Staff Engineer, Microsoft Active Directory

👋🏼 We're Nagarro. We are a Digital Product Engineering company that is scaling in a big way! We build products, services, and experiences that inspire, excite, and delight. We work at scale across all devices and digital mediums, and our people exist everywhere in the world (18500+ experts across 40 countries, to be exact). Our work culture is dynamic and non-hierarchical. We're looking for great new colleagues. That's where you come in! REQUIREMENTS: • Total experience: 5.5+ years. • Strong experience in Microsoft Active Directory administration across enterprise, multi-site environments. • Must-have expertise in Microsoft Entra ID (Azure AD) administration and Hybrid Identity (Entra Connect/AD Connect). • Strong experience in managing Domain Controllers, AD Replication, FSMO Roles, Schema, Trusts, NTDS, DFSR, and AD Sites & Services. • Hands-on experience with Windows Server (2012–2022+), DNS, DHCP, IIS, and Group Policy (GPO) administration. • Experience designing and implementing Conditional Access, SSO, MFA, RBAC, PIM, and Identity Lifecycle Management. • Strong understanding of Microsoft 365 identity services, Exchange Online, and Hybrid Exchange administration. • Experience managing mail flow, connectors, SPF, DKIM, DMARC, licensing, and directory synchronization. • Hands-on experience troubleshooting OAuth, SAML, Kerberos, and NTLM authentication issues. • Strong scripting experience using PowerShell and automation with Microsoft Graph API. • Experience with Active Directory migrations, upgrades, consolidations, backup, disaster recovery, and high availability. • Good knowledge of identity security, IAM best practices, compliance, and enterprise authentication. • Experience using Active Directory administration and migration tools such as Quest is preferred. • Strong analytical, troubleshooting, communication, and stakeholder management skills. RESPONSIBILITIES: • Design, administer, and optimize enterprise Microsoft Active Directory and Microsoft Entra ID