Identity & Access Operations Engineer (L2) – Active Directory, LDAP & ADFS
Core
Level 2 operations engineer supporting critical enterprise identity infrastructure including Active Directory, LDAP, and ADFS to ensure secure authentication and seamless single sign-on (SSO) across global applications.
Role type
Senior IC Identity & Access Operations Engineer (L2)
Builds
Secure authentication, reliable directory services, and seamless SSO experiences for enterprise applications
Domain
IT Operations / Identity & Access Management (IAM)
Required skills
Active Directory administration, LDAP directory services, ADFS federation, Group Policy management, DNS troubleshooting, Kerberos/NTLM/SSL/TLS protocols, PowerShell scripting, ITIL processes, ServiceNow/ITSM platforms, incident management, root-cause analysis
Preferred skills
Microsoft Entra ID (Azure AD), Entra Connect, hybrid identity environments, SAML/OAuth 2.0/OpenID Connect, Privileged Access Management (PAM), Multi-Factor Authentication (MFA), Conditional Access, Active Directory auditing, ServiceNow workflows
Technologies
Active Directory, LDAP, ADFS, Microsoft Entra ID, Entra Connect, ServiceNow, PowerShell, DNS, Kerberos, NTLM, SSL/TLS, SAML, OAuth 2.0, OpenID Connect
Responsibilities
Provide Level 2 support for Active Directory incidents, alerts, and service requests; Administer user accounts, security groups, and access permissions; Troubleshoot authentication failures, account lockouts, and Group Policy issues; Support Active Directory replication and domain controller health checks; Manage LDAP directory service incidents and connectivity issues; Provide Level 2 support for ADFS authentication and federation incidents; Monitor directory service availability and respond to alerts; Execute approved changes and follow access management procedures; Coordinate with L1/L3 support and cross-functional teams across regions
Seniority
Mid-level, hands-on IC
