Systems Administrator, Access

Assistant Manager (L4) – Systems Administrator, Access & Identity Management

Work you'll do

This role requires someone who understands administration of user access and security profiles across applications and systems in a corporate environment, security policies, and audit controls. Administrators are also responsible for reporting and investigating exceptions, testing and maintaining access controls, and supporting the business and IT staff for security related identity and access issues. May serve internal or external clients.

Responsibilities:

• Manage and maintain on-premises Active Directory environments, including user and group account provisioning, OU structuring, and the creation and maintenance of Group Policy Objects (GPOs).
• Utilize Thycotic Secret Server to administer secure management of privileged credentials and secrets throughout infrastructure components.
• Serve as an Azure Administrator, responsible for provisioning users and groups, and assigning licenses to ensure seamless integration with cloud solutions.
• Conduct regular Active Directory health checks, proactively identify and troubleshoot replication and performance issues.
• Design, implement, and enforce password policies and account lockout mechanisms in line with organizational security best practices.
• Create, modify, and manage user accounts in Active Directory, resolving account lockout issues and supporting user lifecycle operations.
• Develop and deploy PowerShell scripts to automate routine AD tasks, driving process efficiency and minimizing manual errors.
• Monitor and audit Active Directory changes using both native tools and third-party solutions to maintain compliance with internal policies.
• Provision, modify, and manage Standard & Elevated user accounts, security groups, and access permissions for users across the environment.
• Oversee VPN access provisioning in support of secure remote user connectivity.
• Act as a US Domain Admin for MIM (Microsoft Identity Manager), managing bulk account creation/modification, distribution list (DL) membership updates, email generation and mapping, and test account lifecycle.
• Administer communication resources, including Skype and fax number provisioning for organizational users.
• Control access by managing user accounts and assigning appropriate share & security permissions across corporate resources.
• Create and maintain Distribution Lists, Shared Mailboxes, troubleshooting user-specific issues for consistent messaging support.
• Establish and oversee Domain Service Accounts, Application Accounts, BOT Accounts, Group Managed Service Accounts (GMSA), Security Groups, and facilitate administrative access management for multiple internal domains.
• Use PowerShell to streamline permissions and privilege updates for bulk user, bot, service, GMSA accounts, DLs, and shared mailboxes.
• Provide advanced troubleshooting for Outlook, Office 365, AD accounts, groups, and mailboxes, ensuring optimal end-user experience.
• Deliver remote support for technical issues, responding flexibly to operational demands and urgent service needs.
• Own incident and service request resolution within Service Desk SLAs, ensuring prompt and accurate handling of user access issues.
• Support the review and optimization of processes, policies, and standards related to access and provisioning principles.
• Represent the Access Services Team/AD Administration Team in collaborative projects, acting as a subject matter expert.
• Analyze and resolve technology and end-user incidents during normal business hours and on-call rotations; partner with application teams, vendors, and engineers to drive issue resolution.
• Review and approve access requests for corporate systems/applications, verifying accuracy, completeness, and compliance; communicate access status to stakeholders in a timely manner.
• Develop familiarity with a range of technologies, including web-based applications, VPN, and Active Directory.
• Perform periodic audits of user accounts and permissions, providing comprehensive reports for management and data owners and ensuring compliance.
• Ensure prompt removal or modification of user access following termination, emergency, or change request procedures.
• Maintain detailed audit trails and procedural documentation for all access services and auditing activities; organize records for efficient retrieval and compliance.
• Ensure significant incident resolution is captured in process documentation and knowledge is disseminated to the team via training and communications.
• Collaborate with cross-functional tech teams (Messaging, Applications, Information Security, End User Services, Directory Services, Call Centers) to resolve widespread or recurring technology issues.
• Participate in rotating on-call schedules covering hours 7:00 AM CST to 7:00 PM CST, and provide after-hours support as required for project needs and emergencies.
• Apply advanced troubleshooting skills to resolve user access issues in multi-domain environments.
• Analyze system event logs to diagnose performance issues and support advanced troubleshooting operations.
• Allocate workload among staff based on priority, urgency, and SLA requirements, ensuring service continuity.
• Identify process gaps, recommend and drive process improvements for efficiency and compliance.
• Build, maintain, and update Standard Operating Procedure (SoP) documents to ensure clear, consistent, and compliant operations.

Required Technical Skills:

• Experience with Enterprise directory services (Active Directory)
• Familiar with running PowerShell scripts.
• Intermediate MS Office/Outlook
• Familiar with SAP, Hana, and other applications as required.
• Experience with supporting access management from offshore
• Experience with remote server administration from offshore.
• Microsoft Identity manager (MIM) administration.
• Experience with Azure AD is preferred.

Education:

• Bachelor's or master's degree in computer science, Information Technology, or a related field.

Experience:

• 7+ years of experience relevant experience
• Necessary Prior Experience: Minimum 6 years of experience or training in computer security, auditing of user accounts, elevated accounts and access management. Require a basic understanding of access administration and the ability to pick up other technologies and their related security procedures quickly.
• Required Specific Skills
• Ability to analyze user request forms to determine the appropriateness of the request.
• Proven teamwork qualities with emphasis on customer service, team building and strength-based teams.
• Strong organizational skills and ability to multitask under pressure and project deadlines.
• Ability to troubleshoot user access problems and determine appropriate corrective action.
• Ability to view incidents and problems from customer perspective and taking initiative to represent the customer when working with other teams toward a resolution.
• Proven performance in monitoring performance against defined Service Level Agreements with internal customers, internal departments and external vendors. Dedicated to increasing performance levels.
• Demonstrated awareness of Information Technology trends, directions and emerging technologies including systems/technologies administration and policies.
• Excellent presentation and communications skills – both oral and written.
• Commitment to enforcement of administrative procedures and policies including policy change control.
• Must be able to write and review process documentation. Customer Service oriented to provide a positive end user experience.
• Strong interpersonal and written communications skills, strong work ethic, and strong problem-solving skills are required.

Certification:

• MS 900, MS 102 is preferred.
• MCSE Certification (Server Infrastructure \ SharePoint \ Messaging).
• AZ-900/AZ-800 is preferred.
• ITIL Intermediate (Service Operations, Service Transition & CSI)

Location: Hyderabad

Shift Timing: Shift between 9:00 AM to 11:00 PM IST

The team

At Deloitte, we're all about collaboration. And nowhere is this more apparent than among our 2,000-strong internal services team. With our combined specialist skills, we provide all the essential support and advice our client-facing colleagues need, right across the firm. This enables them to focus all of their efforts on delivering the best service possible to their clients. Covering seven distinct areas; Human Resources, Clients & Industries, Finance & Legal, Practice Support Services, Quality & Risk Services, IT Services, and Workplace Services & Real Estate, together we live, breathe and deliver the Deloitte experience.

How you'll grow

At Deloitte, we've invested a great deal to create a rich environment in which our professionals can grow. We want all our people to develop in their own way, playing to their own strengths as they hone their leadership skills. And, as a part of our efforts, we provide our professionals with a variety of learning and networking opportunities—including exposure to leaders, sponsors, coaches, and challenging assignments—to help accelerate their careers along the way. No two people learn in exactly the same way. So, we provide a range of resources including live classrooms, team- based learning, and eLearning. DU: The Leadership Center in India, our state-of-the-art, world-class learning Center in the Hyderabad offices is an extension of the Deloitte University (DU) in Westlake, Texas, and represents a tangible symbol of our commitment to our people's growth and development. Explore DU: The Leadership Center in India

Benefits

At Deloitte, we know that great people make a great organization. We value our people and offer employees a broad range of benefits. Learn more about what working at Deloitte can mean for you.

Deloitte's culture

Our positive and supportive culture encourages our people to do their best work every day. We celebrate individuals by recognizing their uniqueness and offering them the flexibility to make daily choices that can help them to be healthy, centered, confident, and aware. We offer well-being programs and are continuously looking for new ways to maintain a culture that is inclusive, invites authenticity, leverages our diversity, and where our people excel and lead healthy, happy lives. Learn more about Life at Deloitte.

Corporate citizenship

Deloitte is led by a purpose: to make an impact that matters. This purpose defines who we are and extends to relationships with our clients, our people and our communities. We believe that business has the power to inspire and transform. We focus on education, giving, skill-based volunteerism, and leadership to help drive positive social impact in our communities. Learn more about Deloitte's impact on the world.

Our purpose

Deloitte's purpose is to make an impact that matters for our people, clients, and communities. At Deloitte, purpose is synonymous with how we work every day. It defines who we are. Our purpose comes through in our work with clients that enables impact and value in their organizations, as well as through our own investments, commitments, and actions across areas that help drive positive outcomes for our communities.

Our people and culture

Our inclusive culture empowers our people to be who they are, contribute their unique perspectives, and make a difference individually and collectively. It enables us to leverage different ideas and perspectives, and bring more creativity and innovation to help solve our clients' most complex challenges. This makes Deloitte one of the most rewarding places to work.

Professional development

At Deloitte, professionals have the opportunity to work with some of the best and discover what works best for them. Here, we prioritize professional growth, offering diverse learning and networking opportunities to help accelerate careers and enhance leadership skills. Our state-of-the-art DU: The Leadership Center in India, located in Hyderabad, represents a tangible symbol of our commitment to the holistic growth and development of our people. Explore DU: The Leadership Center in India.

Benefits to help you thrive

At Deloitte, we know that great people make a great organization. Our comprehensive rewards program helps us deliver a distinctly Deloitte experience that helps that empowers our professionals to thrive mentally, physically, and financially—and live their purpose. To support our professionals and their loved ones, we offer a broad range of benefits. Eligibility requirements may be based on role, tenure, type of employment and/ or other criteria. Learn more about what working at Deloitte can mean for you.

Recruiting tips

From developing a stand out resume to putting your best foot forward in the interview, we want you to feel prepared and confident as you explore opportunities at Deloitte. Check out recruiting tips from Deloitte recruiters.

Requisition code: 317706