Technical Lead

Job description

Job Title: Microsoft Entra Identity & Provisioning Consultant Job Summary We are seeking an experienced Microsoft Entra Identity & Provisioning Consultant to lead the design, implementation, and optimization of enterprise identity lifecycle management solutions. The ideal candidate will possess deep expertise in Microsoft Entra ID (formerly Azure AD) , Workday-to-Entra provisioning , Active Directory synchronization , and identity governance processes . This role requires a hands-on technical architect who can design and implement end-to-end identity provisioning architectures across complex, multi-domain enterprise environments. The candidate will be responsible for configuring automated user lifecycle management, designing synchronization strategies, troubleshooting provisioning issues, and ensuring secure, scalable identity management solutions that align with organizational security and compliance requirements. Key Responsibilities Identity Provisioning & Lifecycle Management Design, configure, and support Microsoft Entra Provisioning Services for automated user lifecycle management. Implement and maintain Workday-to-Microsoft Entra integration using Enterprise Applications and provisioning connectors. Configure provisioning scopes, attribute mappings, transformation expressions, and synchronization rules. Analyze and work with Workday GetWorker XML payloads, including XPath expressions and attribute transformations. Ensure accurate onboarding, updates, transfers, and offboarding of user identities across connected systems. Microsoft Entra & Directory Services Architecture Architect and implement enterprise-grade identity management solutions using Microsoft Entra ID. Define and manage identity synchronization strategies between on-premises Active Directory and Microsoft Entra. Configure and optimize Microsoft Entra Connect across complex enterprise environments. Design high-availability and scalable identity architectures supporting multiple business units, regions, and domains. Active Directory & Synchronization Management Configure synchronization between Local Active Directory and Microsoft Entra across multiple domain controllers and servers. Develop and maintain advanced synchronization rules, attribute mappings, and transformation logic. Manage and troubleshoot synchronization issues, duplicate identities, and provisioning failures. Work with AD organizational structures including: Forests Trees Root Domains Child Domains Organizational Units (OUs) Multi-Domain and Regional Provisioning Strategy Design identity routing strategies for organizations operating across multiple countries and regions. Leverage parentDistinguishedName and directory hierarchy structures to direct provisioning traffic appropriately. Configure synchronization and provisioning workflows across geographically distributed domain environments. Ensure consistent identity governance and security policies across multiple Active Directory domains. Identity Governance & Access Management Support identity governance initiatives, role-based access control (RBAC), and access lifecycle processes. Collaborate with security, infrastructure, HR, and application teams to ensure secure identity management practices. Contribute to access review, compliance, audit, and governance programs. Recommend best practices for identity security, automation, and provisioning governance. Troubleshooting & Optimization Diagnose and resolve provisioning, synchronization, and integration issues. Perform root-cause analysis for identity lifecycle management failures. Optimize synchronization performance and provisioning processes. Develop technical documentation, architecture diagrams, and operational procedures. Required Skills & Qualifications Technical Skills Microsoft Entra ID Strong expertise in Microsoft Entra ID administration and architecture. Experience configuring and managing Entra Enterprise Applications. Deep understanding of Entra Provisioning Service and lifecycle management. Workday Integration Hands-on experience integrating Workday with Microsoft Entra. Experience working with: Workday GetWorker API XML payloads XPath expressions Attribute mapping and transformations Familiarity with HR-driven identity lifecycle workflows. Microsoft Entra Connect Strong experience configuring and managing Microsoft Entra Connect. Expertise in identity synchronization between on-premises Active Directory and Microsoft Entra. Experience with: Synchronization rules Metaverse concepts Attribute flows Filtering and scoping configurations Active Directory Deep understanding of: Active Directory Domain Services (AD DS) Forests and trust relationships Root and child domains Organizational Units Group Policies Distinguished Names and LDAP structures Identity & Access Management (IAM) Strong understanding of: Identity lifecycle management Joiner-Mover-Leaver processes Role Skill Requirements Experience with API-driven provisioning and identity integrations. Experience integrating SaaS applications with Microsoft Entra. Knowledge of SCIM-based provisioning. Experience with Microsoft Identity Governance capabilities. Familiarity with PowerShell automation for identity management. Understanding of authentication protocols: SAML OAuth 2.0 OpenID Connect WS-Federation Experience working within enterprise security and compliance frameworks. Exposure to Privileged Identity Management (PIM) and Conditional Access configurations. Experience Requirements 8+ years of experience in Identity & Access Management (IAM). 5+ years of hands-on experience with Microsoft Entra ID / Azure AD. Proven experience implementing Workday-to-Entra provisioning solutions. Experience managing large-scale Active Directory and hybrid identity environments. Demonstrated experience as a Technical Architect or Lead Engineer in Identity Management projects. Other Requirements Preferred Skills Experience with API-driven provisioning and identity integrations. Experience integrating SaaS applications with Microsoft Entra. Knowledge of SCIM-based provisioning. Experience with Microsoft Identity Governance capabilities. Familiarity with PowerShell automation for identity management. Understanding of authentication protocols: SAML OAuth 2.0 OpenID Connect WS-Federation Experience working within enterprise security and compliance frameworks. Exposure to Privileged Identity Management (PIM) and Conditional Access configurations. Experience Requirements 8+ years of experience in Identity & Access Management (IAM). 5+ years of hands-on experience with Microsoft Entra ID / Azure AD. Proven experience implementing Workday-to-Entra provisioning solutions. Experience managing large-scale Active Directory and hybrid identity environments. Demonstrated experience as a Technical Architect or Lead Engineer in Identity Management projects. Apply now Information at a Glance Why HCLTech? At HCLTech, you'll supercharge your potential. You'll find your career. And you'll find your spark. All at a place that knows that helping its customers stay on top starts by putting its people first. HCLTech is a global technology company, home to more than 223,000 people across 60 countries, delivering industry-leading capabilities centered around digital, engineering, cloud and AI, powered by a broad portfolio of technology services and products. We work with clients across all major verticals, providing industry solutions for Financial Services, Manufacturing, Life Sciences and Healthcare, Technology and Services, Telecom and Media, Retail and CPG, and Public Services. Consolidated revenues as of 12 months ending June 2026 totaled $14.8 billion. Disclaimer Privacy Statement Terms of use Sitemap Raise a Grievance We use cookies on our site. Please read more about cookies policy here. Opens in a new tab. Opens in a new tab. Opens in a new tab. Opens in a new tab. Opens in a new tab. Opens in a new tab. Copyright © 2026 HCL Technologies Limited Cookie Consent Manager When you vi