SME - Active Directory Service Interfaces
Sri Lanka
Apply now
Job Description
SME - Active Directory Service Interfaces
Colombo, Western

Job Summary

1. Active Directory Administration Administer and maintain Active Directory Domain Services (AD DS). Manage: Users Groups Computers Organizational Units (OUs) Service Accounts Ensure AD infrastructure availability and security. 2. Domain Controller Management Install, configure, promote, and demote Domain Controllers. Monitor Domain Controller health and performance. Perform AD backup and recovery activities. Maintain AD Sites and Services configuration. 3. AD Replication & Directory Services Manage and troubleshoot Active Directory replication issues. Monitor replication health across sites. Maintain trust relationships between domains and forests. Support AD topology and site optimization. 4. Group Policy Administration Create, modify, and manage Group Policy Objects (GPOs). Implement security baselines and compliance policies. Troubleshoot GPO application issues. Support user and endpoint management through policies. 5. Identity & Access Management Manage identity lifecycle processes. Configure role-based access controls. Support user provisioning and deprovisioning. Implement password and authentication policies. 6. Microsoft Entra ID / Azure AD Integration Manage Microsoft Entra Connect synchronization. Support Hybrid Identity environments. Configure: SSO Conditional Access Identity Sync Federation Services Troubleshoot synchronization issues between on-prem AD and Entra ID. 7. Active Directory Service Interfaces Support LDAP, Kerberos, DNS, and authentication services. Manage AD-integrated applications and service dependencies. Troubleshoot authentication and authorization issues. Support ADFS and federated identity services. 8. Certificate & PKI Services Manage Active Directory Certificate Services (ADCS). Configure Enterprise Certificate Authorities. Handle certificate enrollment, renewal, and revocation. Maintain PKI infrastructure security. 9. Incident, Problem & Change Management Act as L3 escalation point for AD-related issues. Perform Root Cause Analysis (RCA). Resolve: Replication failures Authentication issues Group Policy failures Entra Sync failures Domain Controller issues Participate in CAB and change implementation activities. 10. Automation & Documentation Automate administrative activities using PowerShell. Maintain AD operational documentation and runbooks. Develop monitoring and reporting scripts. Mentor L1/L2 support teams. Mandatory Skills Active Directory Domain Services (AD DS) Domain Controllers DNS & DHCP Group Policy Management Active Directory Sites & Services LDAP & Kerberos Microsoft Entra ID (Azure AD) Entra Connect / Azure AD Connect ADFS Active Directory Certificate Services (ADCS) PowerShell Scripting Windows Server Administration Preferred Certifications Microsoft Certified: Identity and Access Administrator (SC-300) Microsoft Certified: Windows Server Hybrid Administrator AZ-800 / AZ-801 Microsoft Entra ID Certifications ITIL Foundation Key KPIs AD Availability ≥ 99.9% Replication Health Compliance 100% Identity Synchronization Success Rate Incident Resolution Within SLA Zero Critical Authentication Outages Group Policy Compliance Domain Controller Health Compliance

Key Responsibilities

1. Active Directory Administration Administer and maintain Active Directory Domain Services (AD DS). Manage: Users Groups Computers Organizational Units (OUs) Service Accounts Ensure AD infrastructure availability and security. 2. Domain Controller Management Install, configure, promote, and demote Domain Controllers. Monitor Domain Controller health and performance. Perform AD backup and recovery activities. Maintain AD Sites and Services configuration. 3. AD Replication & Directory Services Manage and troubleshoot Active Directory replication issues. Monitor replication health across sites. Maintain trust relationships between domains and forests. Support AD topology and site optimization. 4. Group Policy Administration Create, modify, and manage Group Policy Objects (GPOs). Implement security baselines and compliance policies. Troubleshoot GPO application issues. Support user and endpoint management through policies. 5. Identity & Access Management Manage identity lifecycle processes. Configure role-based access controls. Support user provisioning and deprovisioning. Implement password and authentication policies. 6. Microsoft Entra ID / Azure AD Integration Manage Microsoft Entra Connect synchronization. Support Hybrid Identity environments. Configure: SSO Conditional Access Identity Sync Federation Services Troubleshoot synchronization issues between on-prem AD and Entra ID. 7. Active Directory Service Interfaces Support LDAP, Kerberos, DNS, and authentication services. Manage AD-integrated applications and service dependencies. Troubleshoot authentication and authorization issues. Support ADFS and federated identity services. 8. Certificate & PKI Services Manage Active Directory Certificate Services (ADCS). Configure Enterprise Certificate Authorities. Handle certificate enrollment, renewal, and revocation. Maintain PKI infrastructure security. 9. Incident, Problem & Change Management Act as L3 escalation point for AD-related issues. Perform Root Cause Analysis (RCA). Resolve: Replication failures Authentication issues Group Policy failures Entra Sync failures Domain Controller issues Participate in CAB and change implementation activities. 10. Automation & Documentation Automate administrative activities using PowerShell. Maintain AD operational documentation and runbooks. Develop monitoring and reporting scripts. Mentor L1/L2 support teams. Mandatory Skills Active Directory Domain Services (AD DS) Domain Controllers DNS & DHCP Group Policy Management Active Directory Sites & Services LDAP & Kerberos Microsoft Entra ID (Azure AD) Entra Connect / Azure AD Connect ADFS Active Directory Certificate Services (ADCS) PowerShell Scripting Windows Server Administration Preferred Certifications Microsoft Certified: Identity and Access Administrator (SC-300) Microsoft Certified: Windows Server Hybrid Administrator AZ-800 / AZ-801 Microsoft Entra ID Certifications ITIL Foundation Key KPIs AD Availability ≥ 99.9% Replication Health Compliance 100% Identity Synchronization Success Rate Incident Resolution Within SLA Zero Critical Authentication Outages Group Policy Compliance Domain Controller Health Compliance

Skill Requirements

1. Active Directory Administration Administer and maintain Active Directory Domain Services (AD DS). Manage: Users Groups Computers Organizational Units (OUs) Service Accounts Ensure AD infrastructure availability and security. 2. Domain Controller Management Install, configure, promote, and demote Domain Controllers. Monitor Domain Controller health and performance. Perform AD backup and recovery activities. Maintain AD Sites and Services configuration. 3. AD Replication & Directory Services Manage and troubleshoot Active Directory replication issues. Monitor replication health across sites. Maintain trust relationships between domains and forests. Support AD topology and site optimization. 4. Group Policy Administration Create, modify, and manage Group Policy Objects (GPOs). Implement security baselines and compliance policies. Troubleshoot GPO application issues. Support user and endpoint management through policies. 5. Identity & Access Management Manage identity lifecycle processes. Configure role-based access controls. Support user provisioning and deprovisioning. Implement password and authentication policies. 6. Microsoft Entra ID / Azure AD Integration Manage Microsoft Entra Connect synchronization. Support Hybrid Identity environments. Configure: SSO Conditional Access Identity Sync Federation Services Troubleshoot synchronization issues between on-prem AD and Entra ID. 7. Active Directory Service Interfaces Support LDAP, Kerberos, DNS, and authentication services. Manage AD-integrated applications and service dependencies. Troubleshoot authentication and authorization issues. Support ADFS and federated identity services. 8. Certificate & PKI Services Manage Active Directory Certificate Services (ADCS). Configure Enterprise Certificate Authorities. Handle certificate enrollment, renewal, and revocation. Maintain PKI infrastructure security. 9. Incident, Problem & Change Management Act as L3 escalation point for AD-related issues. Perform Root Cause Analysis (RCA). Resolve: Replication failures Authentication issues Group Policy failures Entra Sync failures Domain Controller issues Participate in CAB and change implementation activities. 10. Automation & Documentation Automate administrative activities using PowerShell. Maintain AD operational documentation and runbooks. Develop monitoring and reporting scripts. Mentor L1/L2 support teams. Mandatory Skills Active Directory Domain Services (AD DS) Domain Controllers DNS & DHCP Group Policy Management Active Directory Sites & Services LDAP & Kerberos Microsoft Entra ID (Azure AD) Entra Connect / Azure AD Connect ADFS Active Directory Certificate Services (ADCS) PowerShell Scripting Windows Server Administration Preferred Certifications Microsoft Certified: Identity and Access Administrator (SC-300) Microsoft Certified: Windows Server Hybrid Administrator AZ-800 / AZ-801 Microsoft Entra ID Certifications ITIL Foundation Key KPIs AD Availability ≥ 99.9% Replication Health Compliance 100% Identity Synchronization Success Rate Incident Resolution Within SLA Zero Critical Authentication Outages Group Policy Compliance Domain Controller Health Compliance

Other Requirements

1. Active Directory Administration Administer and maintain Active Directory Domain Services (AD DS). Manage: Users Groups Computers Organizational Units (OUs) Service Accounts Ensure AD infrastructure availability and security. 2. Domain Controller Management Install, configure, promote, and demote Domain Controllers. Monitor Domain Controller health and performance. Perform AD backup and recovery activities. Maintain AD Sites and Services configuration. 3. AD Replication & Directory Services Manage and troubleshoot Active Directory replication issues. Monitor replication health across sites. Maintain trust relationships between domains and forests. Support AD topology and site optimization. 4. Group Policy Administration Create, modify, and manage Group Policy Objects (GPOs). Implement security baselines and compliance policies. Troubleshoot GPO application issues. Support user and endpoint management through policies. 5. Identity & Access Management Manage identity lifecycle processes. Configure role-based access controls. Support user provisioning and deprovisioning. Implement password and authentication policies. 6. Microsoft Entra ID / Azure AD Integration Manage Microsoft Entra Connect synchronization. Support Hybrid Identity environments. Configure: SSO Conditional Access Identity Sync Federation Services Troubleshoot synchronization issues between on-prem AD and Entra ID. 7. Active Directory Service Interfaces Support LDAP, Kerberos, DNS, and authentication services. Manage AD-integrated applications and service dependencies. Troubleshoot authentication and authorization issues. Support ADFS and federated identity services. 8. Certificate & PKI Services Manage Active Directory Certificate Services (ADCS). Configure Enterprise Certificate Authorities. Handle certificate enrollment, renewal, and revocation. Maintain PKI infrastructure security. 9. Incident, Problem & Change Management Act as L3 escalation point for AD-related issues. Perform Root Cause Analysis (RCA). Resolve: Replication failures Authentication issues Group Policy failures Entra Sync failures Domain Controller issues Participate in CAB and change implementation activities. 10. Automation & Documentation Automate administrative activities using PowerShell. Maintain AD operational documentation and runbooks. Develop monitoring and reporting scripts. Mentor L1/L2 support teams. Mandatory Skills Active Directory Domain Services (AD DS) Domain Controllers DNS & DHCP Group Policy Management Active Directory Sites & Services LDAP & Kerberos Microsoft Entra ID (Azure AD) Entra Connect / Azure AD Connect ADFS Active Directory Certificate Services (ADCS) PowerShell Scripting Windows Server Administration Preferred Certifications Microsoft Certified: Identity and Access Administrator (SC-300) Microsoft Certified: Windows Server Hybrid Administrator AZ-800 / AZ-801 Microsoft Entra ID Certifications ITIL Foundation Key KPIs AD Availability ≥ 99.9% Replication Health Compliance 100% Identity Synchronization Success Rate Incident Resolution Within SLA Zero Critical Authentication Outages Group Policy Compliance Domain Controller Health Compliance
Apply now
Information at a Glance

Why HCLTech?

At HCLTech, you'll supercharge your potential. You'll find your career. And you'll find your spark. All at a place that knows that helping its customers stay on top starts by putting its people first.

HCLTech is a global technology company, home to more than 223,000 people across 60 countries, delivering industry-leading capabilities centered around digital, engineering, cloud and AI, powered by a broad portfolio of technology services and products. We work with clients across all major verticals, providing industry solutions for Financial Services, Manufacturing, Life Sciences and Healthcare, Technology and Services, Telecom and Media, Retail and CPG, and Public Services. Consolidated revenues as of 12 months ending June 2026 totaled $14.8 billion.