Active Directory Engineer

Manage Azure AD Connect for seamless synchronization between on-prem AD and Azure AD, with a strong focus on maintaining integrity and performance of the on-prem identity source.

• Administer and monitor Microsoft Defender for Identity (MDI) sensors across domain controllers to detect and respond to identity-based threats.
• Design and implement authentication and authorization frameworks primarily for on-premises identity systems, with supplementary support for cloud identity platforms (Azure AD, AWS, Google Cloud Platform) as needed.
• Collaborate with internal teams and vendors to gather requirements and deliver robust Active Directory-based identity solutions, ensuring compatibility with enterprise applications and services.
• Develop and maintain architectural diagrams and documentation for on-prem identity infrastructure, including GPO structures, OU design, and trust relationships.
• Evaluate, design, and implement Active Directory and Single Sign-On (SSO) solutions, focusing on secure, scalable, and cost-effective identity management within the on-prem environment.
• Drive continuous improvement in IAM security architecture, enhancements to on-prem identity systems and introducing best practices for GPO management and AD hardening.
• Work closely with teams across information security, infrastructure, and architecture to ensure alignment of identity services with organizational goals and compliance requirements.

Configuration, management, and troubleshooting of on-premises Multi-Domain Active Directory environments, including Domain Controllers, Group Policy Objects (GPOs), and Patch management.

• Strong Knowledge Active Direcotry replication, site topology design, and conflict resolution.
• Proficient knowledge of Kerberos authentication, NTLM, and secure credential handling.
• Configuring and managing Azure AD Connect for secure synchronization between on-premises Active Directory and Azure AD in hybrid identity environments.
• Install, configure, and maintain Windows Server operating systems, virtual machines, and Active Directory infrastructure to ensure high availability and security.
• Knowledge of Managing Virtual machines in Azure VMs, EC2 instances and VMware., Knowledge of Quest Active Roles Server, Recovery manager and Semperis
• Microsoft Certifications.
• Powershell Scripting