Required Qualifications
Experience
8+ years of experience supporting enterprise Active Directory environments.
5+ years of hands-on experience designing and implementing Group Policy Objects (GPOs).
5+ years of experience with Microsoft Intune and endpoint management solutions.
5+ years of experience implementing Single Sign-On (SSO) technologies.
5+ years of experience with Microsoft Entra ID and Entra Connect synchronization.
3+ years of experience leading file server migrations to Microsoft 365.
Experience supporting large-scale enterprise cloud transformation initiatives.
Primary Responsibilities
Active Directory Architecture & Administration
Design, implement, and maintain enterprise Active Directory environments.
Administer complex multi-domain and multi-forest Active Directory infrastructures.
Develop and maintain Active Directory standards, governance, and operational procedures.
Perform Active Directory assessments, health checks, remediation, and modernization activities.
Support domain consolidation, migrations, and hybrid identity initiatives.
Troubleshoot complex authentication, DNS, LDAP, Kerberos, and replication issues.
Group Policy (GPO) Design & Implementation
Design, deploy, and manage enterprise Group Policies supporting users, workstations, and servers.
Develop GPOs for:Security hardening
User experience management
Application deployment
Device configuration
Compliance requirements
Lead GPO migration and transformation initiatives.
Manage loopback processing, WMI filtering, inheritance, permissions delegation, and GPO troubleshooting.
Create governance standards and documentation for Group Policy administration.
Microsoft Intune & Endpoint Management
Design and implement Microsoft Intune solutions for endpoint management.
Configure and manage:Windows Autopilot
Device Enrollment
Compliance Policies
Configuration Profiles
Endpoint Security Policies
Application Deployment
Conditional Access Integration
Migrate traditional GPO controls to modern Intune and cloud-based management solutions.
Support co-management between Configuration Manager (SCCM/MECM) and Intune.
Implement Mobile Device Management (MDM) and Mobile Application Management (MAM) strategies.
Manage endpoint lifecycle and device security posture.
Identity & Access Management (IAM)
Design and support enterprise identity and access management solutions.
Implement role-based access controls (RBAC) and identity governance frameworks.
Support identity lifecycle management processes including provisioning and deprovisioning.
Implement and maintain Multi-Factor Authentication (MFA), Conditional Access, and Zero Trust security principles.
Collaborate with cybersecurity teams to strengthen enterprise identity controls.
Single Sign-On (SSO) & Authentication
Design and deploy Single Sign-On solutions across cloud and on-premises applications.
Integrate applications with Microsoft Entra ID and other identity providers.
Implement and troubleshoot:SAML 2.0
OAuth 2.0
OpenID Connect (OIDC)
WS-Federation
Kerberos Authentication
LDAP Authentication
Lead application onboarding to SSO platforms.
Resolve identity federation and authentication issues.
Microsoft Entra ID & Hybrid Identity
Design and support Microsoft Entra ID environments.
Configure and manage Microsoft Entra Connect synchronization.
Implement:Password Hash Synchronization
Pass-Through Authentication
Seamless SSO
Hybrid Identity
Conditional Access Policies
Monitor and troubleshoot Entra synchronization and identity-related issues.
Support Microsoft 365 identity modernization initiatives.
File Server Migration to OneDrive & SharePoint Online
Lead migrations from legacy file servers and network shares to:OneDrive for Business
SharePoint Online
Microsoft Teams
Conduct discovery, assessment, and content analysis activities.
Design migration strategies including:Wave planning
User readiness
Cutover planning
Post-migration validation
Analyze and remediate NTFS permissions and access control models.
Implement migration tools including:Microsoft SPMT
ShareGate
Quest
AvePoint
Validate migrated data, permissions, metadata, and user access.
Develop migration runbooks, governance models, and operational support documentation.
Automation & Scripting
Develop PowerShell automation for:Active Directory administration
Intune administration
Entra ID synchronization monitoring
User lifecycle management
Reporting and compliance monitoring
Automate operational processes and migration activities.
Technical Skills
Identity & Access Management
Active Directory Domain Services (AD DS)
Microsoft Entra ID (Azure AD)
Entra Connect Synchronization
Active Directory Federation Services (ADFS)
MFA Implementation
Conditional Access
Identity Governance
Privileged Identity Management (PIM)
Endpoint Management
Microsoft Intune
Windows Autopilot
Endpoint Security
Device Compliance
Mobile Device Management (MDM)
Mobile Application Management (MAM)
SCCM / MECM Co-Management
Collaboration & Content Migration
OneDrive for Business
SharePoint Online
Microsoft Teams
File Server Migration
NTFS Permission Remediation
ShareGate
Quest
AvePoint
Microsoft SharePoint Migration Tool (SPMT)
Authentication & Security
SAML
OAuth
OpenID Connect
Kerberos
LDAP
Azure Conditional Access
Zero Trust Architecture
Scripting & Automation
PowerShell
Microsoft Graph
Automation and Reporting