Job summary
the active directory engineer is responsible for the design, administration, security, and lifecycle management of the organization’s identity and directory services. This role ensures the stability, integrity, and availability of active directory (ad), azure active directory (aad), group policy objects (gpos), dns, dhcp, and related iam components, working closely with infrastructure, security, applications, and end user services teams to meet organizational needs and comply with security and compliance standards.
responsibilities
* administer and maintain on-premises active directory and azure ad (aad).
* create, manage, and audit user accounts, security groups, and service accounts.
* design, implement, and maintain group policy objects (gpos) for security and configuration management.
* manage multi-domain or multi-forest environments as required.
* implement and maintain security policies aligned with iam standards.
* support mfa, conditional access, and identity protection configurations.
* perform regular ad health checks, security baselines, and compliance audits.
* collaborate with security teams to address vulnerabilities and harden ad environments.
* manage dns, dhcp, sites & services, replication, and time synchronization.
* troubleshoot ad authentication, access issues, trust relationships, and domain controller performance.
* support server patching, upgrades, and lifecycle management of directory services.
* participate in identity modernization initiatives (e.g., hybrid identity, sso, automation).
* collaborate on iam and zero trust roadmap activities.
* document policies, procedures, diagrams, and operational workflows.
* drive improvements in automation (powershell, intune integrations, aad automation) to streamline operations.
* work closely with end user services, infrastructure, security, application teams, and external clients.
* provide technical guidance and support to internal teams and cross-functional stakeholders.
* escalate and communicate clearly in multi-client service environments.
qualifications
* 3+ years of experience managing active directory and azure ad environments.
* strong knowledge of gpo design, implementation, and troubleshooting.
* expertise in dns, dhcp, and identity-related networking concepts.
* experience with hybrid identity, aad connect, and synchronization troubleshooting.
* proficiency in powershell for automation and administration.
* experience with mfa, conditional access, rbac, and identity governance tools.
* familiarity with intune/mem, sccm, or similar endpoint management solutions (preferred).
* understanding zero trust, oauth, saml, and modern authentication protocols (preferred).
education
* bachelor’s degree in it or related field.
relevant certifications
* microsoft 365 certified: identity and access administrator
* microsoft 365 certified: modern desktop administrator
* azure administrator associate
* comptia security+ or equivalent
* itil foundation certification.
professional skills
* strong verbal and written communication skills in english.
* analytical mindset and strong troubleshooting skills.
* proactive, organized, and able to manage multiple priorities.
* customer-oriented with the ability to operate in multi-client environments.
benefits
* medical, dental, and life insurance.
* savings fund, vacation bonus, christmas bonus, grocery bonus, annual bonus.
* paid time off (ptos) and vacation days.
* paid office parking.
* medical-related discount programs.
* prime location in the heart of puebla with nearby amenities.
* team social events, christmas dinner.
* sports activities in the area.
* kitchen stocked with drinks, coffee, and snacks.
#j-18808-ljbffr