> Markdown version of [/jobs/ext/484923-talent-pool-active-directory-engineer-snr-engineer-associate-technical-lead-technical-lead](https://www.wearedevelopers.com/jobs/ext/484923-talent-pool-active-directory-engineer-snr-engineer-associate-technical-lead-technical-lead). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Talent Pool - Active Directory (Engineer/Snr Engineer/Associate Technical Lead/ Technical Lead) - **Company:** Sysco Corporation - **Location:** United States - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Microsoft Access, IEEE 802.1X, Microsoft Windows, Active Directory, Domain Controllers, Amazon Web Services, User Authentication, Authentication Protocols, Microsoft Azure, Command-Line Interface, Microsoft Management Console, Dynamic Host Configuration Protocol, Desktop Computing, Linux, Domain Name System (DNS), Event Logging, Identity and Access Management, Virtual Private Networks (VPN), Kerberos (Protocol), Lightweight Directory Access Protocols (LDAP), Windows Servers, NT LAN Manager, OAuth, Parsing, Public Key Infrastructure, Windows PowerShell, Azure Active Directory, Security Assertion Markup Language (SAML), Server Administration, SSL Certificate Management, Google Cloud, Enterprise Software Applications, Multi-Cloud, Information Technology, Laptops, CIS Benchmarks, Servicenow - **Published:** June 7, 2026 - **Apply:** https://wd5.myworkdaysite.com/recruiting/sysco/syscocareers/job/Sysco-LABS-----Sri-Lanka/Talent-Pool---Active-Directory--Engineer-Snr-Engineer-Associate-Technical-Lead--Technical-Lead-_R254190 ## About the Role * Bachelor's degree in Computer Science, IT, or related field (or equivalent experience). * for Engineer - 1-2 Years, for Senior Engineer 2-4 Years, Associate Lead - 4-6 Years and for Lead 6-8 years of experience developing production enterprise applications * Solid foundational understanding of Active Directory architecture (Domains, Forests, OUs, Sites and Services). * Experience with Active Directory Users and Computers (ADUC), DNS, and Group Policy Management Console (GPMC). * Familiarity with navigating and managing GUI-less environments (Windows Server Core) using command-line tools and PowerShell. * Foundational understanding of Public Key Infrastructure (PKI) concepts, including Certificate Authorities (CAs), digital certificates, and encryption basics. * Understanding of core authentication protocols (Kerberos, LDAP, NTLM). * Intermediate experience using PowerShell (specifically the ActiveDirectory module) to query directory objects, parse event logs, and execute administrative commands. * Strong logical troubleshooting skills with a focus on identity, permissions, and access rights. * Excellent communication skills for collaborating with global remote teams and guiding Field Support. * Willingness to work in rotational shifts/on-call. Preferred: * Familiarity with Microsoft Entra ID (Azure AD), AD Connect, and Hybrid Azure AD join scenarios. * Ability to read, modify, and write basic PowerShell scripts to streamline repetitive identity management workflows and assist with bulk provisioning/deprovisioning. * Experience managing and maintaining remote Domain Controllers running on Windows Server Core. * Hands-on experience administering Microsoft AD CS and troubleshooting certificate-based authentication (e.g., LDAPS, 802.1x, VPN auth). * Basic understanding of Linux identity integration (SSSD, Realmd, Winbind) for binding non-Windows machines to AD. * Knowledge of enterprise identity integration with cloud platforms (AWS Directory Service, GCP Cloud Identity, SSO). * Experience troubleshooting GPO application issues (using gpresult, RSOP). * Relevant Microsoft certifications (e.g., SC-300: Identity and Access Administrator, AZ-800, or foundational MS-900/SC-900). * Familiarity with Privileged Access Management (PAM) or Just-in-Time (JIT) access concepts. * Experience with IT service management (ITSM) tools like ServiceNow. * ITIL Foundation certification. ## Description Join our newly established Active Directory Support Team as an Active Directory Administrator. You'll be part of a 5-member team dedicated to managing and supporting our enterprise identity and directory services across multiple global domains. You will play a crucial role in ensuring secure and seamless authentication for our global workforce. Note: This role provides 16 hours of daily support (8 hours on-desk, 5 days a week, and 8 hours on-call on a rotational roster). Our Identity Environment: * Hybrid Directory Services: Global On-Premises Active Directory forests integrated with Microsoft Entra ID (formerly Azure AD). * Authentication & Access: Kerberos, NTLM, LDAP/S, SAML, and Oauth integrations across Windows, Linux, and multi-cloud platforms (Azure, AWS, GCP). * Endpoint Integration: Windows and Linux endpoints (workstations, laptops, mobile) domain-joined or hybrid-joined globally. * Collaborative Support Model: Working closely as the Identity Subject Matter Experts (SME) alongside local IT and Field Support teams worldwide. What You'll Do * Directory Administration: Manage Active Directory objects (Users, Computers, Groups, Service Accounts) and Organizational Units (OUs) following best practices. * Authentication Support: Troubleshoot complex authentication and domain-join issues for endpoints (Windows/Linux) and applications utilizing Kerberos, NTLM, and LDAP. * Server Core Administration: Support and troubleshoot Domain Controllers deployed on Windows Server Core, utilizing Remote Server Administration Tools (RSAT), Windows Admin Center, and command-line interfaces for daily maintenance. * Group Policy Management: Assist in the creation, deployment, and troubleshooting of Group Policy Objects (GPOs) to enforce security baselines and configure endpoints. * AD Health & Monitoring: Monitor AD replication, Domain Controller health, and Directory Services event logs (using tools like dcdiag and repadmin). * Directory Automation & Reporting: Utilize PowerShell scripting to automate routine identity tasks, execute bulk object updates (users, groups, computers), and generate directory audit reports. * Hybrid Identity Operations: Support Entra ID (Azure AD) sync operations (AAD Connect) and troubleshoot hybrid-join device scenarios. * Cross-Platform Auth: Assist with Linux domain integration (SSSD, Realmd) and authentication troubleshooting for cross-platform endpoints. * PKI & Certificate Management: Support Active Directory Certificate Services (AD CS) operations, including processing Certificate Signing Requests (CSRs), managing certificate templates, and troubleshooting client auto-enrollment issues for endpoints and servers. * DNS & DHCP: Manage and troubleshoot DNS records and zones, as they relate to domain health and client connectivity. * Tier 2/3 Support: Act as an escalation point for Field Support teams globally regarding identity, permissions, and directory access issues. * Documentation: Maintain runbooks, standard operating procedures (SOPs), and knowledge base articles for AD support and administration. ## Related Videos - [Hacking MSSQL on Cloud. All of them. How I became sysadmin on Azure, AWS, GCP and Alibaba.](https://www.wearedevelopers.com/videos/100339-hacking-mssql-on-cloud-all-of-them-how-i-became-sysadmin-on-azure-aws-gcp-and-alibaba) - [Keeping applications secure by evolving OAuth 2.0 and OpenID Connect](https://www.wearedevelopers.com/videos/100152-keeping-applications-secure-by-evolving-oauth-2-0-and-openid-connect) - [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker) - [Agentic employees in world's most downloaded FinTech app](https://www.wearedevelopers.com/videos/100123-agentic-employees-in-world-s-most-downloaded-fintech-app) - [The Developer Workstation Blind Spot: Why Your Security Stack Can't See What Matters Most](https://www.wearedevelopers.com/videos/100254-the-developer-workstation-blind-spot-why-your-security-stack-can-t-see-what-matters-most) - [Navigating the Corporate Jungle: Life as a Developer in a large Company](https://www.wearedevelopers.com/videos/621-navigating-the-corporate-jungle-life-as-a-developer-in-a-large-company) ## Related Articles - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated) - [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers) - [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [Where To Find Software Engineering Jobs](https://www.wearedevelopers.com/magazine/396-where-to-find-software-engineering-jobs)