Active Directory & Azure AD SME / Engineer

Role: Active Directory, L3 SME Location: Bangalore/Hyderabad Full/ Part-time: Full Time About Carrier Carrier Global Corporation, global leader in intelligent climate and energy solutions, is committed to creating innovations that bring comfort, safety and sustainability to life. Through cutting-edge advancements in climate solutions such as temperature control, air quality and transportation, we improve lives, empower critical industries and ensure safe transport of food, life-saving medicines and more. Since inventing modern air conditioning in 1902, we lead with purpose: enhancing the lives we live and the world we share. We continue to lead because of our world-class, inclusive workforce that puts the customer at the center of everything we do. For more information, visit corporate.carrier.com or follow Carrier on social media at @Carrier Carrier is seeking a senior Identity & Access Management (IAM) leader and subject matter expert (SME) to provide technical leadership and operational governance for Carrier's global identity platforms, including Microsoft Entra ID, Active Directory, Okta, SailPoint, BeyondTrust, and customer identity environments. The role is responsible for identity strategy, platform architecture, operational excellence, security governance, compliance, and large-scale transformation initiatives supporting over 60,000 workforce identities, external identities, and critical business applications. The individual will serve as the highest-level escalation point (L3), provide architecture leadership for identity modernization programs, lead global IAM engineering teams and vendors, and ensure secure, compliant, and scalable identity services for Carrier's enterprise environments. Key Responsibilities Active Directory & Entra ID Leadership ·Own enterprise architecture and governance for on-premises Active Directory and Microsoft Entra ID. ·Lead hybrid identity architecture, synchronization, federation, SSO, MFA, Conditional Access, Privileged Identity Management (PIM), and Self-Service Password Reset (SSPR). ·Define identity standards, lifecycle management processes, naming standards, and security baselines. ·Provide technical approval for enterprise identity designs and integrations. Identity Governance & Administration ·Govern SailPoint identity lifecycle processes, access certifications, birthright access, role management, and segregation-of-duty controls. ·Drive User Access Reviews (UAR), Privileged Access Reviews (PAR), SOX controls, and audit remediation efforts. ·Establish governance for workforce, contractor, service, and privileged accounts. ·Ensure compliance with internal cybersecurity and regulatory requirements. IAM Transformation Programs ·Lead strategic programs such as Okta-to-Entra migration, CIAM modernization, and cloud identity transformation. ·Own migration planning, readiness assessments, architecture governance, application onboarding, and executive reporting. ·Collaborate with Microsoft, implementation partners, and business stakeholders to deliver enterprise-scale IAM initiatives. Operational Leadership ·Provide L3 escalation support for critical IAM incidents and authentication issues. ·Lead resolution of complex identity, federation, provisioning, and SSO integration challenges. ·Establish service management processes, SOPs, operational metrics, SLAs, and technology roadmaps. ·Manage vendors, contractors, and managed service providers supporting IAM operations. PAM & Service Account Governance ·Oversee BeyondTrust PAM operations and privileged account governance. ·Establish controls for service account lifecycle management, credential rotation, password propagation, and privileged access controls. ·Drive least-privilege and zero-trust initiatives across identity platforms. Application & Cloud Identity Architecture ·Provide IAM architecture guidance for GitHub, AWS, ServiceNow, Spacelift, enterprise SaaS applications, and custom integrations. ·Design scalable access models leveraging Entra groups, SCIM provisioning, federation, and automated access governance. ·Support CI/CD and DevOps identity integration requirements Required Qualifications ·12+ years of Identity & Access Management experience. ·8+ years administering and architecting Active Directory and Microsoft Entra ID. ·Deep expertise in: Active Directory Microsoft Entra ID Azure AD Connect / Cloud Sync Federation Services Conditional Access MFA Privileged Identity Management Self-Service Password Reset Identity Governance Hybrid Identity Architecture Preferred Qualifications ·CISSP, CISM, Microsoft Identity certifications, SailPoint certifications, or BeyondTrust certifications. ·Experience with CIAM platforms and B2B/B2C identity architectures. ·Experience supporting cloud engineering platforms such as GitHub, AWS, Azure, Terraform, or Spacelift. Benefits We offer a competitive total rewards package that may include other benefits and well‑being programs. Offerings vary by role and location and are designed to support employees’ health, security, and success Apply Now! Carrier is An Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or veteran status, age or any other federally protected class. Job Applicant's Privacy Notice: Click on this link to read the Job Applicant's Privacy Notice