Himanshu Vyas

• Managing and maintaining Asia Active directory domain(DNS,GPMC,AzureAD,new site ADDC deployments and capacity plannings
• Domain migrations:From LATAM to AP/Global domains
• Managing and maintenaning identities between Okta and Active directory environments
• Workday imports
• Okta AD integration imports.

Primary responsibility for the Active Directory Administration to provide strategic and tactical direction for the Active Directory Services, Identity and Access Management, Roles Based Access Control and Segregation of Duties.

· IAM role involves, RBAC role assignment, Role definition,Scope,multiple role assigment,role assignment for managed identity, Identity and resolves synchronization, Assign owners to key tasks, On-premises identity synchronization, Lifecycle management, Synchronization scope and object filtering, Automated user provisioning to apps.

· Worked on Active Directory (AD) Domain Consolidation. Service delivery of the Azure Active Directory and the Identity Management team within Microsoft cloud platform (Azure etc.) Designed and implemented a new ROLE BASED admin model.

· Active Directory Design and support (GPOs, OUs, LDAP, Sites, Replication, etc.)

· Domain controllers operating systems In place migrations from windows 2008 r2 to windows 2012 R2 & 2016 across all sites .

· Azure AD and security related topics like Application permissions, IAM, RBAC, User account management, O365, etc. with relevant PowerShell skills and process management capabilities.

· Identity Federation, SAML, OAuth2, ADFS and Azure AD.

· Cloud Administrator on Microsoft Azure, involved in configuring virtual machines, storage accounts, resource groups.

· Planning, creating and managing AD group policy templates and policies administration, operating system security patches upgrade procedure for secure computing.

· Explore the possibilities of adding new features and roles which suits the global operations.

· LDAP over SSL Set up for the domain controller.

· 2FA (Two step Auth set up testing).

· Windows 2012 server - Forest, Domain trust, AD , DFS , DNS, WINS, DHCP, Group Policy administration and management.

• Primary responsibility for the Active Directory Administration to provide strategic and tactical direction for the Active Directory Services, Identity and Access Management, Roles Based Access Control and Segregation of Duties
• IAM role involves, RBAC role assignment, Role definition,Scope,multiple role assigment,role assignment for managed identity, Identity and resolves synchronization, Assign owners to key tasks, On-premises identity synchronization, Lifecycle management, Synchronization scope and object filtering, Automated user provisioning to apps
• Worked on Active Directory (AD) Domain Consolidation
• Service delivery of the Azure Active Directory and the Identity Management team within Microsoft cloud platform (Azure etc.) Designed and implemented a new ROLE BASED admin model
• Active Directory Design and support (GPOs, OUs, LDAP, Sites, Replication, etc.)
• Domain controllers operating systems In place migrations from windows 2008 r2 to windows 2012 R2 & 2016 across all sites
• Azure AD and security related topics like Application permissions, IAM, RBAC, User account management, O365, etc
• With relevant PowerShell skills and process management capabilities
• Identity Federation, SAML, OAuth2, ADFS and Azure AD
• Cloud Administrator on Microsoft Azure, involved in configuring virtual machines, storage accounts, resource groups
• Planning, creating and managing AD group policy templates and policies administration, operating system security patches upgrade procedure for secure computing
• Explore the possibilities of adding new features and roles which suits the global operations
• LDAP over SSL Set up for the domain controller
• 2FA (Two step Auth set up testing)
• Windows 2012 server - Forest, Domain trust, AD , DFS , DNS, WINS, DHCP, Group Policy administration and management
• Two positions (1.Acccount Lead Engineer (LATAM region) 2.Global Active directory lead (WPP account)
• Job Profile: Regional Account lead & Global Active directory admin
• Technical Leadership - Drive through the Technical Teams and SMEs a culture of continual technical improvement, including identifying and mitigating existing defects in the environment as well as preventing other potential defects from being produced
• Technical Incident Management - Supports the process for Technical Incident Management on account and supports the SIL in ensuring that the Account has Engineers or SMEs capable of working through Technical recovery plans
• Work with the SIL and SAM to improve process execution for Technical Incident Management and Major Incident Management, Problem and Change and Availability Management(MTTR)
• Currency – ALE’s are required to keep OPCO currency to latest and if in risk raise it to management attention to attain the currency level across OPCO’s and GEO’s
• Tooling – ALE’s should work with Tools program leads to adopt all the Tool sets across OPCO’s and Geo’s
• ALE’s should work with T&T to understand Migration Plan for their OPCO and Geo
• Part Of Enterprise Systems Team(WWIT) which manages systems like Active directory(Domain design/implementations/migrations/support,DNS,DHCP,GPO's),QuestModules(ChangeAuditor,Forest Recovery Manager, Directory Analyzer, SOX reporting),Enterprise Patch management using Landesk,AV management of SOPHOS across all worldwide locations
• Manage AD users, Computers, Groups, Group memberships, OUs, OU Delegations, Service accounts and AD cleanup activity as per the Compliance report
• Migrations/Consolidations plans, documentations with an office location
• Migrating local offices from their own domain to the centralized Active Directory domain
• Advanced Active Directory Tasks that includes AD management using Microsoft PowerShell
• Trouble shooting Active Directory replication issues, FSMO roles, Trusts, Kerberos
• Disaster Recovery: Running repairs using ESENTUTL/NTDSUTIL.Also perform OFFLINE DEFRAGMENTATION on the domain controllers as per the schedule
• Troubleshoot Account lockout issues
• Good knowledge in ADFS & PKI.

• Active Directory lead,Wintel Admin L3/Escalation support
• Responsibilities as AD and, Troubleshoot windows servers on priority basis, Disaster recovery, Active directory Replication, Group policies, FRS , GC issues, FSMO role transfer/seizer , DNS, DHCP
• Managing technical support team which is responsible for infrastructure services on Microsoft Windows technology
• Troubleshooting Active Directory replication problems
• Creating standard process for group policy deployment
• Active Directory users and groups management
• Implementation and administration of DNS, DHCP and WINS
• Review and remediate software distribution failures and to eliminate the problems that causes those failures
• Design and implement a mechanism for handing on-off technical issues to other technical teams for resolution
• Creating standard Net-backup policies and taking back-up of the servers
• Restoring the data as per the customer request
• Preparing monthly work status report and updating technology specific documents
• Remote administration of servers for any problem across offices related to Microsoft Windows operating system
• Server virtualization, Bare Metal Restore (BMR technology) and disaster Recovery
• Conducting Team trainings on Active directory related topics in different phases
• Coordinating with the team to create/modify SNMP traps to enhance conditional monitoring system.

• Dell Desktop Support
• Roles & Responsibilities:
• Troubleshooting Issue that can be faced with regards to computer hardware and basic software over the phone and via email
• Had to document resolutions for certain issues, thus creating a knowledge base for new Agents
• Training new Support Officers on Windows Vista (Which was newly Launched at that time)
• Making sure that the machines were updated with the latest hot fixes and up to date with the required level of technology
• Had to make sure the users get their level of rights on their machines
• Monitor the performance of the machines
• Keeping a track of the hardware used/ordered from the vendor.