Windows Server + Active Directory Engineer

Engineer, administer, secure, and troubleshoot enterprise Windows Server and Active Directory services, ensuring reliable identity, authentication, name resolution, policy enforcement, patching, and operational support.

· Key Responsibilities Install, configure, patch, harden, monitor, and troubleshoot Windows Server environments.

· Administer Active Directory Domain Services, Group Policy, trusts, sites and services, users, groups, and service accounts.

· Support DNS, DHCP, PKI/certificates, LDAP/Kerberos, file services, and related identity dependencies.

· Manage hybrid identity integrations with Microsoft Entra ID where applicable.

· Investigate replication, authentication, policy, performance, and availability issues.

· Execute vulnerability remediation, privileged-access controls, backup/restore validation, and disaster-recovery testing.

· Automate repeatable administration with PowerShell and maintain scripts in version control.

· Maintain runbooks, architecture records, configuration baselines, change records, and operational documentation.

· 5+ years supporting Windows Server and Active Directory in a large enterprise environment.

· Deep knowledge of AD DS, Group Policy, DNS, authentication protocols, replication, and Windows security.

· Experience with patching, hardening, monitoring, backup/recovery, and incident/change processes.

· PowerShell scripting and structured troubleshooting skills.

· Ability to participate in maintenance windows and on-call support as required.

Preferred Qualifications

· Microsoft Windows Server, Azure Administrator, Identity and Access Administrator, or security certification.

· Experience with AD migrations, hybrid identity, PKI, PAM, clustering, and virtualization.