Senior Domain Lead-AD/IDAM

Hi,

We are having an opening for Senior Domain Lead-AD/IDAM & Email Lead/Architect at our Mumbai location

Job Summary
: We are seeking an accomplished and strategic
Senior Domain Lead
to oversee enterprise
email and collaboration systems
,
Active Directory (AD)
,
Identity & Access Management (IDAM)
, and their
security and cloud integrations
. The role focuses on end-to-end management and security governance across hybrid environments, ensuring scalable, secure, and compliant digital identity and collaboration infrastructure.

Areas Of Responsibility
:

Key Responsibilities:

1. Infrastructure & Operations Management

• Manage daily operations for Microsoft 365 (Exchange Online, Teams, SharePoint), Active Directory (on-prem and Azure AD), and domain services.
• Ensure stability and performance of hybrid AD and collaboration systems through proactive monitoring and incident management.
• Maintain internal and public DNS, DHCP, certificates, and domain name configurations.

2. Identity & Access Management (IDAM)

• Own the implementation and operation of IDAM platforms supporting user lifecycle management, access provisioning, and deprovisioning.
• Design and manage
  SSO, MFA, conditional access
  , and
  privileged access controls (PAM)
  using tools like Azure AD, SailPoint, or Saviynt.
• Ensure proper
  RBAC models, access certifications, and policy enforcement
  across systems.

3. Email & AD Security

• Strengthen security posture of
  email systems
  by configuring and maintaining anti-phishing, DLP, spam filtering, and encryption tools (e.g., Microsoft Defender for Office 365, Mimecast, Proofpoint).
• Implement and maintain
  DMARC, DKIM, SPF
  , and secure mail flow policies.
• Lead
  AD security hardening
  , including Tiered Administration, Kerberos policies, ACL reviews, and delegation best practices.
• Enforce
  least privilege
  ,
  admin account separation
  , and monitoring of high-privilege actions (via SIEM or native auditing tools).

Key Responsibilities:

1. Infrastructure & Operations Management

• Manage daily operations for Microsoft 365 (Exchange Online, Teams, SharePoint), Active Directory (on-prem and Azure AD), and domain services.
• Ensure stability and performance of hybrid AD and collaboration systems through proactive monitoring and incident management.
• Maintain internal and public DNS, DHCP, certificates, and domain name configurations.

2. Identity & Access Management (IDAM)

• Own the implementation and operation of IDAM platforms supporting user lifecycle management, access provisioning, and deprovisioning.
• Design and manage
  SSO, MFA, conditional access
  , and
  privileged access controls (PAM)
  using tools like Azure AD, SailPoint, or Saviynt.
• Ensure proper
  RBAC models, access certifications, and policy enforcement
  across systems.

3. Email & AD Security

• Strengthen security posture of
  email systems
  by configuring and maintaining anti-phishing, DLP, spam filtering, and encryption tools (e.g., Microsoft Defender for Office 365, Mimecast, Proofpoint).
• Implement and maintain
  DMARC, DKIM, SPF
  , and secure mail flow policies.
• Lead
  AD security hardening
  , including Tiered Administration, Kerberos policies, ACL reviews, and delegation best practices.
• Enforce
  least privilege
  ,
  admin account separation
  , and monitoring of high-privilege actions (via SIEM or native auditing tools).
• Partner with SOC and Security teams to respond to identity and email-related threats or incidents.

4. Cloud Integration & Identity Governance

• Administer and secure cloud identity solutions across Azure, Microsoft 365, and third-party SaaS platforms.
• Align hybrid AD and Azure AD with cloud security frameworks and Zero Trust principles.
• Manage B2B/B2C identities, OAuth/SAML integrations, and conditional access policies for external partners.

5. Projects & Transformation

• Lead initiatives such as:
• Email platform migration or consolidation (e.g., from on-prem to M365),
• Deployment of IDAM platforms,
• Secure collaboration tool rollouts,
• Cloud-first identity transformations.
• Define project scope, success metrics, resource plans, and stakeholder engagement strategy.

6. Compliance, Governance & Risk Management

• Define and maintain governance frameworks for collaboration, identity, and directory services.
• Ensure alignment with compliance standards (e.g., GDPR, ISO 27001, HIPAA, SOX).
• Conduct periodic access reviews, admin audits, and mailbox permissions checks.
• Own documentation, runbooks, and policy lifecycle management.

7. Vendor & License Management

• Manage third-party service providers and tools across email security, cloud identity, and collaboration suites.
• Oversee licensing, renewals, and performance reviews.
• Evaluate and onboard new solutions as per evolving enterprise needs.

8. Leadership & People Management

• Lead a team of email, AD, cloud, and IDAM specialists.
• Assign responsibilities, set goals, and promote cross-skilling and upskilling.
• Ensure availability through structured support models, escalation procedures, and documentation.

Educational Qualification
: Degree or appropriate professional qualification

Specific Certification
:

Certification & Trainings on following technology domains:

• Microsoft Certified: Enterprise Administrator Expert
• Microsoft Certified: Identity and Access Administrator Associate
• Azure Administrator / Security Engineer Associate
• Certified Information Systems Security Professional (CISSP) optional but a plus
• ITIL Foundation / Intermediate

• Project Management Certification (PMP / Prince2)

• Experience
  : 12-15 Years of experience

Skill (Functional & Behavioural):

Technical Skills:

• Microsoft 365 administration: Exchange, Teams, SharePoint, Defender for O365
• Hybrid AD and Azure AD, including AD Connect, GPOs, DNS, DHCP
• PowerShell scripting for automation and reporting
• Identity tools: SailPoint, Okta, Saviynt, Azure AD Premium
• Email security protocols: SPF, DKIM, DMARC
• Email filtering & security: Defender, Mimecast, Proofpoint
• AD security best practices and hardening (LAPS, tiering, auditing)
• Cloud identity and app integration (OAuth, SAML)

Soft Skills:

• Strong leadership, communication, and cross-functional collaboration
• High attention to detail, especially around security and compliance
• Problem-solving under pressure and with complex systems
• Strategic thinking with a proactive mindset toward continuous improvement
• Pharma industry experience is an advantage.