--- title: 'Identity & Access Operations Engineer (L2) – Active Directory, LDAP & ADFS at Gruve' canonical: 'https://feeny.ai/job/identity-access-operations-engineer-l2-active-directory-ldap-adfs-gruve-india-tg3gbwqgensx' type: 'job' last_seen: '2026-11-11' --- # Identity & Access Operations Engineer (L2) – Active Directory, LDAP & ADFS at Gruve - **Company:** Gruve - **Location:** India - **Work type:** remote - **Posted:** 2026-11-06 - **Last confirmed live:** 2026-11-11 - **Apply:** https://gruve.ai/careers/?gh_jid=5474032008 ## Job description ## About Gruve Gruve is an innovative software services startup dedicated to transforming enterprises to AI powerhouses. We specialize in cybersecurity, customer experience, cloud infrastructure, and advanced technologies such as Large Language Models (LLMs). Our mission is to assist our customers in their business strategies utilizing their data to make more intelligent decisions. As a well-funded early-stage startup, Gruve offers a dynamic environment with strong customer and partner networks. Position summary: We are looking for a skilled L2 Identity & Access Administrator to support enterprise identity infrastructure, including Active Directory (AD), Lightweight Directory Access Protocol (LDAP) and Active Directory Federation Services (ADFS). The role is responsible for incident resolution, identity administration, authentication troubleshooting, access management, monitoring and security compliance. The administrator will work closely with L1 operations, L3 SMEs, Security and Application teams to maintain identity service availability, secure access and SLA compliance across global operations. Key Responsibilities: Active Directory (AD) Operations - Provide L2 support for Active Directory incidents, alerts and service requests. - Administer user accounts, groups, computer accounts, password resets, account unlocks and access permissions. - Troubleshoot authentication failures, account lockouts, Group Policy issues and domain connectivity. - Support AD replication, domain controller health checks, DNS and time synchronization troubleshooting. - Perform approved Group Policy changes, account modifications and access-related activities. - Support AD security reviews, privileged access controls and remediation of identified vulnerabilities. LDAP Operations - Support LDAP directory services, connectivity and authentication-related incidents. - Troubleshoot LDAP bind failures, connection issues, directory queries and access permissions. - Validate LDAP configurations, service account access and directory integration with applications. - Monitor directory service availability and investigate replication or synchronization issues where applicable. - Coordinate with Application and Directory Services teams to resolve integration issues. ADFS & Federation Operations - Provide L2 support for ADFS authentication, federation and single sign-on (SSO) incidents. - Troubleshoot token issuance failures, federation errors, certificate issues and authentication problems. - Perform basic health checks on ADFS services, federation servers and related components. - Support approved certificate renewals, configuration changes and service validation. - Troubleshoot relying-party trust and application federation issues. - Escalate complex federation, claims-rule and architecture issues to L3 SMEs. Operations & Service Management - Resolve identity-related incidents and service requests within defined SLAs. - Monitor alerts and service health for AD, LDAP and ADFS infrastructure. - Execute approved changes and follow established access management and security procedures. - Support major incident restoration, problem investigation and root-cause analysis activities. - Follow ITIL Incident, Problem, Change and Request Management processes. - Maintain runbooks, operational documentation, incident records and shift handover notes. - Coordinate with L1/L3, Security, IAM, Network, Windows and Application teams. - Ensure timely escalation, SLA compliance and effective APAC–EMEA–NLAM shift handovers. Required Skills & Qualifications: - Hands-on experience in Active Directory administration and troubleshooting. - Strong knowledge of users, groups, account lockouts, authentication, Group Policy and AD replication. - Working knowledge of LDAP, directory queries, bind operations and application integrations. - Experience supporting ADFS, federation services, SSO and certificate-related issues. - Understanding of DNS, Kerberos, NTLM, SSL/TLS and authentication protocols. - Knowledge of service accounts, access permissions, privileged access and identity security practices. - Experience with monitoring tools, ServiceNow or equivalent ITSM platforms. - Understanding of ITIL Incident, Problem, Change and Request Management. - Basic PowerShell scripting skills for identity administration and troubleshooting. - Experience in enterprise 24x7 production operations and SLA-driven support. Preferred Skills & Qualifications: - Microsoft identity and access management certifications or equivalent training. - Exposure to Microsoft Entra ID (Azure AD), Entra Connect and hybrid identity environments. - Knowledge of SAML, OAuth 2.0, OpenID Connect and modern authentication. - Familiarity with privileged access management (PAM), MFA and conditional access. - Experience with AD auditing, security monitoring and compliance remediation. - Knowledge of ServiceNow workflows and identity lifecycle management. - Experience supporting global follow-the-sun operations. ## Why Gruve At Gruve, we foster a culture of innovation, collaboration, and continuous learning. We are committed to building a diverse and inclusive workplace where everyone can thrive and contribute their best work. If you’re passionate about technology and eager to make an impact, we’d love to hear from you. Gruve is an equal opportunity employer. We welcome applicants from all backgrounds and thank all who apply; however, only those selected for an interview will be contacted. ## About Gruve ## Company Overview - **One-liner**: Gruve provides AI-native cybersecurity, infrastructure, and data services that help enterprises deploy and secure AI at scale. - **Entity Type**: Private (Series A, Seed stage) - **Headquarters**: Redwood City, California, United States - **Founded**: 2024 - **Founders**: Tarun Raisoni (CEO, Co-Founder) ## Core Business - **Industry**: IT Services and IT Consulting; AI Security & Infrastructure - **Target Customers**: Large enterprises (B2B), including those in regulated industries requiring private AI deployment and advanced security operations. - **Mission / Purpose**: Enable scalable, secure, and measurable AI execution in production by delivering an AI-native approach to enterprise services. ## Products & Services - **PulseAI**: A private AI infrastructure platform that enables enterprises to deploy generative AI on-premises, in the cloud, or in hybrid environments – production-ready in under two weeks. (SaaS/infrastructure) - **AI SOC**: An AI-driven Security Operations Center that combines AI detection, automated investigation, and intelligent response to improve security team efficiency and reduce risk. (Managed service/SaaS) - **Digital Forensics & Incident Response**: Structured methodologies for preserving evidence, investigating incidents, and accelerating recovery. (Service) - **Enterprise AI Transformation Services**: Consulting and implementation services including data science, Kubernetes SRE, forward deployment engineering, and AI solution architecture. (Professional services) ## Market Standing - **Valuation**: Not disclosed - **Total Funding**: USD $57.5 million (across Seed and Series A rounds) - **Key Investors**: Mayfield Fund (lead in Series A), Xora Innovation (lead in prior round) - **Notable Acquisitions**: SecurView (July 2024), NetServ (September 2024), Lumos (October 2024) - **Growth Signals**: 120.3% YoY employee growth (from ~134 to 413 employees); operations across 9 countries; featured in Cybersecurity Insiders on AI agent governance. ## Competitive Advantages - **AI-Native Architecture**: Unlike legacy stacks built for static software, Gruve designs for dynamic AI workloads (probabilistic decisions, context retrieval, autonomous actions). - **Speed to Scale**: Claims 500MW+ of distributed edge AI inference capacity and a 30% cost advantage over alternatives. - **Integrated Security & AI**: Combines private AI infrastructure (PulseAI) with an AI-powered SOC, covering the entire lifecycle from deployment to defense. - **Talent & Expertise**: Team draws from top firms (Cisco, IBM, Infosys) and includes deep Kubernetes, data science, and cybersecurity specialists. ## Strategic Focus - **Private AI Deployment**: Helping enterprises keep AI workloads on their own infrastructure to maintain data ownership, governance, and security. - **AI Security Governance**: Developing solutions to govern AI agents as a new attack surface, as highlighted in their recent thought leadership. - **Global Expansion**: Operating in 9 countries (US, India, South Korea, UAE, Singapore, Japan, Saudi Arabia, Germany, Canada) with plans to scale further. - **Partner Ecosystem**: Working closely with hyperscalers (noted VP of Hyperscaler Solutions) and achieving Red Hat advanced tier partner status. ## Why Work Here - **High Growth Environment**: Headcount more than doubled in the past year, offering rapid career progression and the chance to shape a young company. - **Culture of Trust**: Core values include giving trust from day one, constructive feedback, and a championship mindset. - **Global & Remote-Friendly**: Offices in 4 countries (US, India, Singapore, UAE) and remote roles posted; a distributed team with cultural diversity. - **Learning & Impact**: Mentorship programs, opportunities to lead innovative projects in AI and security, and the ability to work on cutting-edge infrastructure. - **Notable Perks**: Focus on career development, knowledge sharing, and a "people-first" approach. ## Sources 1. [gruve.ai – Company homepage](https://gruve.ai/) 2. [gruve.ai – About Us](https://gruve.ai/about-us/) 3. [gruve.ai – Life at Gruve](https://gruve.ai/life-at-gruve/) 4. [linkedin.com/company/gruveai – LinkedIn Company Page](https://www.linkedin.com/company/gruveai) 5. [job-boards.greenhouse.io/gruve – Careers Page](https://job-boards.greenhouse.io/gruve) ## Other roles at Gruve - [Identity & Access Support Analyst (L1) – Active Directory, LDAP & ADFS](https://feeny.ai/job/identity-access-support-analyst-l1-active-directory-ldap-adfs-gruve-india-0ye2c1xj0c12) — India - [Security Operations Analyst (L1) – MS- Defender](https://feeny.ai/job/security-operations-analyst-l1-ms-defender-gruve-india-ynsbs12h8w8v) — India - [Endpoint Operations Analyst (L1) – Intune & SCCM](https://feeny.ai/job/endpoint-operations-analyst-l1-intune-sccm-gruve-india-7t5jxvke67hz) — India - [L1 System Administrator | Windows, VMware & Cloud Operations](https://feeny.ai/job/l1-system-administrator-windows-vmware-cloud-operations-gruve-india-2j0emswr2q06) — India - [Endpoint Security Operations Engineer (L2) – Microsoft Defender](https://feeny.ai/job/endpoint-security-operations-engineer-l2-microsoft-defender-gruve-india-e2qkn15z5hnr) — India - [Endpoint Management Engineer (L2) – Intune & SCCM/MECM](https://feeny.ai/job/endpoint-management-engineer-l2-intune-sccm-mecm-gruve-india-ystzggvts8d8) — India - [Backup & Storage Engineer (L2) – Commvault, NetBackup & Veeam](https://feeny.ai/job/backup-storage-engineer-l2-commvault-netbackup-veeam-gruve-india-4mp4ezra5v14) — India - [Vulnerability Management & Security Assessment Engineer (L2) – Qualys VMDR](https://feeny.ai/job/vulnerability-management-security-assessment-engineer-l2-qualys-vmdr-gruve-india-ex58qf4xtn7f) — India - [L1 PAM Operations Engineer | Privileged Access Management (PAM) Operations](https://feeny.ai/job/l1-pam-operations-engineer-privileged-access-management-pam-operations-gruve-6bzxs5103x6p) — India - [Director of Human Resources](https://feeny.ai/job/director-of-human-resources-gruve-redwood-city-m1azzpdexmrc) — Redwood City, CA