Active Directory Administrator

Active Directory Administrator

Seeking an experienced and motivated individual to join the Infastructure Engineering and Design team as an Active Directory Engineer. This position will require a strong understanding of technologies, processes and data management in the Identity & Access services.  This position will be responsible for the business requirements, data analysis, data validation and technical specifications covering both on premise Active Directory and Azure Active Directory. This resource will build strong partnerships within our business between both Infrastructure and Security organizations to drive requirements and turn functional or technical specifications into deployable solutions.  At times this resource may technically lead small project efforts in their specific technology area.  Ability to work in a highly matrixed organization delivering customer outcomes will be critical as this resource will often simultaneously work across more than one project delivery effort at a time. 

Key Client Focus – Active Directory Administrator

• Strong Active Directory architecture & engineering experience in large enterprise environments, including AD, Azure AD/Entra ID, Group Policy, AD replication, authentication and domain services.
• Hands-on ADFS & Identity/IAM: ADFS, Federation, WAP, certificates, Kerberos, claims, relying-party trusts, AAD/Entra Connect, and service accounts (GMSA/MSA).
• Large-scale AD infrastructure & security: AD consolidation, fileserver/Windows Server integration, privilege-path remediation, vulnerability mitigation, backup/recovery and environment health.
• Strong troubleshooting & engineering mindset: PowerShell/scripting, data analysis/mapping, complex AD issues, and ability to independently lead small AD/IAM projects.

Primary Responsibilities:

• Create templates and validate processes and procedures in AD
• Ability to pass federal clearance/background check to support dedicated US Government environments
• Provide Operational and Engineering support for end users across the enterprise for both AAD and AD environments
• Assist in troubleshooting of Replication / DC Location / Federation / Authentication problems
• Assist in troubleshooting issues with AAD Connect services
• Assess general health of the servers and the services
• Monitor that Kerberos is working properly
• Manage ADFS Certificates and Monitor for expiration and updates
• Monitor WAP Servers Certificates to the ADFS Servers
• Support GMSA / MSA / Service ID’s used within AD
• Manage Test environments
• Work with other teams on integration of new/updated relying party trusts
• Work with other teams on integration of new/updated claims
• Work with AD team to consolidate environments
• Work with Server Engineering teams to validate and verify Group Policy settings
• Experience locking policies in AGPM
• Extensive work with Security Engineering teams to remediate privilege elevation paths and chainable vulnerabilities
• Management and delivery of EntraID Connect services
• Work with Subsidiary AD teams to consolidate/standardize environments
• Other Windows Server, Active Directory, ADFS related tasks as needed

Experience/Qualifications:

• Degree in Computer Science / IT or equivalent experience
• Experience in managing IAM operations
• Knowledge in scripting (PowerShell, SQL, access, excel) and data mapping
• Solid understanding of AAD tenant environments / and traditional Active Directory configurations
• Good understanding of IAM principles.
• Excellent communication skills, verbal and written and presentation skills required.
• Experience with PowerPoint, and other Microsoft products such as Excel, required.
• Ability to prioritize work without management direction, and provide clear and documented status updates/metrics to management.
• Must have the ability to quickly learn and adapt to new concepts, capabilities or tools based on the needs.
• Ability to troubleshoot complex problems with minimal guidance.
• Excellent analytical skills and attention to detail.
• Experience with capturing server memory dumps
• Experience designing and executing Active Directory backup and recovery
• Experience with HIPAA compliance, FedRAMP access controls and EQIP certification is a plus
• Preference for experience with Semperis ADFR and DSP

Education:

Typically requires a University Degree or equivalent experience and a minimum 7 years of experience, or an Advanced Degree and a minimum 5 years experience.