Principal Engineer
nagarro1
Staff Engineer, Microsoft Active Directory
nagarro1· Engineering
About this role
Company Description
👋🏼We're Nagarro.
We are a Digital Product Engineering company that is scaling in a big way! We build products, services, and experiences that inspire, excite, and delight. We work at scale across all devices and digital mediums, and our people exist everywhere in the world (18500+ experts across 40 countries, to be exact). Our work culture is dynamic and non-hierarchical. We're looking for great new colleagues. That's where you come in!
Job Description
REQUIREMENTS:
• Total experience: 5.5+ years.
• Strong experience in Microsoft Active Directory administration across enterprise, multi-site environments.
• Must-have expertise in Microsoft Entra ID (Azure AD) administration and Hybrid Identity (Entra Connect/AD Connect).
• Strong experience in managing Domain Controllers, AD Replication, FSMO Roles, Schema, Trusts, NTDS, DFSR, and AD Sites & Services.
• Hands-on experience with Windows Server (2012–2022+), DNS, DHCP, IIS, and Group Policy (GPO) administration.
• Experience designing and implementing Conditional Access, SSO, MFA, RBAC, PIM, and Identity Lifecycle Management.
• Strong understanding of Microsoft 365 identity services, Exchange Online, and Hybrid Exchange administration.
• Experience managing mail flow, connectors, SPF, DKIM, DMARC, licensing, and directory synchronization.
• Hands-on experience troubleshooting OAuth, SAML, Kerberos, and NTLM authentication issues.
• Strong scripting experience using PowerShell and automation with Microsoft Graph API.
• Experience with Active Directory migrations, upgrades, consolidations, backup, disaster recovery, and high availability.
• Good knowledge of identity security, IAM best practices, compliance, and enterprise authentication.
• Experience using Active Directory administration and migration tools such as Quest is preferred.
• Strong analytical, troubleshooting, communication, and stakeholder management skills.
RESPONSIBILITIES:
• Design, administer, and optimize enterprise Microsoft Active Directory and Microsoft Entra ID environments.
• Manage Domain Controllers, AD replication, FSMO roles, trusts, schema, NTDS, DFSR, and AD Sites & Services.
• Implement, maintain, and secure Group Policy (GPO) frameworks across enterprise environments.
• Administer Windows Server, DNS, DHCP, IIS, and core identity infrastructure services.
• Design and enforce Conditional Access, MFA, SSO, RBAC, PIM, and identity governance policies.
• Manage Hybrid Identity using Microsoft Entra Connect (Azure AD Connect) and ensure seamless directory synchronization.
• Administer Microsoft 365 identity services, Exchange Online, and Hybrid Exchange environments.
• Manage mail flow, connectors, authentication protocols, and compliance-related identity configurations.
• Develop and maintain PowerShell automation scripts and leverage Microsoft Graph API for administration and reporting.
• Lead Active Directory upgrades, migrations, consolidations, backup, recovery, and disaster recovery initiatives.
• Troubleshoot and resolve complex authentication issues involving OAuth, SAML, Kerberos, and NTLM.
• Perform root cause analysis for critical production incidents and implement preventive solutions.
• Collaborate with cloud, infrastructure, and security teams to strengthen enterprise identity services.
• Monitor identity security posture, ensure compliance, and continuously improve identity management processes and automation.
Qualifications
Bachelor’s or master’s degree in computer science, Information Technology, or a related field
Additional Information
Videos To Watch
Frequently Asked Questions
Is the salary disclosed for the Staff Engineer, Microsoft Active Directory position at nagarro1?
The salary for this Staff Engineer, Microsoft Active Directory role at nagarro1 is not publicly listed. Click "Apply Now" to learn more about the compensation package on their official careers page.
Is the Staff Engineer, Microsoft Active Directory job at nagarro1 remote?
Yes, this Staff Engineer, Microsoft Active Directory position at nagarro1 is remote, with team members based in in, Remote, Remote, , India. You can work from home or anywhere in the supported regions.
Is the Staff Engineer, Microsoft Active Directory role at nagarro1 full-time or part-time?
This is listed as a Full time position. It is posted as a Staff Engineer, Microsoft Active Directory role in the Engineering department at nagarro1.
Which team or department does the Staff Engineer, Microsoft Active Directory at nagarro1 belong to?
This Staff Engineer, Microsoft Active Directory position is part of the Engineering department at nagarro1. See the full job description for more information about the team structure and responsibilities.
How do I apply for the Staff Engineer, Microsoft Active Directory position at nagarro1?
Click the "Apply Now" button on this page. You will be redirected to nagarro1's official application portal hosted on smartrecruiters where you can submit your application directly.
When was the Staff Engineer, Microsoft Active Directory job at nagarro1 posted?
This Staff Engineer, Microsoft Active Directory position at nagarro1 was posted on Aug 5, 2026. Apply as soon as possible — early applications are often reviewed first.
Staff Engineer, Microsoft Active Directory
nagarro1
You'll be redirected to nagarro1's official application page on SmartRecruiters.