AD/IDAM & Email Lead/Architect
- Sun Pharma
- 12 - 15 years
- Mumbai
- 7 months ago
- Email to a friend
- Report this job
Job Description
Hi,
We are having an opening for Senior Domain Lead-AD/IDAM & Email Lead/Architect at our Mumbai location
Job Summary : We are seeking an accomplished and strategic Senior Domain Lead to oversee enterprise email and collaboration systems, Active Directory (AD), Identity & Access Management (IDAM), and their security and cloud integrations. The role focuses on end-to-end management and security governance across hybrid environments, ensuring scalable, secure, and compliant digital identity and collaboration infrastructure.
Areas Of Responsibility :
Key Responsibilities:
1. Infrastructure & Operations Management
- Manage daily operations for Microsoft 365 (Exchange Online, Teams, SharePoint), Active Directory (on-prem and Azure AD), and domain services.
- Ensure stability and performance of hybrid AD and collaboration systems through proactive monitoring and incident management.
- Maintain internal and public DNS, DHCP, certificates, and domain name configurations.
2. Identity & Access Management (IDAM)
- Own the implementation and operation of IDAM platforms supporting user lifecycle management, access provisioning, and deprovisioning.
- Design and manage SSO, MFA, conditional access, and privileged access controls (PAM) using tools like Azure AD, SailPoint, or Saviynt.
- Ensure proper RBAC models, access certifications, and policy enforcement across systems.
3. Email & AD Security
- Strengthen security posture of email systems by configuring and maintaining anti-phishing, DLP, spam filtering, and encryption tools (e.g., Microsoft Defender for Office 365, Mimecast, Proofpoint).
- Implement and maintain DMARC, DKIM, SPF, and secure mail flow policies.
- Lead AD security hardening, including Tiered Administration, Kerberos policies, ACL reviews, and delegation best practices.
- Enforce least privilege, admin account separation, and monitoring of high-privilege actions (via SIEM or native auditing tools).
Key Responsibilities:
1. Infrastructure & Operations Management
- Manage daily operations for Microsoft 365 (Exchange Online, Teams, SharePoint), Active Directory (on-prem and Azure AD), and domain services.
- Ensure stability and performance of hybrid AD and collaboration systems through proactive monitoring and incident management.
- Maintain internal and public DNS, DHCP, certificates, and domain name configurations.
2. Identity & Access Management (IDAM)
- Own the implementation and operation of IDAM platforms supporting user lifecycle management, access provisioning, and deprovisioning.
- Design and manage SSO, MFA, conditional access, and privileged access controls (PAM) using tools like Azure AD, SailPoint, or Saviynt.
- Ensure proper RBAC models, access certifications, and policy enforcement across systems.
3. Email & AD Security
- Strengthen security posture of email systems by configuring and maintaining anti-phishing, DLP, spam filtering, and encryption tools (e.g., Microsoft Defender for Office 365, Mimecast, Proofpoint).
- Implement and maintain DMARC, DKIM, SPF, and secure mail flow policies.
- Lead AD security hardening, including Tiered Administration, Kerberos policies, ACL reviews, and delegation best practices.
- Enforce least privilege, admin account separation, and monitoring of high-privilege actions (via SIEM or native auditing tools).
- Partner with SOC and Security teams to respond to identity and email-related threats or incidents.
4. Cloud Integration & Identity Governance
- Administer and secure cloud identity solutions across Azure, Microsoft 365, and third-party SaaS platforms.
- Align hybrid AD and Azure AD with cloud security frameworks and Zero Trust principles.
- Manage B2B/B2C identities, OAuth/SAML integrations, and conditional access policies for external partners.
5. Projects & Transformation
- Lead initiatives such as:
- Email platform migration or consolidation (e.g., from on-prem to M365),
- Deployment of IDAM platforms,
- Secure collaboration tool rollouts,
- Cloud-first identity transformations.
- Define project scope, success metrics, resource plans, and stakeholder engagement strategy.
6. Compliance, Governance & Risk Management
- Define and maintain governance frameworks for collaboration, identity, and directory services.
- Ensure alignment with compliance standards (e.g., GDPR, ISO 27001, HIPAA, SOX).
- Conduct periodic access reviews, admin audits, and mailbox permissions checks.
- Own documentation, runbooks, and policy lifecycle management.
7. Vendor & License Management
- Manage third-party service providers and tools across email security, cloud identity, and collaboration suites.
- Oversee licensing, renewals, and performance reviews.
- Evaluate and onboard new solutions as per evolving enterprise needs.
8. Leadership & People Management
- Lead a team of email, AD, cloud, and IDAM specialists.
- Assign responsibilities, set goals, and promote cross-skilling and upskilling.
- Ensure availability through structured support models, escalation procedures, and documentation.
Educational Qualification : Degree or appropriate professional qualification
Specific Certification :
Certification & Trainings on following technology domains:
- Microsoft Certified: Enterprise Administrator Expert
- Microsoft Certified: Identity and Access Administrator Associate
- Azure Administrator / Security Engineer Associate
- Certified Information Systems Security Professional (CISSP) optional but a plus
- ITIL Foundation / Intermediate
- Project Management Certification (PMP / Prince2)
- Experience : 12-15 Years of experience
Skill (Functional & Behavioural):
Technical Skills:
- Microsoft 365 administration: Exchange, Teams, SharePoint, Defender for O365
- Hybrid AD and Azure AD, including AD Connect, GPOs, DNS, DHCP
- PowerShell scripting for automation and reporting
- Identity tools: SailPoint, Okta, Saviynt, Azure AD Premium
- Email security protocols: SPF, DKIM, DMARC
- Email filtering & security: Defender, Mimecast, Proofpoint
- AD security best practices and hardening (LAPS, tiering, auditing)
- Cloud identity and app integration (OAuth, SAML)
Soft Skills:
- Strong leadership, communication, and cross-functional collaboration
- High attention to detail, especially around security and compliance
- Problem-solving under pressure and with complex systems
- Strategic thinking with a proactive mindset toward continuous improvement
- Pharma industry experience is an advantage.
Job Classification
Industry: Pharmaceutical & Life SciencesFunctional Area / Department: IT & Information SecurityRole Category: IT Infrastructure ServicesRole: IT Infrastructure Services - OtherEmployement Type: Full timeContact Details:
Company: Sun PharmaLocation(s): Mumbai
Keyskills: Email Security Identity Access Management ITIL Certified Spf Active Directory Oauth Dkim SAML
Similar positions
Job Listings
We are in open beta version of website, please let us know if any issues, at: info(at)indigojobs.in