Infrastructure Security Engineer - AD & AM - L2

About Gruve

Gruve is an innovative software services startup dedicated to transforming enterprises to AI powerhouses. We specialize in cybersecurity, customer experience, cloud infrastructure, and advanced technologies such as Large Language Models (LLMs). Our mission is to assist our customers in their business strategies utilizing their data to make more intelligent decisions. As a well-funded early-stage startup, Gruve offers a dynamic environment with strong customer and partner networks.

About the Role

We are seeking an L2 Engineer to manage Active Directory (AD) BAU operations and device management. The candidate will be responsible for maintaining user account management, Group Policy administration, authentication services, and security compliance within the AD environment. This role requires strong troubleshooting skills and hands-on experience in Windows Server environments, domain controllers, and access management He should be well versed in the Change and Incident Management process. He should be ready to work in 24 X 7 shift

Key Responsibilities

Active Directory (AD) Management:

Perform user account provisioning, deprovisioning, and modifications in Active Directory.

• Manage and troubleshoot Group Policies (GPOs) for security and system configurations.
• Monitor domain controllers for performance, replication issues, and authentication failures.
• Handle password resets, account lockouts, and authentication issues.
• Support and maintain AD trusts, forests, and domain structure.

Device and Access Management:

• Manage Windows Server Active Directory services, ensuring high availability.
• Configure and troubleshoot LDAP, Kerberos, and NTLM authentication protocols.
• Implement RBAC (Role-Based Access Control) and least privilege access models.
• Maintain AD-integrated DNS and DHCP services for smooth network operations.
• Work with security teams to enforce access control policies, MFA, and SSO solutions.

Incident, Problem & Change Management:

• Investigate and resolve Active Directory authentication failures, replication errors, and logon issues.
• Act as an escalation point for L1 teams, providing advanced troubleshooting and RCA for AD-related incidents.
• Apply patches, updates, and service packs to keep AD infrastructure secure.
• Perform audit reviews and compliance reporting for security and access controls.

Security and Compliance:

• Implement security hardening measures to protect AD environments.
• Monitor event logs and security alerts to identify potential threats.
• Work with SIEM solutions (Splunk, Microsoft Defender, etc.) for security monitoring.
• Ensure compliance with IT security policies, regulatory requirements, and best practices.

Basic Qualifications

• 2–5 years of experience in Active Directory administration and BAU operations.
• Hands-on experience with Windows Server (2016/2019/2022) and AD domain controllers.
• Strong knowledge of Group Policy Management (GPOs), LDAP, DNS, and DHCP.
• Experience with PowerShell scripting for automation of AD tasks.
• Basic understanding of Azure AD, Hybrid Identity, and cloud integration (preferred).

Preferred Qualifications

• BE/ B.Tech / MCA / MSc
• ITIL Foundation certification
• Familiarity and hands one with the BAU process and device management‍

Why Gruve

At Gruve, we foster a culture of innovation, collaboration, and continuous learning. We are committed to building a diverse and inclusive workplace where everyone can thrive and contribute their best work. If you’re passionate about technology and eager to make an impact, we’d love to hear from you.

Gruve is an equal opportunity employer. We welcome applicants from all backgrounds and thank all who apply; however, only those selected for an interview will be contacted.