Tech Lead - Active Directory & Entra ID Services

Job Summary

Seeking a highly skilled Tech Lead – Active Directory & Entra ID Services who will be responsible for delivering and supporting enterprise-level identity and access management services. The ideal candidate will possess deep technical expertise in Active Directory (AD), Entra ID (Azure AD), and related hybrid identity services, coupled with strong leadership, stakeholder management, Shift management and service ownership skills.

This role involves leading day-to-day operations, driving service excellence, mentoring team members, and acting as the key point of contact for technical escalations, reporting, and stakeholder communications.

The Tech Lead will serve as the primary point of contact between the stakeholder and internal delivery teams, ensuring strong relationship management, expectation alignment, and strategic communication. This individual will be responsible for understanding stakeholder priorities, resolving issues proactively, and driving collaboration across multiple teams to achieve project and business goals.

Key Responsibilities:

Leadership & Service Delivery

• Act as a primary technical and operational escalation point for identity and directory-related incidents.
• Drive service delivery, ensuring SLAs, KPIs, and compliance targets are met.
• Ensure clear, timely, and transparent communication between stakeholders and internal teams.
• Translate business requirements into actionable plans for delivery teams.
• Prepare and present progress reports, risk assessments, and updates to senior leadership.
• Coordinate and manage incident, problem, and change management processes for AD/Entra services.
• Conduct regular service reviews with stakeholders and provide actionable insights.
• Work with a small team of L2/L3 engineers supporting Active Directory and Entra ID environments.
• Prepare and deliver service performance reports, dashboards, and management updates.
• Drive continuous improvement, automation, and standardization across the environment.
• Collaborate with project teams to support new implementations, migrations, and transformations.
• Maintain strong stakeholder relationships, ensuring satisfaction and proactive communication.

Technical Responsibilities

• Responsible for administering and supporting Active Directory Domain Controllers, forests, and trust relationships.
• Manage promotion/demotion of domain controllers and forest-level administration.
• Manage Group Policy Objects (GPOs), Sites and Services, and replication configurations.
• Manage conducting regular AD health checks, database cleanup, and replication remediation.
• Manage SYSVOL, Global Catalogue, FSMO roles, and Windows Time Services.
• Manage implementation and support of Active Directory backup, recovery, and disaster recovery procedures.
• Configure and manage Certificate Services and Public Key Infrastructure (PKI).
• Manage roaming profiles, folder redirection, and cloud storage access control (Azure Storage).
• Lead Active Directory domain migrations and consolidation projects.
• Ensure security hardening and vulnerability management of domain controllers.

Entra ID / Hybrid Identity

• Own the process of administering and supporting Entra Connect / Sync servers and synchronization rules.
• Manage Azure AD roles, Administrative Units, and RBAC.
• Manage Conditional Access Policies, Application Registrations (OIDC, SAML), and Dynamic Groups.
• Oversee Privileged Identity Management (PIM) and Service Principals.
• Support custom domain management and identity lifecycle processes.
• Collaborate on integrations with OKTA or other IAM solutions.

Automation, Documentation & Process

• Review and decision making for automations utilising, PowerShell scripts for reporting, and health monitoring etc.
• Maintain up-to-date technical documentation, architecture diagrams, and standard operating procedures (SOPs).
• Drive process efficiency by implementing best practices and automation frameworks.
• Support audit and compliance requirements by maintaining accurate records and configurations.
• Prepare Root cause analysis and related documentations for incidents and problem management.
• Work with offshore lead for shift management to ensure round the clock support.

Required Skills:

• 12–15 years of relevant experience in Active Directory and Entra ID management, with at least 3–5 years in a leadership role.
• Deep understanding of Windows Server infrastructure, DNS, PKI, and IAM principles.
• Strong PowerShell scripting and automation experience.
• Demonstrated experience in stakeholder-facing service delivery and technical leadership.
• Excellent communication, stakeholder management, and reporting skills.
• Strong problem-solving and analytical mindset with the ability to manage critical incidents under pressure.

Preferred Certifications:

• Microsoft Certified: Identity and Access Administrator (SC-300)
• Microsoft Certified: Azure Administrator Associate (AZ-104)
• Microsoft Certified: Windows Server Hybrid Administrator Associate
• ITIL Foundation Certification