IT Solutions Eng.-Microsoft Entra ID & Active Directory Engineer

Schaeffler is a dynamic global technology company and its success has been a result of its entrepreneurial spirit and long history of private ownership. Does that sound interesting to you? As a partner to all of the major automobile manufacturers, as well as key players in the aerospace and industrial sectors, we offer you many development opportunities.

Your Key Responsibilities

Job Description

We are looking for a hands-on IT Solution Engineer with deep expertise across Microsoft Entra ID and on-premises Active Directory to design, implement, and continuously optimize identity and access management solutions in hybrid enterprise environments.This role focuses on tenant and forest governance, tiered administration and privileged access, application and authentication lifecycle management, and modern SSO architectures — enabling secure, scalable, and automated identity platforms for our organization and customers.

Key Responsibilities:

- Design and operate hybrid identity architectures spanning Entra ID and on-premises AD DS.

- Design and enforce a tiered administration model (Tier 0/1/2), including PAWs, clean-source principles, and control-plane boundaries.

- Manage and optimize AD forests and domains: trusts, replication, sites and services, DNS, Group Policy, and delegation.

- Manage and optimize Entra ID tenants, including administrative units, RBAC, and security boundaries.

- Design privileged access concepts using Entra PIM, tier-0 protection, and Domain Controller hardening.

- Operate hybrid sync and authentication via Entra Connect / Cloud Sync, including migration to cloud-native models.

- Design and maintain Entra App Registrations and Enterprise Applications across their lifecycle.

- Implement SSO using OAuth, OpenID Connect, SAML, and Kerberos/NTLM where needed.

- Define authentication and authorization flows, including Conditional Access and Identity Protection.

- Automate AD and Entra ID via Infrastructure as Code, APIs, and scripting (Microsoft Graph, PowerShell, Terraform).

- Drive security hardening: attack-surface reduction, legacy auth decommissioning, and identity-attack defense.

- Establish automated testing, monitoring, and compliance checks across both platforms.

- Build a monitoring and governance framework, including tier-model compliance.

- Document architectures and processes, and train internal teams on identity, tiering, and DevOps topics.

- Act as a technical advisor to internal stakeholders and customers on IAM topics.

Your Qualifications

Qualification

- Fluent English is mandatory.

- Academic degree in Computer Science, Information Technology, or equivalent practical experience.

- Several years of hands-on experience with both Entra ID (Azure AD) and on-premises AD in enterprise environments.

- Strong expertise in Entra ID tenant management , app registrations, enterprise apps, and SSO integrations.

- Demonstrable experience designing tiered administration models (Tier 0/1/2) and privileged access management.

- Solid AD DS internals: forests, domains, trusts, replication, Group Policy, DNS, and delegation.

- Practical experience with Microsoft Graph API , automation, and scripting.

- Practical experience with hybrid identity (Entra Connect / Cloud Sync) and cloud migration.

- Solid knowledge of Conditional Access , Identity Protection, and Entra ID security best practices.

- Experience managing and optimizing Azure and Microsoft 365 identity-related services .

- Strong analytical skills, structured working style, and a security-first mindset.

- Ability to communicate complex identity concepts clearly to technical and non-technical audiences.

As a global company with employees around the world, it is important to us that we treat each other with respect and value all ideas and perspectives. By appreciating our differences, we inspire creativity and drive innovation. In this way, we contribute to sustainable value creation for our stakeholders and society as a whole. Together, we advance how the world moves.

Exciting assignments and outstanding development opportunities await you because we impact the future with innovation. We look forward to your application.

www.schaeffler.com/careers

Your Contact

SCHAEFFLER GLOBAL SERVICES INDIA PVT LTD

Rimsha Shaikh

+91 20 6819 8407

For technical questions, please contact this email address: [email protected]

Keywords: Experienced; Engineer; Full-Time ; Unlimited ; Digitalization & Information Technology;