Active Directory Administrator

Job description

- **AD Administration & Operations, Identity & Hybrid Integration** - Manage and maintain Active Directory environments including: - User, group, and service account lifecycle - Organizational Unit (OU) design and maintenance - Group Policy Objects (GPO) creation, optimization, and troubleshooting - Integrate on-prem AD with **Azure AD (Entra ID)** using: - Azure AD Connect / Cloud Sync - Federation (ADFS) / Pass-through authentication - Support SSO, MFA, Conditional Access integration - **AD Architecture & Design, Security & Hardening** - Design and implement: - Forest and domain architecture - Multi-site topology and replication strategies - Trust relationships (intra/inter-forest, external) - Define and maintain **naming conventions, OU hierarchy, and delegation models** - Implement AD security best practices: Tiered security model (Tier 0/1/2) - Privileged Access Workstations (PAW) - Least privilege access and RBAC - Manage privileged identity controls using **PAM/PIM solutions** - Support security tools such as: Microsoft Defender for Identity - SIEM integration (Sentinel/Splunk) - **DNS, DHCP administration & Authentication Services** - Manage AD-integrated DNS infrastructure - Troubleshoot Kerberos, NTLM, LDAP authentication issues - Administer DHCP services and IP address management - **Active Directory Certificate Services (ADCS) / PKI** - Design and manage PKI infrastructure: - Root CA, Subordinate CA hierarchy - Certificate templates and enrollment policies - Manage CRL/AIA configuration and certificate publishing - Implement certificate lifecycle management:  Issuance, renewal, revocation - Ensure secure integration with applications and external CAs - **Monitoring, Troubleshooting & Optimization** - Monitor AD health: - Replication (repadmin, dcdiag) - SYSVOL/DFSR health - Domain Controller performance - Perform root cause analysis for complex AD issues - Optimize AD performance and reduce replication latency - **Backup, DR & Recovery** - Define and test AD backup strategies - Perform: - Authoritative & non-authoritative restores - Object-level recovery - Lead **Active Directory Forest recovery planning** - Support AD upgrades and functional level changes - Execute: - Domain migrations and consolidations - AD restructuring projects - Participate in cloud and datacenter transformation initiatives