Operations Engineer

Project Role : Operations Engineer
Project Role Description : Support the operations and/or manage delivery for production systems and services based on operational requirements and service agreement.
Must have skills : Microsoft Active Directory
Good to have skills : Okta Identity Management, Identity Access Management (IAM), CyberArk Privileged Access Management
Minimum 5 year(s) of experience is required
Educational Qualification : 15 years full time education

Summary:
As an Active Directory Engineer, provide Level 3 support for enterprise Active Directory environments, including complex incident resolution and root cause analysis. A typical day involves overseeing the smooth functioning of production systems and services, ensuring they meet operational requirements and service agreements. This role requires continuous monitoring, managing incidents, and coordinating with various teams to maintain system reliability and performance. The position demands proactive problem-solving and effective communication to support operational excellence and service delivery within a dynamic environment.

Roles & Responsibilities:
1. Active Directory (Core L3 Responsibilities)
a) Administer and manage:
* Domain Controllers (multi-domain / multi-forest)
* AD Sites & Services, replication, FSMO roles
* Group Policy Objects (GPOs) and security baselines
b) Perform AD health checks, patching, backup/recovery, and performance optimization.
Troubleshoot:
* Authentication issues (Kerberos, NTLM)
* DNS, replication, AD Connect, and domain trust issues

2. Entra ID (Azure AD) & Hybrid Identity
a) Manage and support hybrid identity setups (AD + Entra ID) including AD Connect sync.
Implement and manage:
* Conditional Access policies, MFA, SSO
* Identity Protection and risk-based policies
b) Administer:
* RBAC, Administrative Units, roles, App Registrations
c) Troubleshoot:
* SSO (SAML, OAuth, OIDC), sync issues, federation
d) Support Privileged Identity Management (PIM) and access governance activities.

3. IAM / PAM
a) Integrate IAM platforms with AD / Entra ID for SSO and access governance.
Support tools such as:
* Okta (SSO, MFA, lifecycle management)
* CyberArk (Privileged Access, vaulting, session management)
b) Manage:
* User lifecycle (Joiner/Mover/Leaver)
* Privileged account onboarding and governance
c) Troubleshoot authentication and identity issues across applications.

4. Incident, Problem & Change Management
a) Act as escalation point for L1/L2 teams and resolve complex IAM incidents. expertia.ai
b) Perform root cause analysis (RCA) and implement long-term fixes.
c) Participate in:
* Change reviews
* Problem management
* Service improvement initiatives

5. Client Interaction & Stakeholder Management
a) Act as primary technical interface for clients
b) Lead:
* Technical discussions
* Workshops and requirement gathering sessions
c) Provide:
* Status updates, incident communication, RCA reports
* Translate technical solutions into business-friendly outcomes

6. Automation & Documentation
a) Develop automation using:
* PowerShell / scripting tools
b) Create and maintain:
* SOPs, runbooks, design documents
c) Drive process improvements and standardization

7. Security, Governance & Compliance
a) Implement IAM controls aligned with RBAC and least-privilege principles
Conduct:
* Access reviews
* Audits and compliance reporting
Support security initiatives such as:
* Zero Trust
* Identity threat monitoring

Professional & Technical Skills:
- Strong hands-on experience in:
* Active Directory Domain Services (AD DS)
* Microsoft Entra ID (Azure AD)

-Expertise in:
* SSO (SAML, OAuth, OIDC)
* MFA, Conditional Access
* AD Connect / Hybrid Identity

- Experience with one or more : Okta / CyberArk / SailPoint / Saviynt

- Additional Technical Exposure (Good to Have) :
* PKI / Certificate Services
* DNS, DHCP, networking fundamentals
* Cloud IAM (Azure, AWS)
* SIEM / Security tools integration

Soft Skills & Professional Attributes
- Strong client-facing experience (mandatory)
- Excellent communication (verbal & written)
- Ability to handle high-pressure incidents and escalations
- Strong analytical and troubleshooting mindset
- Mentoring and leadership capabilities

Preferred Certifications
- Microsoft Certified: Identity and Access Administrator (SC-300)
- Microsoft Azure certifications (AZ-104 / AZ-500)
- Okta / CyberArk certifications (preferred)

Nice-to-Have Experience in:
- Identity Governance (IGA) tools
- Zero Trust architecture implementation
- Automation platforms and DevOps pipelines

Additional Information:
- The candidate should have minimum 5-10 years of total IT experience.
- Minimum 3+ years in L3 or advanced IAM/AD role.
- Experience in production support and global environments.
- This position is based at our Bengaluru office.
- A 15 years full time education is required.
- Bachelor s degree in Computer Science / IT or equivalent
- Willingness to work in UK shift model (including weekends/on-call)
- Exposure to multi-region/global client environments

15 years full time education

About Accenture

Accenture is a leading global professional services company that helps the world’s leading businesses, governments and other organizations build their digital core, optimize their operations, accelerate revenue growth and enhance citizen services—creating tangible value at speed and scale. We are a talent- and innovation-led company with approximately 791,000 people serving clients in more than 120 countries. Technology is at the core of change today, and we are one of the world’s leaders in helping drive that change, with strong ecosystem relationships. We combine our strength in technology and leadership in cloud, data and AI with unmatched industry experience, functional expertise and global delivery capability. Our broad range of services, solutions and assets across Strategy & Consulting, Technology, Operations, Industry X and Song, together with our culture of shared success and commitment to creating 360° value, enable us to help our clients reinvent and build trusted, lasting relationships. We measure our success by the 360° value we create for our clients, each other, our shareholders, partners and communities.

Visit us at www.accenture.com 

Equal Employment Opportunity Statement

We believe that no one should be discriminated against because of their differences. All employment decisions shall be made without regard to age, race, creed, color, religion, sex, national origin, ancestry, disability status, military veteran status, sexual orientation, gender identity or expression, genetic information, marital status, citizenship status or any other basis as protected by applicable law. Our rich diversity makes us more innovative, more competitive, and more creative, which helps us better serve our clients and our communities.