Job Summary

Responsible for Level 2 administration, troubleshooting, and operational support of Microsoft Active Directory, Microsoft Entra ID (Azure AD), and Hybrid Identity environments. The role focuses on identity lifecycle management, synchronization, security, incident resolution, change implementation, and operational excellence.

Key Responsibilities

Administer Active Directory Domains, Forests, Sites, GPOs, DNS, DHCP and OU structure. • Manage Microsoft Entra ID users, groups, administrative units and authentication methods. • Support Hybrid Identity using Microsoft Entra Connect / Cloud Sync. • Perform user provisioning, deprovisioning and access management. • Troubleshoot replication, authentication, Kerberos, LDAP, DNS and Group Policy issues. • Manage password resets, account lockouts and privileged access. • Implement and troubleshoot SSO, MFA, Conditional Access and Identity Protection. • Support certificate-based authentication where applicable. • Execute production changes following ITIL processes. • Perform root cause analysis (RCA) for incidents. • Monitor AD health, replication and synchronization. • Maintain documentation, SOPs and knowledge articles. • Coordinate with L1, L3, Security and Infrastructure teams.

Skill Requirements

 Windows Server 2016/2019/2022 • Active Directory Domain Services (AD DS) • Microsoft Entra ID (Azure AD) • Hybrid Identity & Microsoft Entra Connect • Group Policy Management • DNS, DHCP, LDAP, Kerberos • PowerShell scripting • Microsoft 365 Identity • Conditional Access & MFA • Identity lifecycle management

Other Requirements

Preferred Skills • Active Directory Certificate Services (AD CS) • Azure Virtual Machines • Microsoft Defender for Identity • Privileged Identity Management (PIM) • Active Roles or similar IAM tools • Basic knowledge of AD FS and PKI