Active Directory Engineer- Enterprise Systems

Role & responsibilities

• AD Architecture & Resilience: Design, manage, and optimize the highly available redundant DC architecture across two data centres, ensuring fast and reliable performance for all 7,000 branch sites. Own and execute Active Directory Disaster Recovery and Business Continuity planning.
• Security & Compliance: Implement and enforce a strong security posture for AD DS, including advanced Group Policy Object (GPO) management for endpoints, Privileged Access Management (PAM) principles, and regular security hardening/audits. Administer Active Directory Certificate Services (PKI).
• Federation & Identity: Design, configure, and maintain Active Directory Federation Services (ADFS) farm infrastructure for secure Single Sign-On (SSO) integration with partners and cloud applications using protocols like SAML and OAuth.
• Replication & Sites: Expertly manage AD Sites and Services topology, replication, and authentication protocols (Kerberos, NTLM) to maintain efficient and site-aware identity services for the large, geographically dispersed network.
• Automation & Escalation: Develop and maintain PowerShell scripts to automate critical AD operations, provisioning, and reporting. Serve as the top-tier escalation point (L3) for all complex AD/DNS/DHCP issues.

Preferred candidate profile

• 5+ years of hands-on, enterprise-level Active Directory experience.
• Minimum 2 years of hands-on experience deploying, managing, and troubleshooting Active Directory Federation Services (ADFS).
• Expert knowledge of AD DS, Sites and Services, Replication, and FSMO roles in a multi-site/multi-data centre environment.
• High Proficiency in PowerShell scripting for automation and advanced management.
• Strong understanding of Group Policy Object (GPO) design and distribution in a large, distributed environment.
• Experience with Hybrid Identity management using Azure AD Connect/Entra ID and SSO protocols (SAML, OAuth).
• Excellent troubleshooting skills for complex authentication, DNS, and performance issues.