Active Directory Specialist

Job Description

"We are seeking an experienced Active Directory Subject Matter Expert (SME) to lead the design, implementation, and governance of our enterprise-wide Active Directory (AD) infrastructure. This role is critical to ensuring the security, scalability, and operational excellence of our identity and access management ecosystem.

As an AD SME, you will provide deep technical expertise, strategic guidance, and hands-on support for Active Directory, Azure AD, Group Policy, and related identity services. You will collaborate with cross-functional teams to ensure alignment with security policies, compliance requirements, and business objectives.

________________________________________

Key Responsibilities

• Serve as the technical authority for all aspects of Active Directory and Azure AD architecture, design, and operations.

• Lead the planning and execution of AD migrations, consolidations, and upgrades.

• Design and implement Group Policy Objects (GPOs), OU structures, and delegation models to support business and security needs.

• Manage and secure domain controllers, DNS, DHCP, and replication across global environments.

• Integrate AD with cloud identity platforms (e.g., Azure AD, ADFS, Entra ID) and third-party applications.

• Define and enforce standards for identity lifecycle management, authentication, and authorization.

• Troubleshoot complex AD-related issues, including replication, authentication, and policy enforcement.

• Conduct regular audits, health checks, and risk assessments to ensure AD integrity and compliance.

• Collaborate with cybersecurity, infrastructure, and application teams to support secure access and identity governance.

• Provide mentorship and technical leadership to junior engineers and project teams.

________________________________________

Required Skills & Experience

• Hands-on experience managing large-scale Active Directory environments.

• Deep expertise in AD DS, DNS, DHCP, GPO, LDAP, Kerberos, and replication.

• Strong experience with Azure Active Directory, ADFS, and hybrid identity models.

• Proficiency in PowerShell scripting for automation and reporting.

• Solid understanding of identity security, privileged access management, and Zero Trust principles.

• Experience with identity governance tools (e.g., SailPoint, CyberArk, Microsoft Entra).

• Familiarity with compliance frameworks (e.g., ISO 27001, NIST, GDPR).

• Excellent problem-solving, communication, and stakeholder management skills.

________________________________________

Preferred Qualifications

• Microsoft certifications (e.g., Microsoft Certified: Identity and Access Administrator Associate, Azure Solutions Architect).

• Experience in financial services or other highly regulated industries.

• Knowledge of modern authentication protocols (SAML, OAuth, OpenID Connect)."