Active Directory Administration:Infrastructure & Support_AFL

Role Description We are seeking an experienced Active Directory Subject Matter Expert (SME) with 10–12 years of experience in designing, implementing, managing, and securing enterprise Active Directory environments. The candidate will be responsible for maintaining the organization's Identity and Access Management (IAM) infrastructure, ensuring high availability, security, compliance, and seamless integration with on-premises and cloud-based applications.

The role requires strong expertise in Active Directory Services, Azure AD (Entra ID), Hybrid Identity, Group Policy Management, Federation Services, Identity Governance, Disaster Recovery, and Directory Migration Projects.

Active Directory Administration & Operations

• Manage and support enterprise-scale Active Directory environments comprising multiple domains, forests, and trusts.
• Design, implement, and maintain Active Directory infrastructure including Domain Controllers, Sites & Services, DNS, DHCP, and Group Policies.
• Monitor and optimize AD health, replication, authentication services, and performance.
• Manage user, group, computer, and service account administration.

Identity & Access Management

• Implement and administer Identity and Access Management controls.
• Manage Role-Based Access Control (RBAC), privileged access, and delegation models.
• Support Azure AD (Microsoft Entra ID), Azure AD Connect, and Hybrid Identity environments.
• Implement and manage Single Sign-On (SSO), Multi-Factor Authentication (MFA), and Conditional Access policies.

Security & Compliance

• Ensure Active Directory security hardening aligned with industry best practices.
• Conduct regular AD security reviews and vulnerability remediation.
• Support compliance requirements related to ISO 27001, RBI, DPDPA, NIST, and cybersecurity frameworks.
• Manage privileged access management, tiered administration, and account lifecycle controls.

AD Migration & Transformation

• Lead Active Directory migration, consolidation, and modernization initiatives.
• Plan and execute tenant migrations, domain migrations, and forest restructuring projects.
• Design and implement trust relationships between organizations and environments.
• Support cloud transformation and hybrid identity programs.

Disaster Recovery & Business Continuity

• Develop and maintain Active Directory backup and recovery procedures.
• Conduct periodic disaster recovery testing and recovery drills.
• Ensure high availability and business continuity of enterprise authentication services.

Troubleshooting & Support

• Act as Level-3 escalation point for complex Active Directory and Identity-related issues.
• Troubleshoot authentication, replication, DNS, GPO, Kerberos, NTLM, and federation-related problems.
• Perform root cause analysis and implement preventive measures.

Documentation & Governance

• Maintain architecture diagrams, configuration standards, SOPs, and technical documentation.
• Participate in audits and security assessments.
• Provide architecture recommendations and technical guidance to infrastructure and security teams.
• Bachelor of Engineering (B.E.) – Mandatory
• Microsoft Certifications such as Microsoft Certified: Identity and Access Administrator Associate, Azure Administrator, Windows Server Certifications will be an added advantage.
• Strong collaboration and partnering skills.

Mandatory Skills

• Microsoft Active Directory (Windows Server 2016/2019/2022)
• Microsoft office 365
• Azure Active Directory (Microsoft Entra ID)
• Azure AD Connect
• Group Policy Management
• Active Directory Federation Services (ADFS)
• DNS, DHCP, Certificate Services
• PowerShell Scripting and Automation
• LDAP, Kerberos, NTLM Authentication Protocols
• AD Security Hardening and Best Practices
• Active Directory Backup and Recovery
• Domain/Forest Migration and Trust Management

Good to Have

• Microsoft Defender for Identity
• Microsoft Intune
• SAML, OAuth, OpenID Connect
• Hybrid Cloud Environments (Azure/AWS)
• Quest Migration Tools / Identity Migration Solutions
• Zero Trust Architecture