Active Directory Engineer

Key Responsibilities:

• Administer and support the Active Directory infrastructure, including Group Policy, DNS, DHCP, and replication.
• Implement and maintain Microsoft 365 integrations with Active Directory, including hybrid identity and Azure AD Connect.
• Configure, deploy, and manage ADFS and related federation services for secure authentication and single sign-on (SSO).
• Design and maintain a Tier-0 AD architecture, ensuring security, isolation, and control of privileged access.
• Administer and maintain Windows Server environments, including patching, performance tuning, and issue resolution.
• Manage and maintain the Certificate Authority (CA) and ensure adherence to PKI best practices.
• Participate in infrastructure projects, including system upgrades, migrations, and automation initiatives.
• Monitor system performance and availability, respond to incidents and service requests promptly.
• Collaborate with security and compliance teams to ensure adherence to organizational policies and standards.
• Maintain comprehensive documentation for procedures, configurations, and changes in line with ITIL best practices.

Requirements

• Minimum 5 years of experience in Windows Infrastructure Administration.
• Strong expertise in Active Directory, including forest/domain design, OU structure, and Group Policy Management.
• Proven experience with Microsoft 365 integration and hybrid identity solutions (e.g., Azure AD Connect).
• Hands-on experience with ADFS and federation technologies.
• Knowledge of Tier-0 AD architecture and Privileged Access Management (PAM).
• Experience managing Certificate Authority servers and understanding PKI concepts.
• Proficiency in PowerShell scripting for automation and administrative tasks.
• Solid understanding of networking fundamentals, including TCP/IP, DNS, DHCP, and Certificates.
• Strong analytical, troubleshooting, and communication skills.
• Microsoft certifications such as MCSE, MS-102, AZ-800/801, or equivalent.
• Experience with identity governance and privileged access tools (e.g., CyberArk).
• Exposure to cloud platforms such as Azure or AWS.
• Familiarity with the ITIL framework and change management processes.