Active Directory & Microsoft Entra ID Engineer

AD / Entra ID Engineer – JDRole: Active Directory & Microsoft Entra ID EngineerLevel: L3 / Senior EngineerKey ResponsibilitiesManage and maintain on-premises Active Directory and Microsoft Entra ID environments.Administer Domain Controllers and perform DC migrations with minimal service disruption.Manage Group Policy (GPO) and troubleshoot AD authentication issues.Manage users, groups, devices and identity lifecycle.Implement and support hybrid identity / Entra Connect environments.Manage MFA, Conditional Access, RBAC and Privileged Identity Management (PIM).Support application integration and SSO using SAML, OAuth 2.0 and OpenID Connect.Implement and manage Certificate Services / PKI.Conduct AD RAP / health assessments and prepare remediation plans.Identify and remediate vulnerabilities within AD/Entra ID.Troubleshoot authentication, authorization and sign-in issues.Monitor sign-in/audit logs and support identity-related incident investigation.Support migration initiatives from on-prem AD toward Entra ID / hybrid identity.Develop SOPs, runbooks, technical documentation and operational reports.Coordinate with Security, Infrastructure, Application and DWP teams.