Identity Engineer, Identity Management at Astellas Pharma in Bengaluru

Job description

About Astellas Astellas is a global life sciences company committed to turning innovative science into VALUE for patients. We provide transformative therapies in disease areas that include oncology, ophthalmology, urology, immunology and women's health. Through our research and development programs, we are pioneering new healthcare solutions for diseases with high unmet medical need. Learn more at Astellas.com. Are you driven to make a real difference in the lives of patients? We're seeking passionate individuals who thrive in dynamic environments, embrace new ideas, and aren't afraid to take intelligent risks. People who act with unwavering integrity and are deeply committed to making a tangible impact. Purpose and Scope: As an Identity Engineer, you will be responsible for the architecture, administration, security, and modernization of enterprise Active Directory services, including hybrid identity integration with Microsoft Entra ID. The role focuses on strengthening identity security, improving directory service reliability, driving automation, and supporting Active Directory transformation initiatives across global on-premises and cloud environments. Responsibilities and Accountabilities: • Administer, maintain, and support enterprise Microsoft Active Directory services, including Domain Controllers, Forests, Domains, DNS, Sites & Services, Organizational Units (OUs), and Group Policy Objects (GPOs). • Monitor, troubleshoot, and optimize Active Directory health, availability, replication, authentication services, and performance to ensure stable and secure identity operations. • Manage Active Directory security controls, including privileged groups, delegated administration, password policies, account policies, authentication protocols, and directory hardening. • Perform Active Directory assessments, health checks, security reviews, remediation activities, and operational improvements aligned with Microsoft and industry best practices. • Support hybrid identity environments integrating Active Directory with Microsoft Entra ID, identity synchronization, authentication services, and cloud identity platforms. • Administer and maintain core Active Directory services, including DNS, DHCP integration, Sites & Services, trusts, schema updates, FSMO roles, and SYSVOL replication. • Implement and support identity security initiatives, including Tier-0 protection, Privileged Access Management (PAM), Multi-Factor Authentication (MFA), Conditional Access, and Zero Trust controls. • Troubleshoot and resolve complex Active Directory issues related to replication, authentication, DNS, Kerberos, LDAP, Group Policy, and domain controller operations. • Develop and maintain automation solutions using PowerShell and related scripting technologies to improve operational efficiency and reduce manual effort. • Support backup, recovery, disaster recovery testing, and Active Directory Forest Recovery readiness to ensure business continuity. • Partner with Infrastructure, Security, Application, and Cloud teams to support enterprise identity integrations, modernization initiatives, and transformation programs. • Maintain operational documentation, technical standards, governance procedures, audit evidence, and compliance requirements related to Active Directory services. Required Qualifications: 8 to 12+ years of hands-on experience managing Microsoft Active Directory and enterprise identity infrastructure. Strong practical experience with AD DS, Domain Controllers, DNS, Group Policy (GPO), LDAP, Active Directory replication, and Microsoft Entra ID. Demonstrated hands-on expertise in: Active Directory Domains, Forests, Trusts, Sites & Services, FSMO roles, and OU management. DNS, Kerberos, LDAP, Group Policy administration, and security hardening. Hybrid identity environments using Microsoft Entra Connect and Microsoft Entra ID. PowerShell scripting and automation for Active Directory administration and reporting. Identity security controls includ