Subject Matter Expert

Job Description

We are seeking a highly experienced Subject Matter Expert (SME) in Active Directory and Microsoft Entra ID Services to join our Identity Services team. This role requires deep technical expertise, strategic leadership, and the ability to act as the final escalation point for complex identity and access management challenges in large-scale, hybrid environments.

Skill / Qualifications

• Bachelors degree in Computer Science, Information Technology, or related field.

• 8+ years of deep, hands-on experience in:

• Active Directory architecture and administration in large, complex enterprises.

• Microsoft Entra ID (Azure AD) and hybrid identity synchronization.
• ADFS – design, deployment, and troubleshooting.
• ADCS and PKI infrastructure, including certificate lifecycle management.
• GPO design and enforcement at scale.
• LDAP schema design, directory queries, and integrations.

• Privileged Access Management and lifecycle controls.

• Strong understanding of identity security best practices, compliance, and zero-trust models.

• Proficiency in scripting and automation (PowerShell preferred) for identity tasks.
• Proven ability to lead projects and provide strategic technical direction.
• Excellent communication skills with the ability to engage both technical teams and executive stakeholders.
• Familiarity with ITIL, compliance standards (GDPR, HIPAA), and security frameworks.
• Experience with enterprise PAM tools such as Okta, CyberArk, BeyondTrust.

Preferred Qualifications

• Advanced Microsoft certifications such as:

• Microsoft Certified: Identity and Access Administrator Expert

• Microsoft Certified: Azure Solutions Architect Expert

• MCSA / MCSE or equivalent

• Background in cloud security and zero-trust architecture models.

• Experience leading identity modernization initiatives in hybrid environments.

Job Responsibilities

• Serve as the technical authority and escalation point for complex issues in:
• Active Directory (AD) administration, design, and architecture.
• Microsoft Entra ID (Azure AD) synchronization and hybrid integration.
• Active Directory Federation Services (ADFS) implementation and troubleshooting.
• Active Directory Certificate Services (ADCS) and PKI lifecycle management.
• Lead the design, deployment, and optimization of Group Policy Objects (GPOs) to enforce enterprise-wide security and compliance.
• Perform AD health checks, maintenance, and operational oversight to ensure stability and performance.
• Provide expertise in LDAP directory services, schema design, and integration for enterprise applications.
• Define and enforce best practices for certificate lifecycle management and PKI security.
• Establish and oversee Privileged Access Management (PAM) policies to safeguard critical accounts and access points.
• Guide user onboarding and offboarding processes, ensuring alignment with RBAC principles and compliance mandates.
• Monitor, analyze, and respond to audit logs and security events related to identity and access.
• Collaborate with cybersecurity and compliance teams to identify and remediate identity-related risks.
• Mentor and train L1 and L2 teams, fostering skill development and knowledge transfer.
• Participate in IT governance, compliance audits, and policy formulation.
• Lead and contribute to enterprise identity infrastructure projects, migrations, and modernization initiatives.
• Deliver documentation, technical architecture diagrams, and reports for stakeholders and leadership teams.
• Provide escalated end-user support for identity-related incidents requiring SME-level expertise.

About Us

We are champions of change, torchbearers of innovation, pioneers of modern business and technology solutions, believers in teamwork, transparency, and relationships.

We are AANSEACORE - a global Business  Technology Transformation Solutions Company, specializing in Professional Staffing. Asia, Africa, North - South America, Europe, Australia, the global presence we strive to establish, is at the core of AANSEACORE and this underlines our 'global family' ethos.

We are partnered with technology household companies like Microsoft, AWS, IBM , Lenovo. specialized in Flexi-Staffing (Temp. Staffing) and Contract to Hire Staffing. With dedicated Account Managers for each of our clients, our consultants work for assignments across the globe based on clients' needs. With our vast network of clients, we are always on the move, fulfilling their contract positions.

Visit Us at to learn more.