11/10/2026 updated
VG
100 % available
•Senior IAM Architect & Active Directory Specialist | Enterprise Hybrid Identity Engineer.
South West Delhi, India
Only remote
Bachelor of Arts (B.A.) from J.P. University, ChhapraAbout me
Enterprise IAM Consultant & Active Directory Architect specialized in hybrid environments. I remediate AD security vulnerabilities, misconfigurations, and legacy protocol risks. Expert in Microsoft Entra ID, AWS IAM, enterprise SSO/MFA, and automation via PowerShell. Available for remote projects.
OAuth 2.0IAMActive DirectoryActive Directory Federation ServicesMicrosoft AzureIntegrated Windows AuthenticationMulti-Factor AuthenticationMicrosoft Forefront Identity ManagerGroup PolicyIdentity ManagementIdentity Management SystemsWindows ServersWindows PowerShellOpenid ConnectAzure Active Directory
Identity & Access Management (IAM)
Over 10 years of expertise in designing and managing hybrid identity solutions combining On-Premises Active Directory and Azure AD (Entra ID), including identity lifecycle management, governance, and access control across large enterprise environments.
Microsoft Azure Entra ID & SSO
Deep knowledge in architecting and implementing Single Sign-On solutions using SAML, OAuth2.0, and OpenID Connect for enterprise and cloud applications, managing Enterprise Applications, App Registrations, and Conditional Access policies.
Privileged Identity Management & Security
Extensive experience with Privileged Identity Management (PIM), Privileged Access Management (PAM), MFA, Zero Trust security models, and vulnerability management using tools such as Ping Castle, ALSID, and Microsoft Defender.
Active Directory & ADFS
Administration of On-Premises Active Directory including GPO, OU design, Sites & Services, domain trusts, replication, and ADFS (Federation Services) configuration including federation trust and relying party trust setup.
AAD Connect & Directory Synchronization
Architecture and management of hybrid identity synchronization using Azure AD Connect and FIM, including Delta/Full Sync operations, troubleshooting, and optimization.
PKI & Certificate Management
Management of PKI infrastructure and certificate lifecycle, ensuring secure communication across enterprise systems, including public DNS and domain services via vendors such as GoDaddy and CSC Global.
PowerShell Scripting & Automation
Automation of identity and infrastructure tasks using PowerShell scripting and governance policies, improving operational efficiency and reducing manual effort.
Azure Monitor & Microsoft Sentinel
Monitoring and threat detection using Microsoft Sentinel, Azure Monitor, Azure Log Analytics, and KQL queries to detect and mitigate security risks.
DNS, DHCP & Network Infrastructure
Administration of DNS (Public and Private), DHCP, and directory services in production environments, including migration and consolidation of DNS zones.
Large-Scale Infrastructure Decommissioning
Leadership of large-scale domain decommissioning programs involving 6000+ Windows servers across Europe and corporate environments, ensuring zero/near-zero business disruption.
Over 10 years of expertise in designing and managing hybrid identity solutions combining On-Premises Active Directory and Azure AD (Entra ID), including identity lifecycle management, governance, and access control across large enterprise environments.
Microsoft Azure Entra ID & SSO
Deep knowledge in architecting and implementing Single Sign-On solutions using SAML, OAuth2.0, and OpenID Connect for enterprise and cloud applications, managing Enterprise Applications, App Registrations, and Conditional Access policies.
Privileged Identity Management & Security
Extensive experience with Privileged Identity Management (PIM), Privileged Access Management (PAM), MFA, Zero Trust security models, and vulnerability management using tools such as Ping Castle, ALSID, and Microsoft Defender.
Active Directory & ADFS
Administration of On-Premises Active Directory including GPO, OU design, Sites & Services, domain trusts, replication, and ADFS (Federation Services) configuration including federation trust and relying party trust setup.
AAD Connect & Directory Synchronization
Architecture and management of hybrid identity synchronization using Azure AD Connect and FIM, including Delta/Full Sync operations, troubleshooting, and optimization.
PKI & Certificate Management
Management of PKI infrastructure and certificate lifecycle, ensuring secure communication across enterprise systems, including public DNS and domain services via vendors such as GoDaddy and CSC Global.
PowerShell Scripting & Automation
Automation of identity and infrastructure tasks using PowerShell scripting and governance policies, improving operational efficiency and reducing manual effort.
Azure Monitor & Microsoft Sentinel
Monitoring and threat detection using Microsoft Sentinel, Azure Monitor, Azure Log Analytics, and KQL queries to detect and mitigate security risks.
DNS, DHCP & Network Infrastructure
Administration of DNS (Public and Private), DHCP, and directory services in production environments, including migration and consolidation of DNS zones.
Large-Scale Infrastructure Decommissioning
Leadership of large-scale domain decommissioning programs involving 6000+ Windows servers across Europe and corporate environments, ensuring zero/near-zero business disruption.
Experience
Professional experience10+ years
Freelancer since2026
Languages
EnglishFluent
Project history
Leading IAM strategy across hybrid environments (On-Prem AD + Azure AD / Entra ID). Designing and implementing SSO solutions using SAML/OAuth/OpenID Connect. Managing Enterprise Applications and App Registrations in Azure AD. Driving Conditional Access, MFA, and Zero Trust security models. Overseeing Tier-0 infrastructure (AD, ADFS, PKI, AAD Connect, DNS). Leading Vulnerability Management and Identity Security Assessments using Ping Castle, ALSID, and Defender. Architecting hybrid identity synchronization with AAD Connect. Automating tasks using PowerShell. Monitoring and threat detection using Microsoft Sentinel, Azure Monitor, and KQL queries.
Designed and managed hybrid identity architecture (On-Prem AD + Microsoft Entra ID) for large enterprise environments. Implemented and managed SSO integrations (SAML, OAuth2.0, OpenID Connect). Administered Enterprise Applications, App Registrations, and Application Proxy. Implemented MFA, SSPR, Conditional Access, and PIM. Managed Azure AD Connect and FIM synchronization. Decommissioned 200+ Tier-0 servers globally and led migration and retirement of 6,000+ Windows servers. Led large-scale domain decommission program across Europe. Directed site-wise decommissioning of Domain Controllers, DNS, ADFS, and PKI servers ensuring zero/near-zero business disruption.
Managed IAM operations including identity lifecycle, governance, and access control. Administered On-Prem Active Directory and Microsoft Entra ID in a hybrid setup via AAD Connect. Monitored systems using Azure Monitor, Microsoft Sentinel, and KQL. Managed Tier-0 infrastructure (AD, DNS, ADFS, AAD Connect, PKI). Implemented and supported SSO, MFA, and SSPR. Administered ADFS (3.0) including federation trust and relying party trust configuration. Managed PKI infrastructure and certificate lifecycle. Led Altran UK domain integration into Capgemini infrastructure.