Sr Technical Lead (Support & Operations)

Job description

The L2 Active Directory Engineer will be responsible for supporting and administering enterprise Identity and Access Management (IAM) services, Active Directory, Microsoft Entra ID (Azure AD), user provisioning, access management, authentication services, and directory infrastructure operations. The role will serve as the escalation point from Service Desk and Deskside teams for identity-related incidents, service requests, and operational activities while ensuring compliance with security standards, audit requirements, and operational service levels. As defined within the SOW, the engineer will support account management, password management, access provisioning, and directory services operations across the enterprise environment. Key Responsibilities Active Directory Administration • Administer and support Microsoft Active Directory infrastructure. • Manage user, group, computer, and organizational unit (OU) administration. • Perform user lifecycle management (Joiner, Mover, Leaver processes). • Create and maintain Group Policies (GPOs). • Manage Active Directory replication and directory health monitoring. • Perform account audits and directory clean-up activities. • Support troubleshooting of authentication and directory-related issues. Microsoft Entra ID (Azure AD) Administration • Manage Microsoft Entra ID tenant administration. • Support identity synchronization and hybrid identity operations. • Administer Conditional Access Policies. • Manage Azure AD Connect synchronization health. • Support Self-Service Password Reset (SSPR). • Troubleshoot authentication and synchronization failures. • Support identity governance initiatives. Skill Requirements Required Technical Skills Primary Skills • Microsoft Active Directory • Microsoft Entra ID (Azure AD) • Azure AD Connect • Group Policy Administration • LDAP & Authentication Services • DNS & DHCP Fundamentals • Identity & Access Management (IAM) • User Lifecycle Management (JML) • Microsoft Windows Server Administration • Multi-Factor Authentication (MFA) Qualifications • Bachelor's Degree in Computer Science, Information Technology, or related discipline. • Microsoft Identity and Access related certifications preferred. • Azure Administrator or Identity-related certifications preferred. • 5+ years of experience supporting enterprise Active Directory environments. Other Requirements Identity & Access Management • Provision, modify, and deprovision user access. • Manage role-based access controls (RBAC). • Handle access requests and approvals in accordance with organization policies. • Manage privileged account administration. • Support access certification and review exercises. • Ensure compliance with segregation of duties requirements. Incident & Service Request Management • Provide L2 support for directory and identity-related incidents. • Troubleshoot account lockouts, authentication failures, access issues, and synchronization problems. • Resolve complex user access issues escalated from Service Desk. • Perform root cause analysis for recurring IAM incidents. • Coordinate with infrastructure, security, and application teams for issue resolution. • Support major incident management when identity services are impacted. Security & Compliance • Support security monitoring and remediation activities. • Maintain compliance with audit and regulatory requirements. • Participate in access reviews and certification exercises. • Support vulnerability remediation and security hardening activities. • Maintain compliance with corporate security standards and governance policies. Automation & Continuous Improvement • Develop PowerShell scripts for automation of repetitive tasks. • Automate user provisioning and reporting processes. • Improve operational efficiency through workflow optimization. • Identify opportunities to enhance identity management services. • Support self-service and automation initiatives. Reporting & Documentation • Maintain accurate documentation, SOPs, and knowledge articles. • Produce operational and compliance reports. • Update runbooks and support documentation regularly. • Participate in governance reviews and service improvement initiatives. Apply now Information at a Glance Why HCLTech? At HCLTech, you'll supercharge your potential. You'll find your career. And you'll find your spark. All at a place that knows that helping its customers stay on top starts by putting its people first. HCLTech is a global technology company, home to more than 223,000 people across 60 countries, delivering industry-leading capabilities centered around digital, engineering, cloud and AI, powered by a broad portfolio of technology services and products. We work with clients across all major verticals, providing industry solutions for Financial Services, Manufacturing, Life Sciences and Healthcare, Technology and Services, Telecom and Media, Retail and CPG, and Public Services. Consolidated revenues as of 12 months ending June 2026 totaled $14.8 billion. Disclaimer Privacy Statement Terms of use Sitemap Raise a Grievance We use cookies on our site. Please read more about cookies policy here. Opens in a new tab. Opens in a new tab. Opens in a new tab. Opens in a new tab. Opens in a new tab. Opens in a new tab. Copyright © 2026 HCL Technologies Limited Cookie Consent Manager When you visit any website, it may store or retrieve information on your browser, mostly in the form of cookies. Because we respect your right to privacy, you can choose not to allow some types of cookies. However, blocking some types of cookies may impact your experience of the site and the services we are able to offer. Required Cookies These cookies are required to use this website and can't be turned off. Required Cookies Required Cookies Provider Description Enabled SAP as service provider We use the following session cookies, which are all required to enable the website to function: "route" is used for session stickiness "careerSiteCompanyId" is used to send the request to the correct data center "JSESSIONID" is placed on the visitor's device during the session so the server can identify the visitor "Load balancer cookie" (actual cookie name may vary) prevents a visitor from bouncing from one instance to another Cookies from provider SAPasserviceprovider are required and cannot be turned off Functional Cookies These cookies provide a better customer experience on this site, such as by remembering your login details, optimizing video performance, or providing us with information about how our site is used. You may freely choose to accept or decline these cookies at any time. Note that certain functionalities that these third-parties make available may be impacted if you do not accept these cookies. Consent to all Functional Cookies Functional Cookies Provider Description Enabled Vimeo Vimeo is a video hosting, sharing, and services platform focused on the delivery of video. Opting out of Vimeo cookies will disable your ability to watch or interact with Vimeo videos. Cookie Policy Privacy Policy Terms and Conditions Consent to cookies from provider Vimeo YouTube YouTube is a video-sharing service where users can create their own profile, upload videos, watch, like, and comment on videos. Opting out of YouTube cookies will disable your ability to watch or interact with YouTube videos. Cookie Policy Privacy Policy Terms and Conditions Consent to cookies from provider YouTube Advertising Cookies These cookies serve ads that are relevant to your interests. You may freely choose to accept or decline these cookies at any time. Note that certain functionality that these third parties make available may be impacted if you do not accept these cookies. Consent to all Advertising Cookies Advertising Cookies Provider Description Enabled Google Analytics Google Analytics is a web analytics service offered by Google that tracks and reports website traffic. Cookie Information Privacy Policy Terms and Conditions Consent to cookies from provide