Careers at Charles Schwab

Your opportunity

At Charles Schwab, our purpose is simple: we champion client’s goals with passion and integrity. Guided by honesty, mutual respect and a commitment to doing what’s right, we bring innovation, education, and service together to help shape financial futures. Our people are the foundation of our success – they approach their work with curiosity and collaboration, coming together to create solutions that make a meaningful impact for clients and communities. As we expand into India, we are bringing this same culture of inclusion, learning, and opportunity to new talent. Joining us means becoming part of a global team where your work matters and your future can take shape.​

​​Our Hyderabad location is central to Schwab’s growth, bringing together talented people and technology to drive innovation, scale and efficiency. Here, you will work alongside teams who create solutions that support millions of clients every day. The work you do is more than daily operations – it’s a chance to experiment, learn, and build within a values-driven, supportive environment. This is a unique opportunity to be part of our early growth phase and shape something new, backed by the stability and strength of a Fortune 500 company. Your impact begins on day one, and your contributions will help define our future in the region​.

​​This is an excellent opportunity for someone looking to grow into a senior IAM or security engineering role. This is an exciting opportunity to work at the intersection of traditional Active Directory engineering and Entra ID supporting modern cloud identity, helping drive the evolution of enterprise authentication and access management. You will gain hands-on experience with Active Directory, Microsoft Entra ID, Zero Trust security principles, modern authentication technologies, and large-scale identity platforms while supporting critical business services. The role provides exposure to enterprise-wide security initiatives, automation, and identity modernization programs, offering a clear path toward advanced IAM, cloud security, or identity architecture careers. If you enjoy solving complex technical challenges, improving security posture, and making a measurable impact across a large organization, this role offers tremendous growth and learning opportunities.

What you have

Key Responsibilities

​​Active Directory Engineering:

• Administer and maintain Active Directory forests, domains, organizational units (OUs), Group Policy Objects (GPOs), DNS, and domain controllers.
• Troubleshoot complex authentication, authorization, replication, DNS, and Kerberos issues.
• Support Active Directory security hardening initiatives and remediation activities.
• Maintain AD operational health, monitoring, patching, and disaster recovery procedures.
• Participate in AD modernization and technical debt reduction efforts.

 Microsoft Entra ID & Hybrid Identity:

• Support hybrid identity environments utilizing Microsoft Entra Connect and cloud synchronization.
• Assist with administration of:
• Users, Groups, and Administrative Roles
• Enterprise Applications
• Single Sign-On (SSO)
• Multi-Factor Authentication (MFA)
• Conditional Access Policies
• Support application onboarding using SAML, OAuth2, and OpenID Connect.
• Monitor Entra ID sign-in activity, security alerts, and identity-related incidents.

Required Experience

• 3-5 years of experience in Active Directory engineering, Windows infrastructure, or identity management.
• Strong knowledge of:
  • Active Directory Domain Services (AD DS)
  • Microsoft Entra ID (Azure AD)
• Group Policy (GPO)
  • Domain Controller administration
  • Kerberos and LDAP authentication
  • AD troubleshooting
• Working knowledge of:
  • Microsoft Entra ID (Azure AD)
  • MFA and Conditional Access
  • Identity Governance concepts
  • SSO technologies
• Familiarity with:
  • SAML
  • OAuth2
  • OpenID Connect
• Strong troubleshooting and analytical abilities. Excellent communication skills. Commitment to continuous learning and professional growth.
• Experience with PowerShell automation.
• Understanding of security frameworks and identity protection principles.

Preferred Experience

Technology:

• Microsoft Graphs
• Conditional Access, MFA, SSO (SAML/OIDC/OAuth)