O365 & AVD Administrator

Job Title: O365/AD Admin – L2+

Band: Band 2

Experience: 4 to 8 years

Location: Chennai (work from Office)

About the Role

We are looking for an experienced L2+ O365/AD Admin to manage, support, and troubleshoot our Microsoft 365 (O365) and Active Directory (AD) environment as a dedicated function within the EUC tower. The ideal candidate will handle day-to-day mailbox and messaging administration, identity and access management, user lifecycle (Joiner/Mover/Leaver) activities, and endpoint productivity services support, working closely with L1 support and L3/EUC Architects to ensure secure, reliable, and well-governed collaboration and identity platforms.

Key Responsibilities

Office 365 / Exchange Online Administration

• Manage and support Exchange Online mailbox administration — mailbox creation, permissions, distribution lists, shared/resource mailboxes, and mail flow/transport rules.
• Handle L2 escalations from L1 for mailbox and messaging issues — mail flow delays, delivery failures, quota/size issues, and mobile device (ActiveSync) sync problems — within defined SLAs.
• Perform user account provisioning and deprovisioning within Microsoft 365, including license assignment/management and application access setup.
• Provide L2 support for Microsoft 365 applications — Outlook, Teams, OneDrive, SharePoint Online — including access, sync, and performance issues.
• Support endpoint productivity services — Microsoft 365 apps deployment, activation issues, and integration with endpoint management tools.
• Monitor Microsoft 365 service health and communicate proactively on service incidents/advisories impacting mailbox or collaboration services.

Active Directory Administration

• Manage on-premises and/or Azure AD (Entra ID) user account administration — creation, modification, disablement, and deletion in line with defined processes.
• Administer security and distribution groups, organizational units (OUs), and permission structures, ensuring least-privilege access principles.
• Support authentication and access control — password resets, account lockouts, MFA configuration issues, and conditional access-related troubleshooting.
• Execute Joiner/Mover/Leaver (JML) activities end-to-end — account provisioning for new hires, access/role changes for role movements, and timely de-provisioning for leavers.
• Perform identity administration and policy enforcement — Group Policy Objects (GPO), password/account policies, and directory hygiene/cleanup activities.
• Support AD replication health checks, DNS/DHCP-related identity issues, and hybrid identity synchronization (Azure AD Connect/Entra Connect) monitoring.

Troubleshooting

• Diagnose and resolve mailbox and mail flow issues — message tracing, transport rule conflicts, spam/quarantine issues, and connector failures.
• Troubleshoot Active Directory authentication failures, replication errors, GPO application issues, and account lockout root causes.
• Investigate Azure AD Connect/Entra Connect sync errors and hybrid identity mismatches between on-premises AD and Microsoft 365.
• Debug user access issues spanning both O365 and AD — license/permission mismatches, group membership errors, and conditional access blocks.
• Perform root cause analysis for recurring incidents and drive permanent fixes in coordination with L3/EUC Architecture teams.

Security & Access

• Implement and manage role-based access control (RBAC) within Microsoft 365 admin centers and Active Directory for secure, least-privilege access.
• Support compliance and data protection features — mailbox auditing, retention policies, DLP alerts, and litigation hold requests.
• Ensure JML processes are executed within SLA to minimize orphaned accounts, excess access, and audit findings.
• Ensure compliance with patch SLAs, access review cycles, and audit/regulatory requirements related to identity and messaging platforms.

Platform & Automation

• Automate routine O365/AD administrative tasks using PowerShell (Exchange Online PowerShell, AzureAD/Microsoft Graph, ActiveDirectory module).
• Contribute to standardization of onboarding/offboarding checklists, naming conventions, and access request workflows.
• Work with monitoring and reporting tools to proactively track license utilization, mailbox growth, and AD account hygiene.
• Support integration between O365/AD processes and endpoint/automation platforms used within the broader EUC tower.
• Document runbooks, SOPs, and knowledge base articles for recurring O365 and AD issues.
• Participate in on-call/shift-based support rotation and support during planned maintenance or major directory/tenant changes.

Required Skills & Qualifications

• Bachelor’s degree in Computer Science, IT, or related field (or equivalent experience).
• 4 to 8 years of hands-on experience in Office 365/Exchange Online administration and Active Directory/Azure AD administration.
• Strong hands-on experience with Exchange Online mailbox management, mail flow troubleshooting, and Microsoft 365 admin center administration.
• Solid working knowledge of on-premises Active Directory and Azure AD (Entra ID), including group/OU management and hybrid identity concepts.
• Demonstrated experience executing Joiner/Mover/Leaver (JML) processes and identity lifecycle management within an enterprise environment.
• Working knowledge of PowerShell scripting for Exchange Online and Active Directory administration and automation.

Preferred / Good to Have

• Microsoft Certified: Modern Desktop Administrator Associate, Identity and Access Administrator Associate, or Microsoft 365 Certified: Administrator Expert.
• Experience with Azure AD Connect/Entra Connect configuration and troubleshooting for hybrid identity environments.
• Exposure to conditional access, Multi-Factor Authentication (MFA), and Microsoft Purview compliance/data protection features.
• Experience working within an ITSM/ticketing platform for incident, request, and change management.
• Familiarity with endpoint management tools (Microsoft Intune) and their integration with Azure AD-based identity.
• Exposure to automation/scripting for bulk account operations and reporting (PowerShell, Microsoft Graph API).