Senior Active Directory Engineer

We are seeking an experienced Active Directory Subject Matter Expert (SME) to join our team. As an Active Directory SME, you will be responsible for designing, implementing, and maintaining our Active Directory infrastructure while leveraging automation tools and techniques to streamline processes and increase efficiency. The candidate should have extensive knowledge and hands-on experience in Active Directory, Azure AD, Azure AD Domain Services, ADFS/MS-SSO, Azure AD Connect, Windows Server 2012 to 2022, and Windows Security. The ideal candidate should have 7-9 years of AD experience in large environments to lead upgrade projects and proactively ensure best practices and high security measures are crafted and completed on-premises and in the cloud. In addition to troubleshooting complex technical issues and providing support for our operations team, this candidate will bring a product-led service ownership mentality to own and solve issues/gaps in our environment and develop comprehensive solutions for our platform.

Responsibilities:

• Design, deploy, and manage Active Directory services, including domains, forests, trusts, group policies, and replication.
• Serve as the primary point of contact for all Active Directory-related issues, providing troubleshooting and resolution for complex problems.
• Develop and implement automation solutions using scripting languages such as PowerShell to automate repetitive tasks, provisioning, and configuration management.
• Collaborate with cross-functional teams to integrate Active Directory services with other systems and applications, ensuring seamless authentication and access control.
• Evaluate and recommend improvements to the existing Active Directory infrastructure, keeping abreast of industry standard processes and emerging technologies.
• Lead projects related to Active Directory migration, consolidation, and upgrade initiatives, ensuring minimal disruption to business operations.
• Create and maintain documentation, including standard operating procedures, architecture diagrams, and configuration guides.
• Stay current with security trends and vulnerabilities related to Active Directory, implementing measures to enhance security posture and mitigate risks.
• Provide mentorship and knowledge transfer to junior team members, fostering a culture of continuous learning and development.

Requirements:

• Bachelor’s degree in Computer Science, Information Technology, or work-related experience. (Master’s degree preferred)
• 7+ years of experience in designing, implementing, and managing Active Directory environments in enterprise-level organizations.
• Proficiency in automation tools and scripting languages, particularly PowerShell/Python, for automating Active Directory tasks and processes. Ansible is a plus.
• Strong understanding of identity and access management principles, including LDAP, Kerberos, SAML, and multi-factor authentication.
• Experience with directory services integration, including LDAP, Azure AD, and third-party identity providers.
• Solid grasp of networking concepts, including TCP/IP, DNS, DHCP, and VPN technologies.
• Certifications such as Microsoft Certified: Azure Solutions Architect Expert, Microsoft Certified: Identity and Access Administrator Associate, or equivalent certifications are a plus.
• Excellent communication skills with the ability to effectively communicate technical concepts to both technical and non-technical stakeholders.
• Strong analytical and problem-solving skills, with a keen attention to detail and the ability to prioritize and manage multiple tasks simultaneously.