Senior Windows & Active Directory Engineer (Identity & Infrastructure Support)

Role: Senior Windows & Active Directory Engineer (Identity & Infrastructure Support)

Location: Remote – EST (US)

Job Summary:

We are seeking an experienced Senior Windows & Active Directory Engineer to lead the design, implementation, and support of enterprise identity and infrastructure services. The ideal candidate will have deep expertise in Active Directory, Windows Server environments, and identity management, ensuring secure, scalable, and highly available systems.

Key Responsibilities:

• Design, implement, and maintain Active Directory (AD) infrastructure including domains, forests, GPOs, and OU structures

• Provide Tier 3 support for Active Directory Domain Services (AD DS) including:

  • Replication

  • DNS integration

  • Authentication & authorization

  • Trust relationships

  • Sites & Services

  • Domain health monitoring

• Support and troubleshoot in-flight Domain Controller migrations, including:

  • OS upgrades

  • Domain/forest functional level changes

  • Domain Controller build and decommissioning

  • Replication cutovers

• Administer and troubleshoot Group Policy Objects (GPOs) including:

  • Policy design and deployment

  • Conflict resolution

  • Impact analysis

• Lead Root Cause Analysis (RCA) for AD-related incidents and implement preventive measures and SOPs

• Manage and support Windows Server environments (2016/2019/2022)

• Support Azure AD / Hybrid Identity environments (Azure AD Connect, synchronization, SSO)

• Troubleshoot complex AD, DNS, DHCP, and authentication issues

• Perform AD health checks, audits, and capacity planning

• Manage DNS, DHCP, and core infrastructure services

• Automate routine tasks using PowerShell scripting

• Ensure adherence to security best practices (least privilege, MFA, auditing)

• Support disaster recovery, backup, and restore processes for AD and Windows systems

• Provide secondary support for AWS environments (EC2, RDS)**

• Provide medium-level support for VMware virtualization platforms

• Collaborate with cross-functional teams (security, cloud, network)

• Provide L3/L4 escalation support and mentor junior engineers

Required Skills & Experience

• 7–10+ years of experience in Windows Server and Active Directory administration

• Strong expertise in:

  • Active Directory (AD DS, replication, Sites & Services)

  • Group Policy Management

  • DNS, DHCP

  • Azure AD / Entra ID (hybrid identity)

• Hands-on experience with Domain Controller lifecycle management and migrations

• Strong troubleshooting experience in complex enterprise environments

• Experience with PowerShell scripting and automation

• Knowledge of identity protocols (Kerberos, LDAP, SAML, OAuth)

• Familiarity with AWS (EC2, RDS) and VMware platforms

• Experience with AD security hardening and monitoring

Preferred Qualifications:

• Experience with Microsoft Entra ID, Conditional Access, and MFA

• Knowledge of Privileged Access Management (PAM) solutions

• Exposure to cloud and hybrid infrastructure architectures

• Microsoft / AWS / VMware certifications

• Experience in enterprise-scale environments