AD Engineer L3 - IN

Overview

Join a team of engineers in the first phase of a complex on-prem to cloud delivery, moving to a manage and operate mode with detailed documentation and handover to support teams around the world.

What you'll need

• Deep understanding and practical experience with Microsoft Active Directory (+8 years)
• Group Policy configuration and implementation for servers and workstations, including item-level targeting, scopes, permissions and WMI filtering
• Group Policy Modelling and Analysis
• Security hardening of environments adhering to Microsoft and CIS benchmarks
• Formulating LDAP queries
• AD Sites and replication topology
• Service account administration, including Managed Service Accounts (MSA)
• Advanced Group Policy Management (AGPM) and Version Control
• Experience implementing Distributed File System (DFS)
• Experience implementing Active Directory Federation Services (ADFS)
• Working knowledge of TCP/IP, DNS, DHCP, Server Virtualisation and PowerShell
• Strong hands-on experience managing AD-integrated DNS and public DNS records using third-party DNS management platforms such as GoDaddy or equivalent tools
• Proven experience administering and troubleshooting complex Active Directory environments involving multiple domains and multi-forest environments
• Hands-on experience with AD–Microsoft Entra ID integration, directory synchronization configuration and customization, synchronization troubleshooting, and resolving identity synchronization issues
• Strong understanding and hands-on experience with Azure-based SSO implementations using SAML 2.0 and OpenID Connect (OIDC) protocols
• Public key infrastructure (PKI), including SSH, key management and rotation, and certificate life cycle management
• Stand-alone and AD integrated CA infrastructure, and operating an offline root CA
• Ability to confidently navigate the Azure Portal, as the target environment is hosted in Microsoft Azure

Nice to have

• AD Migration and Forest Consolidation: experience using Quest migration tools or equivalent third-party migration solutions for multi-forest consolidation, Active Directory migration, and cross-forest integration
• Azure: Active Directory (Entra), Intune, Management Groups, IAM, Apps, SPNs, etc.; Key vaults; Storage accounts; Virtual machine creation and management
• DevOps: Pipelines and Boards, Compute Gallery, Terraform, and OS image management automation (Hashicorp Packer)

What you'll do

• Take the lead as a self-starter in a fast-paced production environment
• Challenge decisions and communicate clearly with the customer's lead engineers
• Produce highly detailed documentation and in-depth handover to support teams around the world
• Inform and educate others based on your deep technical experience

Details

• Work from home, remote