Active Directory Engineer

Key Responsibilities • Manage and support Active Directory infrastructure, including Group Policy, DNS, DHCP, and replication. • Implement and maintain Microsoft 365 integration with Active Directory, including hybrid identity solutions. • Configure and support ADFS and related federation services for secure authentication and SSO. • Design and maintain Tier-0 AD architecture, ensuring security and segregation of privileged access. • Administer and maintain Windows Server environments, including patching, performance tuning, and troubleshooting. • Administer and maintain the Certificate Authority (CA) server • Participate in infrastructure projects, including upgrades, migrations, and automation initiatives. • Monitor system performance and availability and respond to incidents and service requests. • Collaborate with security and compliance teams to ensure adherence to policies and standards. • Document procedures, configurations, and changes in accordance with ITIL practices. Requirement • Minimum 5 years of experience in Windows Infrastructure administration. • Strong knowledge of Active Directory, including forest/domain design, OU structure, and GPOs. • Experience with Microsoft 365 integration, including Azure AD Connect and hybrid identity. • Hands-on experience with ADFS and federation services. • Familiarity with Tier-0 AD architecture and privileged access management. • Experience managing Certificate Authority servers and understanding of PKI concepts. • Proficiency in PowerShell scripting for automation and administration tasks. • Understanding of networking fundamentals (TCP/IP, DNS, DHCP, Certificate Authority). • Excellent problem-solving and communication skills. • Microsoft certifications (e.g., MCSE, MS-102, AZ-800/801). • Experience with identity governance and privileged access tools (e.g., CyberArk). • Exposure to cloud platforms such as Azure or AWS. • Familiarity with ITIL framework and change management processes.