IAM Active Directory AD L Lead

IAM / Active Directory (AD) L3 Lead
We are seeking an experienced IAM / Active Directory L3 Lead to provide technical leadership, operational excellence, and strategic direction for Identity and Access Management (IAM) and Microsoft Active Directory services. The role will be responsible for managing enterprise identity infrastructure, leading L3 support operations, driving automation initiatives, ensuring security compliance, and supporting cloud identity platforms. The ideal candidate should possess deep expertise in Microsoft Active Directory, Azure AD (Entra ID), Identity Governance, Privileged Access Management (PAM), Authentication Technologies, and Enterprise Access Controls while leading a team of engineers supporting global operations.
Key ResponsibilitiesIdentity & Access ManagementLead L3 support and administration of enterprise IAM services.Design, implement, and maintain identity lifecycle management processes.Manage provisioning, deprovisioning, role-based access control (RBAC), and access governance.Ensure compliance with security policies, audit requirements, and regulatory standards.Drive IAM transformation and modernization initiatives.Active Directory & Entra ID AdministrationAdminister and support:Active Directory Domain Services (AD DS)Azure AD / Microsoft Entra IDAD Federation Services (ADFS)Azure AD ConnectDNS, DHCP, Group Policy (GPO)Design and maintain AD forests, domains, trusts, sites, and replication topology.Perform health checks, performance tuning, and capacity planning.Manage hybrid identity environments.
Security & ComplianceImplement identity security best practices and Zero Trust principles.Support MFA, Conditional Access, Identity Protection, and SSO solutions.Manage privileged account controls and PAM/PIM solutions.Conduct security reviews, access recertifications, and compliance assessments.Support audit activities and regulatory compliance requirements.Incident & Problem ManagementLead major incidents related to IAM and Active Directory.Perform root cause analysis (RCA) and implement preventive measures.Provide L3 troubleshooting for authentication, authorization, replication, and directory service issues.Collaborate with security, infrastructure, and application teams during critical incidents.
Automation & Continuous ImprovementDevelop automation using PowerShell and scripting tools.Improve operational efficiency through process automation and self-service solutions.Create and maintain technical standards, runbooks, and operational procedures.Drive service improvement initiatives and platform modernization.Leadership & Stakeholder ManagementLead and mentor IAM/AD engineers.Coordinate with security, cloud, infrastructure, and application teams.Work with business stakeholders to understand identity and access requirements.Provide technical guidance during projects, migrations, and audits.Participate in architecture reviews and strategic planning.
Required Technical SkillsCore TechnologiesMicrosoft Active Directory (AD DS)Microsoft Entra ID (Azure AD)Azure AD ConnectGroup Policy ManagementDNS and DHCPActive Directory Federation Services (ADFS)LDAP and Kerberos AuthenticationIAM TechnologiesIdentity Governance and Administration (IGA)Single Sign-On (SSO)Multi-Factor Authentication (MFA)Role-Based Access Control (RBAC)Privileged Access Management (PAM/PIM)
Access Certification and GovernanceCloud & SecurityMicrosoft AzureHybrid Identity SolutionsConditional Access PoliciesMicrosoft Defender for IdentityZero Trust Security ArchitectureCybersecurity and Compliance FrameworksAutomationPowerShell ScriptingAutomation RunbooksInfrastructure-as-Code conceptsProcess Automation and Orchestration
Required Experience12-14+ years of IT Infrastructure experience.7+ years of hands-on experience in Active Directory and IAM administration.3+ years of experience leading L3 operations or technical teams.Experience supporting large-scale enterprise environments (50,000+ users preferred).Experience with hybrid cloud identity architectures.Experience in incident management and problem management processes.
Preferred CertificationsMicrosoft Certified: Identity and Access Administrator Associate (SC-300)Microsoft Certified: Azure Administrator Associate (AZ-104)Microsoft Certified: Azure Security Engineer Associate (AZ-500)Certified Information Systems Security Professional (CISSP)Certified Identity and Access Manager (CIAM)ITIL Foundation/Intermediate
Key CompetenciesTechnical LeadershipStakeholder ManagementProblem Solving and TroubleshootingTeam Mentoring and CoachingRisk ManagementCommunication and Presentation SkillsStrategic ThinkingOperational Excellence
Success MetricsIAM and AD platform availability and SLA compliance.Reduction in security and audit findings.Reduction in recurring incidents through RCA implementation.Automation and operational efficiency improvements.Successful delivery of IAM transformation initiatives.Compliance with identity governance and access management standards.Reporting To: Infrastructure Services Manager / Identity Services ManagerRole Level: L3 Lead / Technical LeadLocation: Hybrid / OnsiteWork Model: 24x7 Support & Project Engagement (as required)