AD Administrator (L2)

SUMMARY

JOB Description for windows Management AD Administrator (L2)

Customer Name BSE LTD

LOCATION Mumbai, Fort

DOMAIN Active Directory

Level (L1/L2/L3) L2

Required Relevant Domain Experience 4-6 Years relevant experience

Job Type (Onsite/Remote) Onsite

Shift details (General/ 24X7) Onsite support 24 X 7

Qualification B.E./Diploma/BSC/BTech (No education gap, Full time)

1. B.E. / Diploma [ In Computers Science, IT ,

Electronics & Telecommunication ] [ Civil and

Mechanical not preferred]

2. B.Sc. -IT

3. BCA or MCA [ Full time course from reputed

University]

4. No gap in education [ Passing year for S.S.C , H.S.C.

and Degree/Diploma to be mentioned]

Certifications Required if ANY Relevant Certification (Preference)

Specific Remarks/Requirement by

customer

Active Directory Management

Role Purpose

We are seeking an experienced AD Administrator to join our team. The ideal candidate will have

strong technical skills and experience in managing and supporting AD Servers, Group Policy,

Hardening, patching

JOB RESPONSIBILITIES

1. Creation and management of directory infrastructure Includes FSMO roles, trusts, Kerberos

KDCs, replication topology, etc.

2. Creation of all top-level OU hierarchies with LBL standard sub-OUs, groups, and appropriate

security permissions. This includes adding the OU Admins to the Add Computers group,

Group Policy Creator Owners group, and OU Admins mail list. It also includes setting

appropriate permissions on the created objects and linking of default GPOs.

3. Monitoring and reporting associated with the reliability and security of the domain

a. AD daily health checkup

b. Day-to-day management of the domain controllers

c. Monitoring connectivity, synchronization, replication, net logon, time services, FSMO

roles, schema, NTDS database partitions, DNS settings, SRV records, and trust

relationships

d. Review DC event and security logs and take corrective actions

e. Backups and restores on domain controllers

f. AD site and link

g. AD Authentication Protocol

4. PowerShell Scripting knowledge

5)AD replication troubleshooting skill

6. AD migration from lower version to higher version.

7. GPO Management

8. Domain Controller Hardening with as CIS benchmark policy.

9. Member server and endpoints Hardening knowledge as well troubleshooting skill.

10)Types of DNS records and processes - Forward lookup zone and Reverse lookup Zone

DNS scavenging

conditional forwards

DNS Querys , DNS Root Hints ,DNS Sec, Split DNS

11. RODC Knowledge

12 Knowledge on AD housekeeping.

13 AD Service Account GMSA

14 Global Catelog and AD Recycle Bin

Technical Skills/Knowledge Requirement

1. AD promotion and migration (Must)

2. Group Policy Management (Must)

3. Baseline hardening (Must)

4. AD replication troubleshooting skill (Must)

5. PowerShell Scripting knowledge

6. DNS and DHCP troubleshooting and Management (Must)

7. AD housekeeping

8. Certificate Authority Server understandin