Lead Administrator L1

Wipro•Louisville, KY

12d

About The Position

Wipro is seeking an experienced Senior Active Directory Engineer for its Infrastructure Engineering and Design team. The role provides engineering and operational support across on-premises and cloud-connected identity environments, translating business, security, and technical requirements into reliable, supportable solutions. The engineer works with Infrastructure, Security, Server Engineering, subsidiary technology teams, and other stakeholders, and may provide technical leadership for focused project efforts while managing concurrent priorities in a matrixed organization. The position covers Microsoft Active Directory Domain Services, Microsoft Entra ID, identity synchronization, federation, Group Policy, authentication, and related Windows Server technologies. It includes directory services design and operations, security and privileged-access practices, backup and recovery, automation, monitoring, and advanced troubleshooting. The engineer also manages Microsoft Entra Connect and AD FS/Web Application Proxy infrastructure and works with application, security, and subsidiary teams on federation and directory integration.

Requirements

Experience managing enterprise identity and access management operations.
Strong knowledge of Microsoft Entra ID tenant environments and traditional on-premises Active Directory configurations.
Hands-on experience supporting Active Directory Domain Services, Microsoft Entra Connect, AD FS, WAP, Kerberos, Group Policy, and enterprise authentication services.
Experience troubleshooting complex directory, synchronization, federation, replication, and authentication problems with minimal guidance.
Knowledge of scripting and data analysis using PowerShell, SQL, Microsoft Access, Microsoft Excel, and data-mapping techniques.
Experience designing and executing Active Directory backup and recovery processes.
Experience capturing server memory dumps for advanced troubleshooting.
Excellent analytical skills, attention to detail, and ability to translate technical findings into clear actions.
Excellent written, verbal, and presentation skills, including proficiency with Microsoft PowerPoint and Excel.
Ability to prioritize work independently and provide clear, documented status updates and metrics to management.
Ability to learn and adapt quickly to new concepts, capabilities, tools, and changing business requirements.
Ability to pass a federal clearance or background check to support dedicated United States Government environments.
Mandatory skill: Microsoft Active Directory Administration.
5–8 years of experience.

Responsibilities

Provide enterprise operational and engineering support for Microsoft Active Directory and Microsoft Entra ID environments.
Design, implement, maintain, and document Active Directory forests, domains, organizational units, sites, subnets, domain controllers, and replication topology.
Monitor and assess the health, availability, capacity, performance, and configuration of directory servers and supporting services.
Troubleshoot complex replication, domain controller location, name resolution, federation, authentication, authorization, and directory synchronization issues.
Monitor and troubleshoot Kerberos authentication, including service principal names, delegation, ticketing, and time-synchronization dependencies.
Partner with Server Engineering teams to validate Group Policy settings and their intended outcomes.
Administer Group Policy lifecycle controls in Advanced Group Policy Management, including policy check-in, approval, deployment, and production locking.
Support group managed service accounts, managed service accounts, service identities, and related Active Directory configurations.
Collaborate with Security Engineering to identify and remediate privilege-escalation paths, chainable vulnerabilities, and other directory security risks.
Apply least-privilege, separation-of-duties, privileged-access, and Tier 0 security principles to directory services administration.
Design, maintain, and execute Active Directory backup, recovery, and disaster recovery procedures.
Validate directory service resiliency through documented recovery testing and remediation of identified gaps.
Use monitoring, metrics, event data, and diagnostic tools to identify service degradation and drive preventive improvements.
Capture and analyze server memory dumps when required for complex Windows Server or directory service troubleshooting.
Automate repeatable administration, validation, reporting, and operational tasks through scripting and available management interfaces.
Perform other Windows Server, Active Directory, Microsoft Entra ID, AD FS, and identity infrastructure responsibilities as needed.
Manage and deliver Microsoft Entra Connect services, including synchronization health, configuration, troubleshooting, and lifecycle maintenance.
Administer Active Directory Federation Services and Web Application Proxy infrastructure.
Manage AD FS and WAP certificates, including expiration monitoring, renewal coordination, deployment, and validation.
Partner with application and security teams to implement and maintain relying party trusts, claims, and related federation integrations.
Work with subsidiary Active Directory teams to consolidate, standardize, and integrate directory environments.