Active Directory Engineer

Job Description & Requirements

We are seeking a highly skilled Active Directory Engineer with experience in planning and executing Active Directory (AD) migrations/Upgrade. The ideal candidate will be responsible for developing comprehensive upgrade plans, performing assessments of existing environments, and ensuring a seamless migration with minimal disruption. In addition, candidate should have skill to lead the project and deal with stakeholders.

Responsibilities:

• Develop and implement Active Directory servers upgrade plans including detailed timelines and risk mitigation strategies.
• Perform assessments of current AD environments, including domain controllers, group policies, and security configurations.
• Develop AD upgrade plan to opt new Windows 2025 AD Servers.
• Identify the Dependency on existing AD server and remove the dependency without interrupting the Business.
• Plan and implement the DC isolation, demotion, and promotion.
• Work with application and service owner to mitigate the insecure protocols whenever identified.
• Work with Application team to remove the hardcoding
• Collaborate with network, security, and application teams to ensure compatibility and successful Upgrade.
• Troubleshoot Directory Synchronization and Federation Services
• DFS, DNS and Group Policy management
• Provide technical leadership and troubleshooting expertise during migration activities.
• Work with customers and other IT stakeholders to identify and define secure solution requirements.
• Use Migration Manager to migrate data from the existing AD to the new AD.
• Develop scripts to automate the day-to-day task
• Execute pre-migration testing and develop fallback plans.
• Ensure compliance with security policies and best practices for AD environments.
• Ensure compliance with existing processes and security policies.
• Provide post-upgrade support and resolve any technical issues.
• Act as a technical lead, mentoring junior L1/L2 engineers, reviewing changes, and driving team adherence to ITIL processes.
• Knowledge Article Creation and Documentation.

Qualifications:

• 10+ years of experience configuring, managing, and implementing Active Directory
• Good communication, writing, and customer services skills.
• Knowledge of Service Now, Change Management, Problem Management , reporting and Incident Management.
• Must have hands-on experience with Active Directory upgrade
• Extensive Experience of AD life cycle management.
• Experience to deal with authentication, authorization, and OS level issues.
• Experience with AD migration tools such as ADMT (Active Directory Migration Tool), Quest Migration Manager, or similar tools.
• Experience with windows 2025 Server/AD would be preferred.
• Experience developing AD migration plan and developing scripts to automate AD data migration
• Experience running Active Directory health checks.
• PowerShell scripting for automation and administration.
• Experience with AD enterprise certificate services, AD federation services, and identity manager
• Active Directory hands on experience in a multi-site/multi-domain/multi-forest environment, is required.
• Proven experience with AD security and best practices
• Experience with DFS Root and Link management and troubleshooting.
• Experience with IAM (Identity and Access Management), Entra and SSO (Single Sign-On) is preferred.
• Experience in project management, reporting and problem management