Inactive
M

METRO/MAKRO

Wholesale food for HoReCa and traders

Microsoft Entra ID & Active Directory Engineer

Security Engineering & ArchitecturePosted on Sep 22
Full-timePune, Maharashtra, IndiaNo salary listedHybrid

About the Job

Requirements

  • Eight to ten years of experience in identity and access management.
  • Strong hands-on experience with Microsoft Entra ID P2, Conditional Access at scale, Privileged Identity Management, and Active Directory security.
  • Experience supporting hybrid Active Directory environments.
  • Advanced PowerShell scripting and automation.
  • Strong understanding of identity-based attack techniques and mitigations.
  • Solid grasp of Zero Trust principles focused on implementation.

Responsibilities

  • Implement and optimize Conditional Access policies based on approved designs.
  • Support and operationalize risk-based access policies, Authentication Strengths, and phishing-resistant multifactor authentication.
  • Lead operational implementation of Privileged Identity Management, including role assignments, approval workflows, and just-in-time access configuration.
  • Secure application and workload identities through app registrations, service principals, and OAuth permission governance.
  • Support and enforce Active Directory security best practices, including a tiered administrator model and privileged account separation.
  • Lead Active Directory hardening activities, including Local Administrator Password Solution, Protected Users, delegation, and administrator access restrictions.
  • Troubleshoot complex Active Directory security and authentication issues.
  • Support Entra Connect configuration and lifecycle management.
  • Assist in evaluating authentication models and hybrid trust decisions.
  • Support identity integration with Azure subscriptions and third-party software-as-a-service applications.
  • Support the CyberDefence team with Microsoft Defender for Identity investigations and tuning.
  • Act as a technical escalation point during identity-related incidents.
  • Mentor mid-level engineers and provide technical guidance.
  • Participate in design reviews and provide implementation feedback.
  • Work closely with Identity Architects, Security, and Platform teams.

Desired Qualifications

  • Experience with identity governance and administration concepts.
  • Experience with Microsoft Defender for Identity.
  • Experience with passwordless authentication, including FIDO2 and Windows Hello for Business.
  • Experience with virtual desktop infrastructure or shared device environments.
  • Microsoft SC-300 certification.
  • Microsoft AZ-500 certification.
  • Microsoft Security certifications.

About the Company

METRO/MAKRO

Wholesale food for HoReCa and traders

METRO supplies food and related products to professionals, including hotels, restaurants, caterers (HoReCa) and independent traders, through large physical stores and a delivery network. Its product access combines in-store shopping with Food Service Distribution (FSD) and a digitally connected experience, plus METRO MARKETS, an international online marketplace for professional customers that has grown since 2019. The company’s approach extends across more than 30 countries and relies on a multichannel model to reach about 15 million customers, supported by a workforce of over 85,000 and a 2023/24 sales figure of €31 billion. METRO prioritizes sustainability and reports recognition from indices like MSCI, Sustainalytics and CDP. The goal is to meet professional customers’ needs with reliable, scale-enabled wholesale distribution and digital marketplaces that enable efficient purchasing while expanding international reach.

Company size
501-1,000
Company stage
Not listed
Total funding
Not listed
Headquarters
Düsseldorf, Germany
Founded
1964

Recently Posted Jobs

Explore more opportunities at METRO/MAKRO

See more jobs