AD Architect

Job description

**TCS has been a great pioneer in feeding the fire of young techies like you. We are a global leader in the technology arena and theres nothing that can stop us from growing together.** **What we are looking for** **Role: AD Architect** **Experience Range: 10 to 15 Years** **Location: Hyderabad/Bengaluru** **Must Have:** AD Architect 1. Required Skills • Strong expertise in Microsoft Active Directory, multi-site design, FSMO roles, replication, and DNS integration. • Hands-on experience deploying AD Domain Controllers on AWS with proper site/subnet design. • Solid understanding of SAML, identity federation, and MFA enforcement for cloud applications. • Experience supporting AD needs for Java/.NET apps, Oracle/SQL DBs, and TIBCO integrations. • Strong knowledge of Windows Server 2016–2025 and AD integration for RHEL 7–9 systems. • Skilled in GPOs, OU structures, certificate services, and security hardening standards. • Familiar with automation using Terraform, Ansible, and PowerShell for AD operations. • Ability to troubleshoot authentication issues, replication delays, and hybrid identity failures. **Good to Have** : 2. Responsibilities and Duties • Lead AD architecture design for the DC Exit program, ensuring hybrid identity continuity. • Deploy and optimize AD Domain Controllers on AWS EC2 with resilient topology. • Create AD integration models for migrated Java/.NET, Oracle Exadata, and TIBCO workloads. • Develop SAML/SSO and MFA authentication models for cloud-hosted applications. • Define trust models, OU/GPO strategy, secure access controls, and DNS alignment. • Map AD dependencies and authentication paths for all migration waves. • Build automation (Terraform/Ansible/PowerShell) for provisioning and configuration. • Provide runbooks, topology diagrams, HLD/LLD, and operational transition guidelines. **Essenti** al: . Cloud Experience Needed • Hands-on deployment of AD on AWS, including multi-AZ design and replication setup. • Experience with AWS Directory Services, DNS forwarding, hybrid authentication flows. • Expertise integrating AD with AWS IAM, SAML providers, and MFA for cloud workloads. • Strong understanding of AWS networking for identity: VPC, routing, SGs, DX/VPN/TGW. • Knowledge of cloud security practices for identity, access, and compliance. **4. Exposure to datacenter migration** Must have exposure to DC migration, preferably on Prem to cloud - Must have exposure to DC migration preferably on Prem to cloud **Minimum Qualification:** - 15 years of full-time education - Minimum percentile of 50% in 10th, 12th, UG & PG (if applicable)