AD Engineer L3 – IN

Summary

You will join a team of engineers deep in the first phase of complex on-prem to cloud delivery. With deadlines looming, it’s all hands to the pump. The second phase moves to a manage and operate mode where you’ll be required to deliver highly detailed documentation and in-depth handover to our support teams around the world.

Required technical skills

Deep understanding and practical experience with Microsoft Active Directory (+8 years), including:

• Group Policy configuration & implementation for servers & workstations.
• Item-level targeting, scopes, permissions and WMI filtering.
• Group Policy Modelling and Analysis.
• Security hardening of environments adhering to Microsoft & CIS benchmarks.
• Formulating LDAP queries.
• AD Sites and replication topology.
• Service account administrating, including Managed Service Accounts (MSA).
• Advanced Group Policy Management (AGPM). Version Control.
• undefined
• Experience implementing Distributed File System (DFS).
• undefined
• Experience implementing Active Directory Federation Services (ADFS).
• undefined
• Working knowledge of foundational topics, including:

TCP/IP, DNS, DHCP, Server Virtualisation & PowerShell.

• Strong hands-on experience managing AD-integrated DNS and public DNS records using third-party DNS management platforms such as GoDaddy or equivalent tools.
• Proven experience administering and troubleshooting complex Active Directory environments involving multiple domains and multi forests environment.
• Hands-on experience with AD-Microsoft Entra ID integration, directory synchronization configuration and customization, synchronization troubleshooting, and resolving identity synchronization issues.
• Strong understanding and hands-on experience with Azure-based SSO implementations using SAML 2.0 and OpenID Connect (OIDC) protocols.
• Public key infrastructure (PKI), including SSH. Key management and rotation, certificate life cycle management. Stand-alone and AD integrated CA infrastructure. Operating an offline root CA.
• The target environment is hosted in Microsoft Azure, therefore, the ability to confidently navigate the Azure Portal is essential.

Azure:

• Active Directory (AAD) (Entra): Intune, Management Groups, IAM, Apps, SPNs, etc.
• Key vaults.
• Storage accounts.
• Virtual machine: Creation and management.
• DevOps: Pipelines and Boards.
• Compute Gallery.
• Terraform.· OS Image management automation (Hashicorp Packer).

Required soft skills

· Self-starter and comfortable taking the lead.

· Comfortable working in a fast passed production environment.

· Excellent communication skills and comfortable challenging decisions.

· Comfortable interfacing with the customer’s lead engineers.

· Excellent documentation skills with obsessive attention to detail.

· Desire and ability to inform and educate others based on your deep

technical experiences.