SME - Azure Active Directory

Job Summary

The Active Directory L3 Engineer is responsible for the design, administration, troubleshooting, optimization, and security of the organization\'s Active Directory infrastructure. The role involves providing Level 3 support for complex incidents, implementing security best practices, managing identity and access services, and ensuring the availability, integrity, and performance of the Active Directory environment.

Key Responsibilities

Active Directory Administration Manage and maintain Active Directory environments across multiple domains and forests. Perform AD health checks, replication monitoring, and troubleshooting. Design, implement, and maintain Organizational Units (OUs), Group Policies (GPOs), and delegation models. Administer Domain Controllers, Sites & Services, FSMO roles, and Trust Relationships. Perform AD schema modifications and upgrades when required. Identity & Access Management Manage user lifecycle activities including provisioning, modifications, and deprovisioning. Implement and support role-based access control (RBAC). Manage privileged account administration and access reviews. Ensure compliance with security and audit requirements. Azure AD / Hybrid Identity Manage Azure AD Connect synchronization. Support Hybrid Identity environments. Administer Entra ID (Azure Active Directory) and related services. Troubleshoot synchronization, authentication, and federation issues. Authentication & Federation Services Administer and support: Active Directory Federation Services (ADFS) LDAP Kerberos NTLM SSO implementations Support Multi-Factor Authentication (MFA) solutions. Group Policy Management Design, implement, and troubleshoot Group Policies. Perform GPO migrations and optimization. Ensure policy compliance and security hardening. Security & Compliance Implement Active Directory security best practices. Conduct AD vulnerability assessments and remediation. Manage AD security audits and compliance requirements. Support CyberArk, PAM, or other privileged access management solutions. Investigate security incidents related to identity services. Incident & Problem Management Handle critical and complex P1/P2 incidents. Perform Root Cause Analysis (RCA) and document findings. Drive permanent fixes and preventive actions. Participate in customer escalation calls and war-room discussions. Backup, Recovery & DR Plan and execute AD backup and recovery procedures. Perform authoritative and non-authoritative restores. Support disaster recovery tests and business continuity initiatives. Automation & Scripting Develop and maintain automation scripts using: PowerShell VBScript (preferred) Azure CLI (good to have) Automate provisioning, reporting, and health-check activities. Monitoring & Performance Management Monitor AD infrastructure health and capacity. Analyze event logs and performance metrics. Implement proactive measures to maintain system stability. Documentation & Knowledge Management Maintain architecture diagrams and operational documentation. Develop SOPs, runbooks, and knowledge articles. Provide technical guidance to L1 and L2 support teams.

Skill Requirements

Core Technologies Microsoft Active Directory Windows Server 2016/2019/2022 DNS, DHCP Group Policy Management DFS and DFS Replication AD Sites and Services LDAP, Kerberos, NTLM Cloud & Hybrid Identity Microsoft Entra ID (Azure AD) Azure AD Connect Hybrid Identity Solutions Microsoft 365 Identity Services Security Privileged Access Management (PAM) MFA Solutions Identity Governance AD Security Hardening CyberArk (preferred) Scripting & Automation PowerShell (mandatory) Automation Frameworks Scheduled Task Automation Monitoring Tools SolarWinds SCOM Azure Monitor Native Microsoft Monitoring Tools

Other Requirements

8+ years of experience in Active Directory administration.\\\\r\\\\n5+ years of experience supporting enterprise-scale AD environments.\\\\r\\\\nExperience managing multi-domain and multi-forest environments.\\\\r\\\\nStrong experience with Hybrid Identity and Azure AD/Entra ID.\\\\r\\\\nExperience handling critical incidents and customer escalations.