Security Analysis Senior Specialist

Req ID: 391371 

NTT DATA strives to hire exceptional, innovative and passionate individuals who want to grow with us. If you want to be part of an inclusive, adaptable, and forward-thinking organization, apply now.

We are currently seeking a Security Analysis Senior Specialist to join our team in Noida, Uttar Pradesh (IN-UP), India (IN).

Job Description: Active Directory & PKI (Certificate Management) Engineer
Job Summary -
We are seeking an experienced Senior Active Directory & PKI Engineer to manage and support the organization's On-Premises Active Directory (AD), Active Directory Certificate Services (AD CS), and Certificate Management infrastructure. The role is responsible for maintaining AD services, managing the certificate lifecycle, administering PKI components, remediating security vulnerabilities, and ensuring the availability, security, and compliance of identity and certificate services.
The ideal candidate will have strong expertise in Active Directory Administration, PKI/Certificate Management, Windows Server Infrastructure, DNS, Group Policy, and IT Service Management processes.
________________________________________
Key Responsibilities -
Active Directory Administration
•    Administer and maintain On-Premises Active Directory infrastructure.
•    Manage Active Directory users, groups, organizational units (OUs), and delegation models.
•    Support and maintain Domain Controllers across multiple environments.
•    Administer Group Policy Objects (GPOs) and troubleshoot Group Policy-related issues.
•    Manage AD replication, site topology, DNS integration, and authentication services.
•    Perform health checks and proactive monitoring of Active Directory services.
•    Support Azure AD / Entra ID Connect synchronization and related services.
•    Troubleshoot Active Directory, DNS, authentication, Kerberos, LDAP, and replication issues.
PKI & Certificate Services Administration-
•    Manage Microsoft Active Directory Certificate Services (AD CS).
•    Administer and maintain the enterprise Public Key Infrastructure (PKI).
•    Manage Certificate Authorities (CA), subordinate CAs, and certificate-related services.
•    Ensure high availability and operational health of PKI infrastructure.
•    Perform PKI component and service certificate renewals.
Certificate Lifecycle Management-
•    Manage the end-to-end certificate lifecycle, including: 
o    Certificate issuance
o    Renewal
o    Revocation
o    Replacement
o    Expiry management
•    Process certificate requests and approvals.
•    Troubleshoot certificate enrollment and authentication issues.
•    Ensure timely renewal of certificates to prevent service impact.
Certificate Template Management-
•    Create, modify, and maintain Certificate Authority (CA) templates.
•    Manage certificate enrollment and auto-enrollment policies.
•    Support certificate template design and implementation based on business and security requirements.
•    Ensure compliance with PKI standards and security policies.
Security & Vulnerability Management-
•    Remediate vulnerabilities identified on: 
o    Domain Controllers
o    Azure AD / Entra ID Connect Servers
o    DNS Servers
o    Certificate Servers
•    Perform AD and PKI security hardening activities.
•    Support security audits, compliance reviews, and remediation activities.
•    Implement industry best practices for identity and certificate security.
Incident, Change & Problem Management-
•    Manage Incident, Change Request (CR), Service Request, and Problem Management activities.
•    Process operational alerts and support requests within SLA targets.
•    Perform queue management and ticket prioritization.
•    Conduct root cause analysis and implement preventive actions.
•    Coordinate with infrastructure, security, and application teams during incident resolution and change implementations.
Monitoring & Operational Support-
•    Monitor Active Directory and PKI infrastructure health.
•    Provide Event ID analysis and troubleshooting support to monitoring teams.
•    Respond to service degradation and infrastructure alerts.
•    Support end users and application teams for authentication and certificate-related issues.
Reporting & Service Improvement-
•    Generate weekly and monthly operational reports.
•    Track service metrics, incidents, vulnerabilities, and certificate renewals.
•    Identify operational gaps and recommend improvements.
•    Participate in continuous service improvement initiatives.
Documentation & Knowledge Management-
•    Create and maintain SOPs, runbooks, technical documents, and operational procedures.
•    Ensure Active Directory and PKI configurations are properly documented.
•    Develop knowledge articles and troubleshooting guides.
•    Support knowledge transfer and operational readiness activities.
________________________________________
Required Skills & Experience
Active Directory Skills-
•    Strong hands-on experience with: 
o    Microsoft Active Directory (On-Premises)
o    Domain Controllers
o    Group Policy (GPO)
o    DNS
o    LDAP
o    Kerberos Authentication
o    AD Replication
o    Organizational Units (OU)
o    Azure AD / Microsoft Entra ID Connect
•    Experience managing large-scale enterprise Active Directory environments.
PKI & Certificate Management Skills-
•    Strong experience with Microsoft Active Directory Certificate Services (AD CS).
•    Expertise in Enterprise PKI Administration.
•    Experience managing Certificate Authority (CA) infrastructure.
•    Strong knowledge of SSL/TLS certificates and certificate lifecycle management.
•    Hands-on experience with certificate template creation and management.
•    Knowledge of certificate enrollment, auto-enrollment, and certificate renewal processes.
IT Service Management-
•    Experience in Incident, Service Request, Change, and Problem Management.
•    Familiarity with ITIL processes and service delivery frameworks.
•    Experience managing operational support queues and SLA-based environments.
Preferred Skills-
•    PowerShell scripting and automation.
•    Cybersecurity and Identity & Access Management concepts.
•    Experience with vulnerability management and security remediation.
•    Exposure to Microsoft Entra ID, Hybrid Identity, and Windows Server Administration.
•    Experience supporting compliance and audit activities.
________________________________________
Qualifications
•    Bachelor's Degree in Computer Science, Information Technology, Cyber Security, or a related field.
•    Experience in Active Directory Administration and PKI/Certificate Management.
•    Microsoft Certified: Windows Server / Identity & Access Administrator certifications preferred.

About NTT DATA

NTT DATA is a $30 billion business and technology services leader, serving 75% of the Fortune Global 100. We are committed to accelerating client success and positively impacting society through responsible innovation. We are one of the world's leading AI and digital infrastructure providers, with unmatched capabilities in enterprise-scale AI, cloud, security, connectivity, data centers and application services. our consulting and Industry solutions help organizations and society move confidently and sustainably into the digital future. As a Global Top Employer, we have experts in more than 50 countries. We also offer clients access to a robust ecosystem of innovation centers as well as established and start-up partners. NTT DATA is a part of NTT Group, which invests over $3 billion each year in R&D.

Whenever possible, we hire locally to NTT DATA offices or client sites. This ensures we can provide timely and effective support tailored to each client’s needs. While many positions offer remote or hybrid work options, these arrangements are subject to change based on client requirements. For employees near an NTT DATA office or client site, in-office attendance may be required for meetings or events, depending on business needs. At NTT DATA, we are committed to staying flexible and meeting the evolving needs of both our clients and employees. NTT DATA recruiters will never ask for payment or banking information and will only use @nttdata.com, @nttdatafed.com and @talent.nttdataservices.com email addresses. If you are requested to provide payment or disclose banking information, please submit a contact us form, https://us.nttdata.com/en/contact-us.

NTT DATA endeavors to make https://us.nttdata.com accessible to any and all users. If you would like to contact us regarding the accessibility of our website or need assistance completing the application process, please contact us at https://us.nttdata.com/en/contact-us. This contact information is for accommodation requests only and cannot be used to inquire about the status of applications. NTT DATA is an equal opportunity employer. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or protected veteran status. For our EEO Policy Statement, please click here. If you'd like more information on your EEO rights under the law, please click here. For Pay Transparency information, please click here.