The active directory engineer is responsible for the design,administration, security, and lifecycle management of the organization’sidentity and directory services. This role ensures the stability, integrity,and availability of active directory (ad), azure active directory (aad), grouppolicy objects (gpos), dns, dhcp, and related iam components.the engineer works closely with infrastructure, security,applications, and end user services teams to ensure directory services meetorganizational needs and comply with security and compliance standards. Therole requires deep technical expertise, strong analytical skills, and aproactive, collaborative approach to problem-solving in a fast-paced,multi-client environment.success in this role requires consistency, attention to detail,excellent communication, and the ability to support both operational tasks andstrategic initiatives, including modernization, automation, and identitygovernance improvements.jobresponsibilities:activedirectory & identity managementadministerand maintain on-premises active directory and azure ad (aad).create,manage, and audit user accounts, security groups, and service accounts.design,implement, and maintain group policy objects (gpos) for security andconfiguration management.managemulti-domain or multi-forest environments as required.security& complianceimplementand maintain security policies aligned with iam standards.supportmfa, conditional access, and identity protection configurations.performregular ad health checks, security baselines, and compliance audits.collaboratewith security teams to address vulnerabilities and harden ad environments.infrastructureoperationsmanagedns, dhcp, sites & services, replication, and time synchronization.troubleshootad authentication, access issues, trust relationships, and domain controllerperformance.supportserver patching, upgrades, and lifecycle management of directory services.participatein identity modernization initiatives (e.g., hybrid identity, sso, automation).collaborateon iam and zero trust roadmap activities.documentpolicies, procedures, diagrams, and operational workflows.driveimprovements in automation (powershell, intune integrations, aad automation) tostreamline operations.workclosely with end user services, infrastructure, security, application teams,and external clients.providetechnical guidance and support to internal teams and cross-functionalstakeholders.escalateand communicate clearly in multi-client service environmentspositionrequirements – technical skills3+ years of experience managing activedirectory and azure ad environments.strongknowledge of gpo design, implementation, and troubleshooting.expertisein dns, dhcp, and identity-related networking concepts.experiencewith hybrid identity, aad connect, and synchronization troubleshooting.proficiencyin powershell for automation and administration.experiencewith mfa, conditional access, rbac, and identity governance tools.familiaritywith intune/mem, sccm, or similar endpoint management solutions (preferred).understandingzero trust, oauth, saml, and modern authentication protocols (preferred).positionqualifications - educationbachelor’sdegree in it or related field.relevant certifications (plus)microsoft365 certified: identity and access administratormicrosoft365 certified: modern desktop administratorcomptiasecurity+ or equivalentprofessionalskillsstrong verbal and written communicationskills in english.analyticalmindset and strong troubleshooting skills.proactive,organized, and able to manage multiple priorities.customer-orientedwith the ability to operate in multi-client environments.medical, dental, and life insurance. Savings fund, vacations bonus, christmas bonus, grocery bonus, annual bonus.ptosvacationdays.save on commutepaid office parking.discount programsmedical-related discounts.sponsored eventsteam social events and christmas dinner.sport activityjoin your colleagues in various sports activities in the area.eat & drinkenjoy a kitchen stocked with drinks, coffee, and snacks.
#j-18808-ljbffr