Job Summary

We are seeking a highly skilled Active Directory Engineer with experience in planning and executing Active Directory (AD) migrations/Upgrade. The ideal candidate will be responsible for developing comprehensive upgrade plans, performing assessments of existing environments, and ensuring a seamless migration with minimal disruption. In addition, candidate should have skill to lead the project and deal with stakeholders. Responsibilities : • Develop and implement Active Directory servers upgrade plans including detailed timelines and risk mitigation strategies. • Perform assessments of current AD environments, including domain controllers, group policies, and security configurations. • Develop AD upgrade plan to opt new Windows 2025 AD Servers. • Identify the Dependency on existing AD server and remove the dependency without interrupting the Business. • Plan and implement the DC isolation, demotion, and promotion. • Work with application and service owner to mitigate the insecure protocols whenever identified. • Work with Application team to remove the hardcoding • Collaborate with network, security, and application teams to ensure compatibility and successful Upgrade. • Troubleshoot Directory Synchronization and Federation Services • DFS, DNS and Group Policy management • Provide technical leadership and troubleshooting expertise during migration activities. • Work with customers and other IT stakeholders to identify and define secure solution requirements. • Use Migration Manager to migrate data from the existing AD to the new AD. • Develop scripts to automate the day-to-day task • Execute pre-migration testing and develop fallback plans. Classification: Internal • Ensure compliance with security policies and best practices for AD environments. • Ensure compliance with existing processes and security policies. • Provide post-upgrade support and resolve any technical issues. • Act as a technical lead, mentoring junior L1/L2 engineers, reviewing changes, and driving team adherence to ITIL processes. • Knowledge Article Creation and Documentation. Qualifications: • 10+ years of experience configuring, managing, and implementing Active Directory • Good communication, writing, and customer services skills. • Knowledge of Service Now, Change Management, Problem Management , reporting and Incident Management. • Must have hands-on experience with Active Directory upgrade • Extensive Experience of AD life cycle management. • Experience to deal with authentication, authorization, and OS level issues. • Experience with AD migration tools such as ADMT (Active Directory Migration Tool), Quest Migration Manager, or similar tools. • Experience with windows 2025 Server/AD would be preferred. • Experience developing AD migration plan and developing scripts to automate AD data migration • Experience running Active Directory health checks. • PowerShell scripting for automation and administration. • Experience with AD enterprise certificate services, AD federation services, and identity manager • Active Directory hands on experience in a multi-site/multi-domain/multi-forest environment, is required. Classification: Internal • Proven experience with AD security and best practices • Experience with DFS Root and Link management and troubleshooting. • Experience with IAM (Identity and Access Management), Entra and SSO (Single Sign-On) is preferred. • Experience in project management, reporting and problem management.

Key Responsibilities

1. Lead Azure Active Directory operations by implementing advanced directory services management, monitoring, and automation tools to ensure high availability and compliance with enterprise standards.
2. Drive continuous improvement initiatives using Azure AD analytics and reporting to optimize identity lifecycle management, access controls, and security policies.
3. Oversee and resolve complex escalations related to authentication, authorization, and federation using Azure AD, ADFS, and related tools, ensuring minimal downtime and robust incident response.
4. Mentor and guide team members in advanced Azure AD administration, including conditional access, multi-factor authentication, and privileged identity management, fostering technical growth and operational excellence.
5. Collaborate with stakeholders to translate client requirements into actionable directory solutions, leveraging Azure AD’s integration capabilities with SaaS applications and hybrid environments.
6. Champion the adoption of new features and best practices in Azure AD, driving innovation in process development and promoting a culture of proactive service improvement.
7. Ensure compliance with security, privacy, and regulatory requirements by implementing and auditing Azure AD policies and access reviews.

Skill Requirements

1. Excellent Proficiency In Directory Services (Ldap, Adfs, Azure Ad Connect) And Integration With OnPremises Active Directory.
2. Strong Experience With Azure Ad Security Features Such As Conditional Access, Mfa, And Privileged Identity Management.
3. Advanced Skills In Powershell Scripting For Automation And Operational Efficiency Within Azure Ad Environments.
4. InDepth Understanding Of Cloud Security, Identity Governance, And Compliance Frameworks.
5. Excellent Leadership, Mentoring, And Communication Skills For Managing Teams And Driving Operational Excellence.

Other Requirements

1. Microsoft Certified: Identity and Access Administrator Associate (Recommended)
2. Microsoft Certified: Azure Solutions Architect Expert (Optional but valuable