Azure Ad Identity and Access Administrator

Who We Are

At Kyndryl, we design, build, manage and modernize the mission-critical technology systems that the world depends on every day. So why work at Kyndryl? We are always moving forward - always pushing ourselves to go further in our efforts to build a more equitable, inclusive world for our employees, our customers and our communities.

The Role

Windows 2012/2016/2019 Active Directory working knowledge

.Responsible to manage multiple Forest and Domains of Active Directory
- Installation and configuration of Active Directory domain controllers.

.Deep understanding of Group policy management, troubleshooting and implementation.

.In-depth knowledge on Active Directory Replication troubleshooting and hands on replication tool Repadmin, Dcdiag, AD Rep etc.

.Diagnose and resolve problems associated with the Directory Replication service and DFSR

.Management of Active Directory domain controller FSMO roles

.In-depth knowledge of TCP/IP, SMB,NTLM and Kerberos, etc.

.In-depth knowledge of kerberous delegation and constraint delegation

.Possess working knowledge of certificate-based authentication and PKI infrastructure

.Implement, monitor, and maintain Active Directory DC design, Schema, OU design, AD replication topology, and DC backup/restore procedures

.In-depth knowledge of DNS and DNS query, Zone Transfer, etc.

.In-depth knowledge of Active Directory disaster recovery and backup solutions.

.Add, remove and configure Active Directory sites, sitelinks and subnets.

.Create or remove Trust relationships

.Conducting root cause analysis.

.Very good scripting knowledge (PowerShell)

.Strong technical skills to implement IAM Security services with hands on experience on several of the items outlined below: - Managing identity and access with Azure Active Directory

.In-depth Knowledge on Implement Web Application using Azure App services and Enterprise App

.Understanding of Microsoft Identity and Access Management products such including Azure AD,B2B & B2C

.Responsible for governs provisioning, access, single sign-on (SSO), directory services and technical integrations, as well as supporting behavioral analytics

..Experience with API security, user authentication protocols, SAML, OAUTH/OIDC2.0

.Configuring Role-Based Access Control(RBAC) for Organization and creating managed Identity.

.Good experience Azure Entra App proxy, experience on MFA, Conditional Access policies

.Ensuring Azure Entra SSO using Modern auth protocols-SAML, OAUTH,JSON, OIDC. Manage Azure AD permissions.

.Ensuring Azure Entra Connect Tool, Configuring Synchronization Rules, Troubleshoot Synchronization Issues are managed.

.Authentication Methods (sign-on security, multi-factor authentication (MFA), device sign-on methods, Azure Seamless SSO,PHS and PTA

.Experience on Azure Entra Conditional Access (Compliance and conditional access policies, device compliance policy, conditional access policy).

.Experience on managing and providing permission through Azure Entra Privileged Identity Management (PIM)

.Azure Entra Self-service password reset(SSPR), Azure Entra access reviews

.Azure Entra Identity Protection (User risk policy and sign-in risk policy)

.Secure Hybrid environments (Entra Connect and authentication) and device registration

.Azure ATP (Plan and implementation threat protection)

.Monitor and Handle tickets (incident/request), Major Incidents effectively and should be open to On Call support during off work hours when needed.

.Periodically perform internal assessment to ensure compliance with controls

Who You Are

You’re good at what you do and possess the required experience to prove it. However, equally as important - you have a growth mindset; keen to drive your own personal and professional development. You are customer-focused - someone who prioritizes customer success in their work. And finally, you’re open and borderless - naturally inclusive in how you work with others.

Required Technical and Professional Experience
- Deep expertise within specific technology domain areas (e.g., software development, cloud computing, systems engineering, infrastructure, security, networking, data & analytics)
- Hands-on experience in at least one of the following: software development, DevOps engineering, systems administration, or systems architecture in public cloud Azure domain
- In-depth knowledge of Windows and Linux Operating Systems
- Must have experience driving for engineering solutions and working across teams
- Extensive experience and judgment to plan and accomplish goals
- Ability to communicate effectively, both verbal and written
- Strong process improvement experience

Preferred Technical and Professional Experience
- In depth knowledge of Azure cloud hosting architecture with experience with Azure.
- Exceptional judgment and decision-making abilities
- Familiar with a variety of IT concepts, practices, and procedures
- Knowledge of design techniques, tools, and principals involved in produ