Active Directory engineer or architect

Participate and operate on large scale implementation of medium to high complexity of Active Directory environments, participating in security hardening, engineering, and operational responsibilities on the team to accomplish corporate security initiatives and tasks. This role would participate in the work intake, act as an advisor for multiple AE Active Directory teams and business owners looking to harden their Active Directory environment to corporate security standards, and assist in the tactical and strategic tasks within larger projects and objectives. Additionally, this individual is a key resource in the organization’s effort to secure, consolidate, and simplify Active Directory environments from mergers and acquisitions. Deliverables include independent or participation in group efforts, leadership of small groups to perform specific goals or objectives, clear communication of issues and goals met, technical documentation, investigation/research of unusual Active Directory activity, participation in AD audit reviews and investigations, participation in the 24x7 On-Call rotation, and on-going stability and performance monitoring of Active Directory.

Responsibilities

Operationally manage Active Directory infrastructure of multiple Active Directory environments.

Review, investigate, and remediate any AD performance irregularities identified by the management and monitoring tools.

Work with the business and application teams to increase the security of the Active Directory environments by remediating identified security vulnerabilities.

Leverage security scanning tools to monitor and maintain the Active Directory environment to the published baseline security standards.

Work with the business and application teams to migrate their applications to the core AD environment or cloud environment.

A senior Active Directory engineer or architect that has extensive experience working on domain integration / migration projects, extensive familiarity with the tools / products listed below to manage and maintain multiple separate Active Directory infrastructures.

Ideal candidate will have extensive experience working with the business partners and application teams to prepare them to increase the security of their utilization of Active Directory resources and migrating their application to the core AD or cloud environment as part of the Active Directory domain consolidation efforts.

What skills/attributes are required : Active Directory infrastructure engineering (15+ years), Active Directory performance management / tuning (8+ years), server hardware management (6+ years), Vmware ESX / Hyper-V engineering and operations (6+ years)

What skills/attributes are preferred :

PowerShell scripting / programming, VB scripting, Batch scripting,

System Center Operations Manager (SCOM),

Microsoft EndPoint Configuration Manager (SCCM/MECM),

Quest InTrust, Quest Change Auditor, Quest Enterprise Reporter, Quest GPO Admin, Quest Recovery Manager for AD (RMAD), Bloodhound Enterprise, Microsoft Risk Assessment Program (RAP), Firewall engineering / operations, Networking / subnetting, DNS.