.