Active Directory Engineer

About the role

We are looking for a highly skilled Active Directory Engineer to lead enterprise‑wide AD migration and upgrade projects. The successful candidate will design upgrade strategies, assess existing environments, and ensure seamless transitions with minimal business impact.

Key responsibilities

• Lead end‑to‑end AD migration and upgrade initiatives across multi‑site, multi‑domain, and multi‑forest environments.
• Perform comprehensive assessments of domain controllers, Group Policies, DNS, DFS, and security configurations.
• Design and implement upgrade plans to modern Windows Server platforms (e.g., Server 2025).
• Execute domain controller lifecycle activities, including promotion, demotion, and decommissioning.
• Collaborate with application, network, and security teams to ensure compatibility.
• Manage ADFS and directory synchronization issues.
• Administer DFS, DNS, and Group Policy infrastructure.
• Utilize migration tools such as ADMT or Quest Migration Manager.
• Develop pre‑migration validation, testing, and rollback strategies.
• Automate tasks with PowerShell and maintain technical documentation.

Required profile

• Bachelor’s degree in Information Technology or related field.
• Minimum 10 years of AD administration and lifecycle management experience.
• Proven track record of planning and executing AD migration or upgrade projects.
• Strong knowledge of multi‑site, multi‑domain, multi‑forest AD environments.
• Experience with ITIL processes and ServiceNow for incident, problem, and change management.

Required skills

• Active Directory (AD) design, administration, and migration.
• ADMT, Quest Migration Manager or equivalent migration tools.
• Windows Server 2016/2019/2022/2025.
• PowerShell scripting for automation.
• Active Directory Certificate Services (ADCS) and ADFS.
• Identity and Access Management (IAM), Entra ID, Single Sign‑On (SSO).
• DFS, DNS, and Group Policy management.
• ServiceNow and ITIL process knowledge.