Title: Active Directory Specialist
Location: USA Remote
Duration: Full Time
Necessary skills
Configuration, management, and troubleshooting of on-premises Multi-Domain Active Directory environments, including Domain Controllers, Group Policy Objects (GPOs), and Patch management.
Strong Knowledge Active Direcotry replication, site topology design, and conflict resolution.
Proficient knowledge of Kerberos authentication, NTLM, and secure credential handling.
Configuring and managing Azure AD Connect for secure synchronization between on-premises Active Directory and Azure AD in hybrid identity environments.
Install, configure, and maintain Windows Server operating systems, virtual machines, and Active Directory infrastructure to ensure high availability and security.
Knowledge of Managing Virtual machines in Azure VMs, EC2 instances and VMware.
Manage Azure AD Connect for seamless synchronization between on-prem AD and Azure AD, with a strong focus on maintaining integrity and performance of the on-prem identity source.
Administer and monitor Microsoft Defender for Identity (MDI) sensors across domain controllers to detect and respond to identity-based threats.
Design and implement authentication and authorization frameworks primarily for on-premises identity systems, with supplementary support for cloud identity platforms (Azure AD, AWS, GCP) as needed.
Collaborate with internal teams and vendors to gather requirements and deliver robust Active Directory-based identity solutions, ensuring compatibility with enterprise applications and services.
Develop and maintain architectural diagrams and documentation for on-prem identity infrastructure, including GPO structures, OU design, and trust relationships.
Evaluate, design, and implement Active Directory and Single Sign-On (SSO) solutions, focusing on secure, scalable, and cost-effective identity management within the on-prem environment.
Drive continuous improvement in IAM security architecture, enhancements to on-prem identity systems and introducing best practices for GPO management and AD hardening.
Work closely with teams across information security, infrastructure, and architecture to ensure alignment of identity services with organizational goals and compliance requirements.
Good to have skills
Knowledge of Quest Active Roles Server, Recovery manager and Semperis
Microsoft Certifications.
Powershell Scripting