Join NTT DATA as a Senior Active Directory & PKI Engineer in Noida, India. This role focuses on managing and supporting On-Premises Active Directory (AD), Active Directory Certificate Services (AD CS), and certificate management. You'll be instrumental in maintaining AD services, overseeing the certificate lifecycle, administering PKI components, and ensuring the security and availability of these critical identity and certificate services. The ideal candidate possesses robust expertise in AD administration, PKI/Certificate Management, Windows Server, DNS, Group Policy, and IT Service Management.

NTT DATA is a global leader in business and technology services, committed to driving client success and societal impact through responsible innovation. As a top employer worldwide, we foster an inclusive and forward-thinking environment where experts in over 50 countries collaborate to shape the digital future.

Key responsibilities include administering and maintaining the On-Premises Active Directory infrastructure, managing users, groups, and Domain Controllers. You will also administer Group Policy Objects (GPOs), manage AD replication, DNS integration, and authentication services, while troubleshooting various AD and related issues. Furthermore, you will manage Microsoft Active Directory Certificate Services (AD CS) and the enterprise Public Key Infrastructure (PKI), ensuring high availability and operational health. This includes end-to-end certificate lifecycle management (issuance, renewal, revocation, expiry) and template management. You will also be responsible for security and vulnerability remediation on Domain Controllers, DNS, and Certificate Servers, performing AD and PKI security hardening, and supporting security audits. Incident, Change, and Problem Management activities are also core to this role, including managing operational alerts, queue management, root cause analysis, and coordinating with cross-functional teams. Monitoring AD and PKI infrastructure health, providing troubleshooting support, and responding to service alerts are essential. Finally, you will generate operational reports, track service metrics, identify improvement areas, and create/maintain SOPs and documentation.

Required skills include strong hands-on experience with Microsoft Active Directory (On-Premises), Domain Controllers, Group Policy (GPO), DNS, LDAP, Kerberos Authentication, AD Replication, Organizational Units (OU), and Azure AD / Microsoft Entra ID Connect. Expertise in Enterprise PKI Administration and Microsoft Active Directory Certificate Services (AD CS) is crucial, along with experience managing Certificate Authority (CA) infrastructure and a solid understanding of SSL/TLS certificates and their lifecycle. You should also have experience with certificate template creation and management, as well as knowledge of certificate enrollment and auto-enrollment processes. Experience in Incident, Service Request, Change, and Problem Management, along with familiarity with ITIL processes, is necessary. Preferred skills include PowerShell scripting, automation, cybersecurity, and Identity & Access Management concepts, as well as experience with vulnerability management and security remediation. Exposure to Microsoft Entra ID, Hybrid Identity, Windows Server Administration, and supporting compliance/audit activities is beneficial. A Bachelor's Degree in Computer Science, Information Technology, Cyber Security, or a related field is required. Microsoft Certified: Windows Server / Identity & Access Administrator certifications are preferred.