Active Directory SME - Client Account (Hybrid Identity & PAM)

Who We Are

At Kyndryl, we run and reimagine the mission-critical technology systems that drive advantage for the world's leading businesses. We are at the heart of progress; with proven expertise and a continuous flow of AI-powered insight, enabling smarter decisions, faster innovation, and a lasting competitive edge. For our people-Kyndryls-that means doing purposeful work that powers human progress. Join us and experience a flexible, supportive environment where your well-being is prioritized and your potential can thrive.

The Role

Client Account Ownership & Governance

• Act as the Active Directory technical owner for the assigned client account, accountable for service stability, security, and scalability.
• Serve as the primary escalation point for complex identity‑related incidents, problems, and high‑risk changes.
• Participate in service reviews, client governance calls, and transformation discussions, providing technical insights and recommendations based on service health and trends
• Ensure adherence to client‑specific policies, compliance requirements, and audit standards.

• Design, implement, and support enterprise‑scale Active Directory environments, including multi‑domain and multi‑forest architectures used by the client
• Manage trust relationships, forest/domain integrations, and directory restructuring initiatives in coordination with client application teams.
• Own AD health, replication, DNS, FSMO roles, and domain controller lifecycle management.

• Lead hybrid identity operations using Azure AD Connect and Microsoft Entra ID, ensuring secure identity synchronization and authentication with cloud services.
• Troubleshoot cross‑platform identity issues spanning on‑prem AD, cloud identity, and SaaS applications.
• Support identity integration for Microsoft and third‑party platforms as part of the client's cloud strategy.

• Design, implement, and troubleshoot Group Policies (GPOs) aligned to client security baselines and operational requirements.
• Drive AD security hardening, baseline compliance, and remediation initiatives as part of proactive service delivery.
• Support AD hygiene, stale object cleanup, and health assessments to reduce risk and improve service reliability.

• Lead PAM integrations (BeyondTrust or equivalent) within the client's Active Directory environment.
• Define and support privileged identity workflows, access approvals, and session controls.
• Collaborate with client security teams to enforce least privilege and privileged identity governance.

• Support and troubleshoot Active Directory integration with client applications, including authentication dependencies and service account configurations.
• Coordinate with application owners to ensure directory‑based access and authentication meet business requirements without impacting security or stability.

• Lead problem management, root cause analysis, and proactive initiatives to reduce recurring incidents.
• Produce and maintain runbooks, SOPs, and client‑specific documentation for identity services.
• for service improvement, automation, and operational maturity within the client account.
• Mentor L2/L3 engineers assigned to the account and provide technical guidance.

• Expert‑level knowledge of:
  • Active Directory (AD DS), DNS, trusts, FSMO roles
  • Group Policy design and troubleshooting
  • Multi‑forest and multi‑domain identity architecture
  • Azure AD Connect and Microsoft Entra ID
  • Hybrid identity and cloud directory integration
  • Privileged Access Management (BeyondTrust preferred)
  • Application authentication and directory integration

• Strong verbal and written communication skills for client interaction and stakeholder management.
• Ability to translate technical risks and remediation plans into business‑friendly language.
• High ownership mindset with a focus on SLA delivery, risk reduction, and customer satisfaction.
• Leadership and mentoring capability within an account‑aligned delivery team.

• Experience supporting regulated or audit‑driven client environments.
• Exposure to identity governance, Zero Trust, or IAM transformation initiatives.
• Microsoft certifications in AD, Azure, or Identity platforms.

• 15+ years of hands‑on experience managing enterprise Active Directory environments, preferably in managed services or client‑facing roles.
• Proven experience acting as an SME or technical owner for a customer account.
• Bachelor's or Master's degree in Computer Science, Engineering, or equivalent experience