Active Directory Engineer

We are seeking an experienced Active Directory Engineer with strong expertise in Active Directory administration, Windows Server infrastructure, Domain Controller lifecycle management, Group Policy administration, and DNS services. The ideal candidate will lead Active Directory modernization initiatives, perform domain controller upgrades and migrations, and ensure the stability, security, and performance of the enterprise Windows environment. Key Responsibilities

• Perform Active Directory upgrades, migrations, and modernization activities.

• Manage the complete Domain Controller lifecycle, including installation, configuration, promotion, demotion, decommissioning, and replacement.

• Configure, maintain, and troubleshoot Active Directory Domain Services (AD DS).

• Create, manage, and optimize Group Policy Objects (GPOs) to meet business and security requirements.

• Administer and troubleshoot DNS in an Active Directory-integrated environment.

• Monitor and resolve Active Directory replication issues using tools such as Repadmin and DCDiag.

• Perform Active Directory health checks and implement best practices for high availability.

• Support domain functional level upgrades and Windows Server migrations.

• Manage Organizational Units (OUs), users, groups, service accounts, and security permissions.

• Coordinate Active Directory changes with security, infrastructure, and application teams.

• Document implementation procedures, configurations, and operational standards.

• Provide L2/L3 support for Active Directory-related incidents and production issues.

• 7+ years of experience administering Microsoft Active Directory.

• Strong experience with Active Directory Domain Services (AD DS).

• Hands-on experience with Domain Controller Promotions and Demotions.

• Experience performing Active Directory upgrades and migrations.

• Strong knowledge of Group Policy (GPO) design, implementation, and troubleshooting.

• Experience managing Active Directory-integrated DNS.

• Expertise in Active Directory replication troubleshooting using Repadmin, DCDiag, Event Viewer, and PowerShell.

• Experience with Windows Server 2016/2019/2022 administration.

• Strong PowerShell scripting skills for Active Directory automation.

• Experience with FSMO role management and Active Directory Sites & Services.

• Knowledge of LDAP, Kerberos, DNS, DHCP, and Windows Authentication.

• Experience supporting enterprise Active Directory environments with multiple domains and sites.

Preferred Qualifications

• Experience with Azure Active Directory (Microsoft Entra ID) and hybrid identity.

• Experience with Azure AD Connect synchronization.

• Knowledge of PKI/Certificate Services.

• Experience with Active Directory security hardening and auditing.

• Microsoft Windows Server or Azure certifications are preferred.

Nice to Have

• Microsoft Entra ID (Azure AD)

• Azure AD Connect

• DFS Replication

• DHCP Administration

• SCCM/MECM

• VMware

• Microsoft Identity Manager (MIM)

• Active Directory Certificate Services (AD CS)

$40 - $45 an hour - Full-time

NationMind LLC is a technology consulting firm focused on software development and QA testing services. We help clients build reliable, scalable applications with a strong emphasis on automation, performance, and quality. Our team works across industries, delivering solutions that drive innovation and operational efficiency. We are currently hiring skilled professionals for Active Directory Engineer to join our growing team.