Active Directory Expert

Top Skills' Details 1. Active Directory Engineering 2. Quest M/A experience 3. Domain migrations (closer to thousands of tenants) 4. Systems and server engineering experience Secondary Skills - Nice to Haves • Python • Azure • Security • Cloud • Support Job Description - Planning, execution, and optimization of Active Directory operations, with a strong emphasis on on-premises domain management, including domain controllers, forests, sites, services, and Group Policy Objects (GPOs). - Quest migration (will be the only expert on the subject) - need to have strong understanding of the tool - Oversee ongoing domain migrations, including workstation (35,000+ endpoints), server, and application transitions from legacy domains to a consolidated, modern structure; address stalled initiatives by implementing automation and best practices. - Manage hybrid AD configurations, ensuring seamless synchronization between on-prem AD and Entra ID using tools like Azure AD Connect; handle identity federation, conditional access policies, and cloud integration for 20% of our cloud-native workloads. - Troubleshoot and resolve complex AD issues, such as replication failures, schema extensions, security vulnerabilities (e.g., Kerberos, LDAP hardening), and integration with legacy M&A domains. - Develop and maintain documentation, scripts (PowerShell preferred), and automation for AD health monitoring, backup/recovery, and compliance (e.g., with tools like ADDS, DataDog, or third-party solutions). - Collaborate with cross-functional teams (security, applications, networking) to assess dependencies, mitigate risks during migrations, and ensure minimal downtime in critical operations. - Stay ahead of AD best practices, including security enhancements (e.g., Privileged Access Management), and evaluate emerging tools for hybrid environments. - Contribute to project planning, such as creating roadmaps for domain consolidation and hybrid expansion, while providing regular updates to senior leadership.