Senior Active Directory Administrator (VP2)

About the role

We are looking for a senior Windows Infrastructure Engineer to manage and enhance our core identity and directory services. The role focuses on Active Directory, Microsoft 365/Entra ID integration, ADFS, and Tier‑0 AD architecture within a large banking environment.

Key responsibilities

• Administer and maintain Windows Server environments, including patching, performance tuning, and troubleshooting.
• Manage and support Active Directory infrastructure (Group Policy, DNS, DHCP, replication).
• Implement and maintain Microsoft Entra ID and Microsoft 365 integration with AD, including hybrid identity solutions.
• Configure and support ADFS and federation services for secure authentication and SSO.
• Design, implement, and maintain Tier‑0 AD architecture with privileged access segregation.
• Administer the Certificate Authority server and manage PKI components.
• Participate in infrastructure projects such as upgrades, migrations, and automation initiatives.
• Monitor system performance, respond to incidents, and handle service requests.
• Collaborate with security and compliance teams to ensure policy adherence.
• Document procedures, configurations, and changes following ITIL practices.

Required profile

• Minimum 10 years of hands‑on experience in Windows Infrastructure administration.
• Strong knowledge of Active Directory design, forest/domain structure, and Group Policy.
• Experience with Microsoft 365 integration, Entra ID, and AD Connect for hybrid identity.
• Hands‑on experience with ADFS and federation services.
• Familiarity with Tier‑0 AD architecture and privileged access management.
• Experience managing Certificate Authority servers and understanding of PKI concepts.
• Proficiency in PowerShell scripting for automation.
• Solid understanding of networking fundamentals (TCP/IP, DNS, DHCP, Certificate Authority).
• Excellent problem‑solving and communication skills.

Required skills

• Windows Server
• Active Directory
• Group Policy
• DNS
• DHCP
• Microsoft Entra ID
• Microsoft 365
• AD Connect
• ADFS
• Tier‑0 AD architecture
• Certificate Authority
• PKI
• PowerShell
• TCP/IP networking