Active Directory Admin/Engineer

CLT•New York, NY

3d•Onsite

About The Position

We are seeking an experienced Active Directory Administrator/Engineer to join our IT Infrastructure team. The successful candidate will be responsible for designing, implementing, maintaining, and troubleshooting Active Directory environments across our organization. This role requires strong technical expertise, attention to detail, and the ability to manage complex directory services that support thousands of users and devices.

Requirements

5+ years of hands-on Active Directory administration experience in enterprise environments.
Strong understanding of Active Directory architecture, replication, Group Policy, and domain services.
Experience administering Windows Server 2016, 2019, 2022, or newer.
Proficiency with PowerShell scripting for automation and system administration.
Strong knowledge of DNS, DHCP, and core network protocols.
Experience with directory synchronization and identity platforms such as Azure AD Connect, Microsoft Entra ID, Okta, or similar technologies.
Understanding of identity security, least-privilege access, and compliance requirements.
Strong troubleshooting and problem-solving skills, particularly in complex enterprise environments.
Excellent communication, documentation, and collaboration skills.
CompTIA Security+, Microsoft Certified: Identity and Access Administrator, or equivalent experience.

Nice To Haves

Microsoft Certified: Enterprise Administrator Expert or similar advanced certification.
Experience with hybrid cloud identity environments, particularly Microsoft Entra ID/Azure AD.
Knowledge of identity and authentication protocols including LDAP, Kerberos, and SAML.
Experience with Privileged Access Management (PAM) solutions.
Familiarity with IT Service Management (ITSM) platforms and ticketing systems.
Experience working in healthcare, financial services, or other regulated industries.

Responsibilities

Design, deploy, and manage enterprise Active Directory (AD) infrastructure, including domains, forests, and trust relationships.
Administer user and computer accounts, Organizational Units (OUs), Group Policies (GPOs), and security groups.
Implement and maintain AD security best practices, including least-privilege access, compliance controls, and security policies.
Manage Identity and Access Management (IAM) solutions and directory synchronization tools.
Monitor AD performance, health, and replication across multiple sites.
Troubleshoot and resolve complex Active Directory issues and escalations.
Collaborate with network, security, infrastructure, and application teams to ensure seamless directory and identity integration.
Plan and execute Active Directory upgrades, migrations, and infrastructure changes.
Implement and maintain disaster recovery and business continuity procedures for directory services.
Develop and maintain technical documentation, configurations, procedures, and operational runbooks.
Provide technical support, knowledge transfer, and training to IT staff and end users.
Stay current on Microsoft technologies, security patches, industry best practices, and emerging identity technologies.