L2 Support Engineer

Job Description

We are seeking an experienced L2 Support Engineer specializing in Active Directory and Microsoft Entra ID (Azure AD) to join our Identity Services team. The role involves managing and supporting enterprise directory services, identity synchronization, certificate services, and security controls within a hybrid (on-prem + cloud) environment. The ideal candidate will have deep expertise in Active Directory administration, Entra ID, GPO management, and PKI, along with strong troubleshooting and problem-solving skills.

Skill / Qualifications

• Bachelors degree in Computer Science, Information Technology, or related field.
• 5–8 years of experience administering Active Directory in medium/large enterprise environments.
• Strong knowledge of Microsoft Entra ID (Azure AD) and Entra Connect synchronization.
• Expertise in Active Directory Federation Services (ADFS) configuration and troubleshooting.
• Hands-on experience with ADCS and PKI infrastructure management.
• Skilled in Group Policy (GPO) design, deployment, and troubleshooting.
• Working knowledge of LDAP and directory integrations.
• Experience with privileged account lifecycle management and security best practices.
• Strong understanding of user provisioning, deprovisioning, and RBAC workflows.
• Ability to analyze and respond to audit logs, alerts, and security incidents.
• Familiarity with scripting/automation tools (PowerShell preferred).
• Excellent communication, collaboration, and documentation skills.

Preferred Qualifications

• Relevant Microsoft certifications such as:
• Microsoft Certified: Identity and Access Administrator Associate
• Microsoft Certified: Azure Administrator Associate
• MCSA: Windows Server or equivalent
• Experience with hybrid identity environments (on-prem + cloud).
• Exposure to ITIL or other ITSM frameworks.
• Familiarity with Privileged Access Management (PAM) tools (Okta, CyberArk, BeyondTrust).

Job Responsibilities

• Administer and support Active Directory services including user/group management, OU structuring, and domain controller health monitoring.
• Perform daily AD health checks, basic maintenance, and lifecycle operations (promotion/demotion of domain controllers).
• Manage and maintain Microsoft Entra ID (Azure AD) including synchronization with on-prem AD via Entra Connect, conditional access policies, and application registrations (ODIC/SAML).
• Handle file server and cloud storage authorization management.
• Administer and troubleshoot Active Directory Certificate Services (ADCS) including certificate issuance, renewal, revocation, and PKI lifecycle.
• Design, implement, and manage Group Policies (GPOs) to enforce enterprise-wide security and compliance standards.
• Utilize LDAP for queries, troubleshooting, and integration with enterprise applications.
• Oversee privileged account management and secure lifecycle processes for administrative accounts.
• Execute user onboarding and offboarding processes aligned with RBAC principles.
• Monitor and analyze audit logs, investigate identity-related security incidents, and provide remediation.
• Collaborate with security and compliance teams to align identity services with corporate and industry standards.
• Provide L2 troubleshooting for escalated identity-related issues from end users.
• Participate in patching, upgrades, and maintenance windows for identity infrastructure.
• Document procedures, configurations, troubleshooting steps, and operational guides for ongoing support.

About Us

We are champions of change, torchbearers of innovation, pioneers of modern business and technology solutions, believers in teamwork, transparency, and relationships.

We are AANSEACORE - a global Business  Technology Transformation Solutions Company, specializing in Professional Staffing. Asia, Africa, North - South America, Europe, Australia, the global presence we strive to establish, is at the core of AANSEACORE and this underlines our 'global family' ethos.

We are partnered with technology household companies like Microsoft, AWS, IBM , Lenovo. specialized in Flexi-Staffing (Temp. Staffing) and Contract to Hire Staffing. With dedicated Account Managers for each of our clients, our consultants work for assignments across the globe based on clients' needs. With our vast network of clients, we are always on the move, fulfilling their contract positions.

Visit Us at to learn more.