Active Directory Engineer

• Administration, monitoring and continuous improvement of the on-premises Active Directory infrastructure across multiple forests and multiple domains.
• Ensuring system availability, reliability and authentication service continuity across all DCs, DNS, and replication processes in a critical banking environment.
• Proactive capacity planning, performance monitoring, and lifecycle management of domain controllers and related infrastructure.
• Deployment, patching and version upgrades of servers and services, following vendor lifecycle and security best practices.
• Troubleshooting and resolution of incidents related to authentication (Kerberos, NTLM), directory services, DNS, SPNs, keytabs, and LDAP integrations.
• Integration and support of non-Microsoft systems (e.g., Linux) via LDAP/Kerberos, ensuring seamless authentication.
• Design and implementation of RBAC-based delegation models to allow other teams to manage objects without impacting service.
• Automation and scripting using PowerShell to improve operational efficiency and reduce manual intervention.
• Collaboration with internal IT teams and international counterparts to resolve technical issues and ensure service continuity.

Essential:

• Minimum 2-3 years’ experience in Active Directory on-premises administration in critical, complex environments (multiple domains and forests).
• Experience as a Windows Server Systems Administrator covering implementation, maintenance, patching, and upgrades.
• Strong knowledge of Microsoft Active Directory services: AD Trusts, GPOs, DHCP, DNS, replication, Kerberos/NTLM, and certificates.
• Experience with authentication protocols and integration with non-Microsoft systems (Linux/Windows, LDAP/Kerberos).
• Proven ability in patch management, updates, and lifecycle maintenance of domain controllers and related services.
• Skilled in troubleshooting and log analysis to maintain service availability.
• Experience with automation and scripting (PowerShell) to improve efficiency and reduce errors.
• Fluent in English (B2/C1) for effective communication with international teams.

Desirable:

• Knowledge of RBAC and delegated administration.
• Familiarity with monitoring and auditing tools (SCOM, MECM, Change Auditor).
• Experience with DFS/DFSN, NTFS permissions, and critical authentication services.
• ITIL Foundation or equivalent certification.
• French language skills are a plus.

• Permanent contract.
• Work Mode: Hybrid in Madrid (4 days/month in the office)
• Competitive salary. Flexible payment plan.
• Remote work assistance.
• Professional Development: Access to an annual budget dedicated to advancing your skills through professional certifications.

Solicitante de Empleo

Iniciar sesión

Publica tu currículum, At Lognext we have been accompanying companies and teams for more than 18 years to identify and implement the technology necessary to advance, making their challenges and objectives our own and getting closer to their reality. Therefore, being a NEXTER means that your career and talent become meaningful to you and those around you, allowing you to build what matters most to you and reach your next level.