Goutham Sankar

Results-driven Azure Support Engineer with 4.5 years of experience in Identity and Access Management (IAM), specializing in hybrid identity, enterprise security, and cloud-based solutions. Skilled in Microsoft Entra ID, Active Directory, Azure AD Connect, and automation using PowerShell and Microsoft Graph API. Proven expertise in troubleshooting complex identity issues and delivering secure, scalable solutions for global enterprise environments.

Azure Support Engineer at Microsoft (via TEKsystems) (2025-09 – Present)

• Troubleshooting Azure AD Connect & Cloud Sync issues including sync failures, OU scoping, filtering, and scheduler optimization
• Diagnosing SCIM provisioning issues across SaaS applications and custom integrations
• Managing External Identities (B2B & B2C), guest lifecycle, Conditional Access policies, and cross-tenant synchronization
• Resolving Entra Managed Domain Services (AAD DS) issues related to DNS, authentication, and domain join scenarios
• Automating user and group lifecycle management including dynamic groups and bulk operations
• Implementing RBAC and Azure PIM with Just-In-Time (JIT) access and approval workflows
• Managing Access Reviews and Entitlement Management for governance and compliance
• Configuring Password Protection, SSPR, and Smart Lockout policies
• Managing Azure Key Vault including certificate lifecycle, access policies, and private endpoints
• Monitoring tenant health using audit logs, sign-in logs, and diagnostic reporting
• Implementing and managing Azure Managed Identities for secure resource access
• Administering Administrative Units in Microsoft Entra ID for delegated management
• Troubleshooting and resolving issue related to Graph API

IAM L2 Engineer at Amadeus (via Accenture) (2021-12 – 2025-09)

• Managing environments including On-Prem AD, Domain Controllers, Entra ID, One Identity ARS, Azure AD Connect, MBAM, Azure MFA, SSPR, and RBAC
• Automating user and group lifecycle using One Identity platform
• Troubleshooting synchronization issues between Workday → AD → Azure AD
• Configuring Azure PIM and enforcing MFA for privileged accounts
• Designing and implementing Conditional Access policies to restrict unauthorized access
• Configuring Password Protection and Smart Extranet Lockout
• Implementing Identity Protection risk-based policies
• Managing Azure SSPR and identity security configurations
• Managing Azure AD applications including access control and certificate lifecycle
• Integrating OKTA with Active Directory and managing directory synchronization
• Troubleshooting Azure AD Connect synchronization issues
• Supporting users with Azure MFA issues and migration from on-prem MFA
• Monitoring and resolving Domain Controller-related issues
• Creating SOPs and documentation for operational efficiency
• Leading knowledge transfer sessions and acting as SME during transitions
• Developing PowerShell scripts for automation (account creation, group management, license monitoring)
• Managing admin accounts and RBAC role assignments
• Leading client calls with stakeholders and SMEs

Bachelor's Degree in BCA – Marian College, Kuttikanam (2018 – 2021)

Higher Secondary Education – SVRV NSS HSS, Vazhoor

Secondary Education – Eden Public School