• Provide L2 support for ADFS authentication, federation and single sign-on (SSO) incidents.
• Troubleshoot token issuance failures, federation errors, certificate issues and authentication problems.
• Perform basic health checks on ADFS services, federation servers and related components.
• Support approved certificate renewals, configuration changes and service validation.
• Troubleshoot relying-party trust and application federation issues.
• Escalate complex federation, claims-rule and architecture issues to L3 SMEs.

Operations & Service Management

• Resolve identity-related incidents and service requests within defined SLAs.
• Monitor alerts and service health for AD, LDAP and ADFS infrastructure.
• Execute approved changes and follow established access management and security procedures.
• Support major incident restoration, problem investigation and root-cause analysis activities.
• Follow ITIL Incident, Problem, Change and Request Management processes.
• Maintain runbooks, operational documentation, incident records and shift handover notes.
• Coordinate with L1/L3, Security, IAM, Network, Windows and Application teams.
• Ensure timely escalation, SLA compliance and effective APAC–EMEA–NLAM shift handovers.

Required Skills & Qualifications:

• Hands-on experience in Active Directory administration and troubleshooting.
• Strong knowledge of users, groups, account lockouts, authentication, Group Policy and AD replication.
• Working knowledge of LDAP, directory queries, bind operations and application integrations.
• Experience supporting ADFS, federation services, SSO and certificate-related issues.
• Understanding of DNS, Kerberos, NTLM, SSL/TLS and authentication protocols.
• Knowledge of service accounts, access permissions, privileged access and identity security practices.
• Experience with monitoring tools, ServiceNow or equivalent ITSM platforms.
• Understanding of ITIL Incident, Problem, Change and Request Management.
• Basic PowerShell scripting skills for identity administration and troubleshooting.
• Experience in enterprise 24x7 production operations and SLA-driven support.

Preferred Skills & Qualifications:

• Microsoft identity and access management certifications or equivalent training.
• Exposure to Microsoft Entra ID (Azure AD), Entra Connect and hybrid identity environments.
• Knowledge of SAML, OAuth 2.0, OpenID Connect and modern authentication.
• Familiarity with privileged access management (PAM), MFA and conditional access.
• Experience with AD auditing, security monitoring and compliance remediation.
• Knowledge of ServiceNow workflows and identity lifecycle management.
• Experience supporting global follow-the-sun operations.

Why Gruve

At Gruve, we foster a culture of innovation, collaboration, and continuous learning. We are committed to building a diverse and inclusive workplace where everyone can thrive and contribute their best work. If you’re passionate about technology and eager to make an impact, we’d love to hear from you.

Gruve is an equal opportunity employer. We welcome applicants from all backgrounds and thank all who apply; however, only those selected for an interview will be contacted.