We are seeking a seasoned Security Analysis Senior Specialist to manage and support our On-Premises Active Directory (AD), Active Directory Certificate Services (AD CS), and Certificate Management infrastructure. This role is crucial for maintaining AD services, overseeing the certificate lifecycle, administering PKI components, and ensuring the security and availability of our identity and certificate systems. The ideal candidate possesses robust expertise in Active Directory Administration, PKI/Certificate Management, Windows Server infrastructure, DNS, Group Policy, and IT Service Management.

This position is based in Noida, Uttar Pradesh, India, and is a full-time opportunity within a hybrid work model.

Key responsibilities include administering and maintaining the On-Premises Active Directory infrastructure, managing user accounts, groups, and organizational units, and supporting Domain Controllers. You will administer Group Policy Objects (GPOs), manage AD replication, DNS integration, and authentication services, while also troubleshooting AD, DNS, and Kerberos issues. Furthermore, you will manage Microsoft Active Directory Certificate Services (AD CS), administer the enterprise Public Key Infrastructure (PKI), and manage Certificate Authorities (CA).

This role involves end-to-end certificate lifecycle management, including issuance, renewal, revocation, replacement, and expiry management. You will also create, modify, and maintain Certificate Authority (CA) templates and ensure compliance with PKI standards. Remediation of vulnerabilities on Domain Controllers, Azure AD/Entra ID Connect Servers, DNS Servers, and Certificate Servers is a critical aspect, alongside performing AD and PKI security hardening activities and supporting security audits.

You will manage Incident, Change Request (CR), Service Request, and Problem Management activities, process operational alerts within SLA targets, and conduct root cause analysis. Providing monitoring and operational support for AD and PKI infrastructure health, responding to service degradations, and supporting end-users with authentication and certificate-related issues are also key duties. Generating operational reports, tracking service metrics, identifying operational gaps, and participating in continuous service improvement initiatives are essential. Creating and maintaining SOPs, runbooks, and technical documentation, along with supporting knowledge transfer, will ensure robust operational readiness.

To be successful in this role, you will need strong hands-on experience with Microsoft Active Directory (On-Premises), Domain Controllers, Group Policy (GPO), DNS, LDAP, Kerberos Authentication, AD Replication, Organizational Units (OU), and Azure AD/Microsoft Entra ID Connect. Experience managing large-scale enterprise Active Directory environments is required.

Significant experience with Microsoft Active Directory Certificate Services (AD CS) and Enterprise PKI Administration is essential. You should have experience managing Certificate Authority (CA) infrastructure, a strong understanding of SSL/TLS certificates and their lifecycle management, and hands-on experience with certificate template creation and management. Familiarity with certificate enrollment, auto-enrollment, and renewal processes is also necessary.

Proven experience in Incident, Service Request, Change, and Problem Management, along with familiarity with ITIL processes and service delivery frameworks, is expected. Experience managing operational support queues and SLA-based environments is also a requirement.

Preferred qualifications include PowerShell scripting and automation skills, knowledge of Cybersecurity and Identity & Access Management concepts, experience with vulnerability management and security remediation, and exposure to Microsoft Entra ID, Hybrid Identity, and Windows Server Administration. Experience supporting compliance and audit activities is also advantageous.

Applicants should possess a Bachelor's Degree in Computer Science, Information Technology, Cyber Security, or a related field. Microsoft Certified: Windows Server / Identity & Access Administrator certifications are preferred.