Must Have Technical/Functional Skills
Identity and Access Management (IAM)
Oversee the administration, design, and health of Active Directory (on-prem) and Azure Active Directory environments. Ensure proper synchronization via Azure AD Connect, including hybrid identity management. Lead efforts around authentication, including MFA, SSO, Conditional Access, and integration with 3rd-party apps via SAML, OAuth, and OIDC. Guide the team on managing directory security, domain trusts, replication, DNS, and Kerberos-related issues.
Microsoft 365 Collaboration Tools
Ensure smooth operation of Microsoft Teams, Exchange Online, and SharePoint Online, including integrations with AAD. Oversee configuration and support of collaboration environments and troubleshoot user-facing issues. Manage user lifecycle and permissions across M365 workloads.
Endpoint and Policy Management
Manage Group Policy Object (GPO) development and maintenance to enforce configuration baselines across Windows endpoints. Lead efforts to streamline endpoint management using Microsoft Endpoint Manager (Intune/MEM) where applicable. Ensure compliance with endpoint security policies, patching, and provisioning.
Security, Compliance & Best Practices
Collaborate with Security and Compliance teams to enforce least-privilege access, RBAC, auditing, and monitoring standards. Ensure IAM and collaboration systems meet organizational regulatory requirements (SOX, HIPAA, ISO 27001, etc.). Maintain and improve internal documentation, runbooks, and knowledge articles.
Project & Operational Excellence
Lead or contribute to strategic projects including domain consolidation, hybrid-cloud IAM transformations, or platform migrations. Drive automation and process improvements using PowerShell or other scripting tools. Collaborate with cross-functional teams (security, architecture, networking) on large-scale IT initiatives.
Expectations & Qualities
Able to roll up sleeves and solve complex technical problems, while guiding and developing team members. Comfortable balancing operational firefighting with long-term strategic planning. A self-starter with the ability to lead through ambiguity, set priorities, and execute under pressure. Brings a "customer-first" mindset to service design and support. Committed to continuous learning and development-both for self and the team.
Roles & Responsibilities
Generic Managerial Skills, If any
Lead, mentor, and grow a team of identity and collaboration engineers responsible for critical IT services. Manage 24x7 operational support and incident response for directory services and M365 tools. Define team goals, KPIs, and support metrics to track performance and improve service quality. Foster a high-performance, customer-centric culture focused on service reliability and user experi ence. Act as an escalation point for complex technical and operational issues.
Salary Range-$100,000-$140,000 a year
#LI-KR3
TCS Employee Benefits Summary:
Discretionary Annual Incentive.
Comprehensive Medical Coverage: Medical & Health, Dental & Vision, Disability Planning & Insurance, Pet Insurance Plans.
Family Support: Maternal & Parental Leaves.
Insurance Options: Auto & Home Insurance, Identity Theft Protection.
Convenience & Professional Growth: Commuter Benefits & Certification & Training Reimbursement.
Time Off: Vacation, Time Off, Sick Leave & Holidays.
Legal & Financial Assistance: Legal Assistance, 401K Plan, Performance Bonus, College Fund, Student Loan Refinancing.