Senior Systems Engineer - Active Directory

We are seeking a Senior Systems Engineer specializing in Active Directory to support and modernize a large enterprise Active Directory environment. This is a senior engineering role focused on AD architecture, domain controllers, security, automation, and hybrid identity, rather than day-to-day Active Directory administration.

This person will serve as a senior technical resource for Active Directory while helping improve the organization’s hybrid Active Directory and Microsoft Entra environment.

Responsibilities -Design, support, and improve enterprise Active Directory infrastructure. -Build, troubleshoot, secure, and harden domain controllers. Support a hybrid Active Directory and Microsoft Entra environment. -Improve the management of service accounts, including gMSAs. -Simplify complex AD group structures and access models. -Develop PowerShell automation for Active Directory processes. -Improve monitoring and alerting across the AD environment. -Review AD security findings and help implement appropriate security improvements. -Support privileged access, RBAC, and least-privilege initiatives. -Partner with IAM, security, infrastructure, endpoint, and architecture teams. -Help drive future identity modernization involving Entra, Azure, and Intune. -The compensation for this position will be $107,000 - $198,000 based on years of experience., 5+ years of Hybrid Engineering experience designing, implementing, and managing complex enterprise Active Directory and Entra ID environments. -Strong knowledge of Active Directory architecture, including domains, forests, Domain Controllers, DNS, Group Policy, Sites and Services, and trusts. -Experience with Active Directory governance and delegated administration tools, such as Netwrix Directory Manager (NDM) or similar technologies. -Strong knowledge of Windows Server environments and Active Directory infrastructure. -Strong understanding of Active Directory security best practices, including privileged access management (PAM), role-based access control (RBAC), least privilege, and security hardening. -Experience with disaster recovery and business continuity planning related to Active Directory. -Strong written and verbal communication skills, with the ability to communicate technical concepts across both technical and non-technical teams. Preferred Qualifications -PowerShell scripting and AD automation -gMSA / managed service accounts -Domain controller monitoring and alerting -AD Certificate Services / PKI -Netwrix, Quest, or ManageEngine -SailPoint -GitHub Actions / CI/CD -M&A or domain consolidation -Azure / Intune experience