Job Description

Purpose of the role

To build and maintain infrastructure platforms and products that support applications and data systems, using hardware, software, networks, and cloud computing platforms as required with the aim of ensuring that the infrastructure is reliable, scalable, and secure.  Ensure the reliability, availability, and scalability of the systems, platforms, and technology through the application of software engineering techniques, automation, and best practices in incident response. 

Accountabilities

• Build Engineering:  Development, delivery, and maintenance of high-quality infrastructure solutions to fulfil business requirements ensuring measurable reliability, performance, availability, and ease of use. Including the identification of the appropriate technologies and solutions to meet business, optimisation, and resourcing requirements.
• Incident Management: Monitoring of IT infrastructure and system performance to measure, identify, address, and resolve any potential issues, vulnerabilities, or outages. Use of data to drive down mean time to resolution.
• Automation:  Development and implementation of automated tasks and processes to improve efficiency and reduce manual intervention, utilising software scripting/coding disciplines.
• Security: Implementation of a secure configuration and measures to protect infrastructure against cyber-attacks, vulnerabilities, and other security threats, including protection of hardware, software, and data from unauthorised access.
• Teamwork:  Cross-functional collaboration with product managers, architects, and other engineers to define IT Infrastructure requirements, devise solutions, and ensure seamless integration and alignment with business objectives via a data driven approach.
• Learning: Stay informed of industry technology trends and innovations, and actively contribute to the organization's technology communities to foster a culture of technical excellence and growth.

Assistant Vice President Expectations

• To advise and influence decision making, contribute to policy development and take responsibility for operational effectiveness. Collaborate closely with other functions/ business divisions.
• Lead a team performing complex tasks, using well developed professional knowledge and skills to deliver on work that impacts the whole business function. Set objectives and coach employees in pursuit of those objectives, appraisal of performance relative to objectives and determination of reward outcomes
• If the position has leadership responsibilities, People Leaders are expected to demonstrate a clear set of leadership behaviours to create an environment for colleagues to thrive and deliver to a consistently excellent standard. The four LEAD behaviours are: L – Listen and be authentic, E – Energise and inspire, A – Align across the enterprise, D – Develop others.
• OR for an individual contributor, they will lead collaborative assignments and guide team members through structured assignments, identify the need for the inclusion of other areas of specialisation to complete assignments. They will identify new directions for assignments and/ or projects, identifying a combination of cross functional methodologies or practices to meet required outcomes.
• Consult on complex issues; providing advice to People Leaders to support the resolution of escalated issues.
• Identify ways to mitigate risk and developing new policies/procedures in support of the control and governance agenda.
• Take ownership for managing risk and strengthening controls in relation to the work done.
• Perform work that is closely related to that of other areas, which requires understanding of how areas coordinate and contribute to the achievement of the objectives of the organisation sub-function.
• Collaborate with other areas of work, for business aligned support areas to keep up to speed with business activity and the business strategy.
• Engage in complex analysis of data from multiple sources of information, internal and external sources such as procedures and practises (in other areas, teams, companies, etc).to solve problems creatively and effectively.
• Communicate complex information. 'Complex' information could include sensitive information or information that is difficult to communicate because of its content or its audience.
• Influence or convince stakeholders to achieve outcomes.

All colleagues will be expected to demonstrate the Barclays Values of Respect, Integrity, Service, Excellence and Stewardship – our moral compass, helping us do what we believe is right. They will also be expected to demonstrate the Barclays Mindset – to Empower, Challenge and Drive – the operating manual for how we behave.

Join us as an Active Directory Engineer at Barclays, where you'll spearhead the evolution of our digital landscape, driving innovation and excellence. You'll harness cutting-edge technology to revolutionise our digital offerings, ensuring unparalleled customer experiences. As a part of the team, you will deliver technology stack, using strong analytical and problem solving skills to understand the business requirements and deliver quality solutions. You'll be working on complex technical problems that will involve detailed analytical skills and analysis. This will be done in conjunction with fellow engineers, business analysts and business stakeholders. 

To be successful as an Active Directory Engineer you should have experience with:

Essential Skills:

• Demonstrated experience in administering and supporting Microsoft Active Directory environments, including user, group, and computer object management.
• Strong knowledge of Active Directory architecture, authentication protocols, Group Policies, and domain services.
• Experience troubleshooting complex identity, authentication, replication, and access related issues across enterprise environments.
• Proven ability to manage and maintain privileged access controls, security policies, and compliance requirements within Active Directory.
• Hands-on experience with PowerShell scripting and automation to improve operational efficiency and reduce manual effort.
• Provide support for a 24x7 Active Directory operational environment, ensuring high availability, timely incident resolution, and adherence to service level agreements (SLAs).
• Collaborate with global teams to provide seamless support across different time zones and support windows.
• Active Directory (AD) Engineer must have strong expertise in AD fundamentals, including forests, domains, trusts, delegation, FSMO roles, and AD Sites & Services, to effectively design, manage, and maintain enterprise directory environments.
• They should be proficient in Installation, Configuration and troubleshooting of Windows Active Directory, AD health monitoring and replication processes to ensure consistent and secure operations across domain controllers.
• Understanding of authentication and authorization mechanisms such as Kerberos, NTLM, LDAP and well familiar with Certificate Services, PKI concepts with Root Cause analysis and Problem Management
• They must possess strong skills in AD recovery and business continuity, including AD object recovery, domain controller restoration, and disaster recovery procedures to minimize downtime and data loss during critical incidents.
• Effective troubleshooting capabilities are crucial, enabling engineers to diagnose and resolve issues such as account lockouts, replication failures, DNS problems, Kerberos errors, Group Policy processing failures, and general authentication issues that impact users and services.

Some other highly valued skills include:

• Experience supporting Azure Active Directory (Microsoft Entra ID) and hybrid identity solutions.
• Knowledge of Privileged Access Management (PAM) platforms such as CyberArk or similar enterprise solutions.
• Experience with Windows Server administration, including patch management, hardening, and security configuration.
• Familiarity with monitoring and alerting tools such as Splunk, UIM or similar enterprise monitoring platforms.
• Experience supporting disaster recovery, backup, restoration, and business continuity activities for Active Directory services
• Experience collaborating with global teams across multiple time zones and supporting critical production systems in a 24x7 operational environment.
• Engineers should possess automation and engineering skills, leveraging tools such as PowerShell, Python, and Ansible to automate administrative tasks, streamline operations, improve consistency, and reduce manual effort across the environment.
• Engineer should have knowledge of Microsoft Entra ID (Azure AD), including hybrid identity management, synchronization with on-premises Active Directory, and cloud-based authentication and access control solutions.
• Proficiency in monitoring and observability platforms such as Splunk, ESAAS, and Observe, along with AD health dashboards and log analytics solutions, enables proactive monitoring and ensure the reliability and performance of the Active Directory infrastructure.
• Knowledge of Active Directory security and hardening is essential to protect directory services from cyber threats. This includes implementing security best practices, privileged access management, tiered administration, auditing, and compliance controls.
• Familiarity with version control and DevOps practices using platforms like GitLab is highly valuable, maintaining automation scripts, tracking changes, and supporting collaborative development workflows.

You may be assessed on key critical skills relevant for success in role, such as risk and controls, change and transformation, business acumen, strategic thinking and digital and technology, as well as job-specific technical skills.

This role will be based out of Pune.