IT Infrastructure Lead - Active Directory, IDAM and Email

We are seeking an accomplished and strategic Senior Domain Lead to oversee enterprise email and collaboration systems, Active Directory (AD), Identity & Access Management (IDAM), and their security and cloud integrations. The role focuses on end-to-end management and security governance across hybrid environments, ensuring scalable, secure, and compliant digital identity and collaboration infrastructure.

 1. Infrastructure & Operations Management 

• Manage daily operations for Microsoft 365 (Exchange Online, Teams, SharePoint), Active Directory (on-prem and Azure AD), and domain services. 
• Ensure stability and performance of hybrid AD and collaboration systems through proactive monitoring and incident management. 
• Maintain internal and public DNS, DHCP, certificates, and domain name configurations. 

2. Identity & Access Management (IDAM) 

• Own the implementation and operation of IDAM platforms supporting user lifecycle management, access provisioning, and deprovisioning. 
• Design and manage SSO, MFA, conditional access, and privileged access controls (PAM) using tools like Azure AD, SailPoint, or Saviynt. 
• Ensure proper RBAC models, access certifications, and policy enforcement across systems. 

3. Email & AD Security 

• Strengthen security posture of email systems by configuring and maintaining anti-phishing, DLP, spam filtering, and encryption tools (e.g., Microsoft Defender for Office 365, Mimecast, Proofpoint). 
• Implement and maintain DMARC, DKIM, SPF, and secure mail flow policies. 
• Lead AD security hardening, including Tiered Administration, Kerberos policies, ACL reviews, and delegation best practices. 
• Enforce least privilege, admin account separation, and monitoring of high-privilege actions (via SIEM or native auditing tools). 
• Partner with SOC and Security teams to respond to identity and email-related threats or incidents. 

4. Cloud Integration & Identity Governance 

• Administer and secure cloud identity solutions across Azure, Microsoft 365, and third-party SaaS platforms. 
• Align hybrid AD and Azure AD with cloud security frameworks and Zero Trust principles. 
• Manage B2B/B2C identities, OAuth/SAML integrations, and conditional access policies for external partners. 

5. Projects & Transformation 

• Lead initiatives such as: 
  • Email platform migration or consolidation (e.g., from on-prem to M365), 
  • Deployment of IDAM platforms, 
  • Secure collaboration tool rollouts, 
  • Cloud-first identity transformations. 
• Define project scope, success metrics, resource plans, and stakeholder engagement strategy. 

6. Compliance, Governance & Risk Management 

• Define and maintain governance frameworks for collaboration, identity, and directory services. 
• Ensure alignment with compliance standards (e.g., GDPR, ISO 27001, HIPAA, SOX). 
• Conduct periodic access reviews, admin audits, and mailbox permissions checks. 
• Own documentation, runbooks, and policy lifecycle management. 

7. Vendor & License Management 

• Manage third-party service providers and tools across email security, cloud identity, and collaboration suites. 
• Oversee licensing, renewals, and performance reviews. 
• Evaluate and onboard new solutions as per evolving enterprise needs. 

8. Leadership & People Management 

• Lead a team of email, AD, cloud, and IDAM specialists. 
• Assign responsibilities, set goals, and promote cross-skilling and upskilling. 
• Ensure availability through structured support models, escalation procedures, and documentation. 

Certification & Trainings on following technology domains: 

• Microsoft Certified: Enterprise Administrator Expert 
• Microsoft Certified: Identity and Access Administrator Associate 
• Azure Administrator / Security Engineer Associate 
• Certified Information Systems Security Professional (CISSP) – optional but a plus 
• ITIL Foundation / Intermediate 
• Project Management Certification (PMP / Prince2) 

Technical Skills: 

• Microsoft 365 administration: Exchange, Teams, SharePoint, Defender for O365 
• Hybrid AD and Azure AD, including AD Connect, GPOs, DNS, DHCP 
• PowerShell scripting for automation and reporting 
• Identity tools: SailPoint, Okta, Saviynt, Azure AD Premium 
• Email security protocols: SPF, DKIM, DMARC 
• Email filtering & security: Defender, Mimecast, Proofpoint 
• AD security best practices and hardening (LAPS, tiering, auditing) 
• Cloud identity and app integration (OAuth, SAML) 
• Experience of running bigger projects
• Experience of AD consolidation
• Experience of IDAM rollout
• Experience of getting acquired companies email, AD, identity platform integration
• Experience of Microsoft O365 rollout, MDM and email security

Soft Skills: 

• Strong leadership, communication, and cross-functional collaboration 
• High attention to detail, especially around security and compliance 
• Problem-solving under pressure and with complex systems 
• Strategic thinking with a proactive mindset toward continuous improvement 

Pharma industry experience is an advantage.