Directory Services Engineer

Alight Solutions LLC

Hyderabad, IndiaPosted 3 days agoDiscoveredMatch locked

7+ years expSoftware Engineering

Apply

Overview

The Directory Services Engineer within the

Alight Identity Security team

is responsible for the security, reliability, and availability of enterprise directory and identity platforms. This role supports

Tier 0 and Tier 1 identity systems

, safeguards privileged access, integrates identity and security technologies, and provides operational and incident-response support across the enterprise.

The ideal candidate will bring strong hands-on experience with directory services, cloud platforms, IAM technologies, scripting and automation, and modern authentication and federation protocols.

Key Responsibilities

Platform Administration & Operations

Ensure directory services platforms are secure, compliant, resilient, and highly available.
Maintain

performance, availability, and resilience

of Tier 0 and Tier 1 identity systems.

Proactively monitor systems for performance, stability, and reliability.
Protect

privileged identities

by enforcing least-privilege principles using RBAC, ACLs, and Just-In-Time access.

Support security, compliance, and regulatory audits.
Participate in

incident response activities

, including off-hours support as required.

Integration & Engineering

Lead and support the integration, lifecycle management, and engineering

of identity and security platforms.

Collaborate with

application development teams and end users

to resolve incidents and complete service requests.

Provide

technical leadership and guidance

to operational support team members.

Support architectural decisions related to

identity, authentication, authorization, and platform resilience

Upgrades, Support & Documentation

Coordinate platform maintenance, upgrades, and operational support activities

Develop and maintain

technical documentation

, scripts, code repositories, and training materials.

Ensure proper

knowledge transfer, documentation, and operational readiness

during platform changes and upgrades.

Support ongoing

operational improvements

through documentation and process refinement.

Required Qualifications

7+ years of professional experience in Directory Services and/or Identity & Access Management (IAM).
Deep understanding of

Active Directory Domain Services (AD DS)

architecture, including forests, domains, trusts, FSMO roles, replication, and multi-site topology.

Hands-on experience integrating with IAM platforms such as Saviynt, Microsoft Entra ID (Azure AD), SailPoint, Okta, and PingFederate.
Strong knowledge of

LDAP concepts

, schema extensions, and directory query optimization.

Experience with

PKI and certificate lifecycle management

, including CRLs, NDES/SCEP, and AD-integrated certificate services.

Proficiency in

scripting and automation

(PowerShell, Bash, Python, Ansible).

Strong experience designing and managing

Group Policy Objects (GPOs)

Extensive experience with

cloud platforms

(AWS, Azure) and service models (IaaS, PaaS, SaaS), including cloud networking concepts.

Excellent written and verbal communication skills.

• Experience managing directory platforms such as Active Directory, eDirectory, and Radiant Logic (FID/SaaS)

Familiarity with

CI/CD pipelines and Infrastructure-as-Code

tools (e.g., Terraform).

Experience with

Microsoft Entra Conditional Access

and

Entra Connect

Knowledge of

Privileged Access Management (PAM)

solutions.

Strong understanding of

authentication and authorization

principles.

Experience with

ITSM platforms

(ServiceNow).

Hands-on knowledge of

SSO and federation standards

(SAML 2.0, OAuth 2.0, OIDC).

Proven troubleshooting skills grounded in

engineering best practices

Familiarity with

Agile methodologies

(Scrum, SAFe, Kanban).

Experience with monitoring platforms and tuning alerts for performance, availability, and connectivity.
Broad systems engineering experience including

DNS, DHCP, TCP/IP, clustering, SIEM, IIS/Tomcat, virtualization (VMware/Hyper-V), and load balancing (F5, NLB, ALB)

. We offer you a competitive total rewards package, continuing education & training, and tremendous potential with a growing worldwide organization. DISCLAIMER: Nothing in this job description restricts management's right to assign or reassign duties and responsibilities of this job to other entities; including but not limited to subsidiaries, partners, or purchasers of Alight business units. .

Not included in the source posting: what you'll do, benefits.

Skills

iamazureagileansibleawsbashci-cdkanbanoktapampythonsailpoint

Who can apply

The employer didn't state any visa, work authorization, citizenship or clearance requirements in this posting. Confirm with the employer before applying.

Read automatically from the employer's posting text. Always confirm with the employer — requirements can change after a job is published.