IAM / Active Directory (AD) L3 Lead

About the role

We are looking for an experienced IAM / Active Directory L3 Lead to provide technical leadership and operational excellence for our Identity and Access Management services. The role will oversee enterprise identity infrastructure, drive automation, ensure security compliance, and support cloud identity platforms.

Key responsibilities

• Lead L3 support and administration of enterprise IAM services, including provisioning, deprovisioning, RBAC and access governance.
• Design, implement and maintain AD forests, domains, trusts, sites, replication topology and hybrid identity environments.
• Perform health checks, capacity planning, performance tuning and incident/problem management for AD and Azure AD.
• Implement Zero Trust principles, MFA, Conditional Access, Identity Protection and SSO solutions.
• Manage privileged account controls, PAM/PIM solutions and conduct security reviews and audit support.
• Develop automation using PowerShell and scripting tools, create runbooks and drive continuous improvement.
• Lead, mentor and coordinate IAM/AD engineers and collaborate with security, cloud, infrastructure and business stakeholders.

Required profile

• Strong background in Microsoft Active Directory and Azure AD (Microsoft Entra ID) administration.
• Proven experience leading L3 support teams and handling major incidents.
• Deep knowledge of identity governance, privileged access management and Zero Trust security.
• Excellent analytical skills for root‑cause analysis and process automation.
• Ability to work with global teams and communicate technical concepts to non‑technical stakeholders.

Required skills

• Microsoft Active Directory
• Azure AD / Microsoft Entra ID
• AD Federation Services (ADFS)
• Azure AD Connect
• DNS, DHCP, Group Policy (GPO)
• PowerShell and scripting
• MFA, Conditional Access, Identity Protection, SSO
• Privileged Access Management (PAM) / Privileged Identity Management (PIM)
• Identity Governance and RBAC