The Senior Active Directory Engineer performs critical functional support/maintenance/expansion tasks for Microsoft Active Directory, Domain Controllers, PKI, Group Policy, and other relevant/core domain services, both on-prem and in the cloud. Under the direction of lead Active Directory engineers, they perform daily BAU tasks to maintain the current environment as well as develop/expand and integrate with other teams and products/services, following Microsoft Security best practices.
Roles and Responsibilities
Perform maintenance and administration of the primary and additional/legacy on-prem Active Directory domains (user, group, policy, organizational unit objects)
Triage and escalate tickets
Create and update documentation
Support end users
Work with other senior staff members to resolve escalated, complex incidents
Perform cross-functional work with other teams
Continually seek opportunities to improve both infrastructure and technical skills, including automation and scripting.
Requirement
At least 7 years overall IT experience, with at least 3-5 years of experience working with Microsoft Identity technologies at minimum: Active Directory, Group Policies, forest/domain trusts, PKI, DNS, DHCP, LDAPS, and Windows Server
Deep experience working with and supporting Windows server technologies, troubleshooting Active Directory-related issues, policies, and basic networking
Moderate to advanced scripting experience in PowerShell or other scripting languages for AD management
Basic familiarity with Tiered Security concepts in Active DirectoryExcellent written and verbal communication skills
Nice to have
Experience with Entra/Azure AD, AWS-managed ADExperience with Jira/Confluence
Experience with non-Microsoft DNS technologies, including Infoblox
Experience with Okta, LogicMonitor, Splunk, Tanium, Crowdstrike, Google Workplace, CI/CD tools, VMware, Git/source control
