Senior Active Directory Specialist

Job Description: Senior Active Directory Specialist

Role Overview:

The Senior Active Directory Specialist is responsible for the design, implementation, administration, and maintenance of the Active Directory (AD) environment, ensuring optimal performance, security, and availability. This role involves managing identity and access, implementing security best practices, and supporting enterprise-wide authentication and directory services.

Key Responsibilities:

Active Directory Administration:

• Manage and maintain the Active Directory infrastructure, including domain controllers, DNS, DHCP, and Group Policy.
• Perform regular monitoring, troubleshooting, and optimization of AD to ensure stability and performance.

Identity & Access Management (IAM):

• Develop, implement, and manage IAM policies, procedures, and controls.
• Handle user provisioning, de-provisioning, and access control in line with security policies.

Security & Compliance:

• Implement security best practices, including MFA, AD security baselines, and privileged access management.
• Conduct regular security audits, patch management, and vulnerability assessments for the AD environment.

Disaster Recovery & Backup:

• Develop and maintain AD disaster recovery and business continuity plans.
• Execute regular backups and recovery tests to ensure data integrity and availability.

Scripting & Automation:

• Develop PowerShell scripts to automate AD processes, including account management and reporting.
• Implement automated solutions for monitoring and alerting on AD performance and security.

Collaboration & Support:

• Collaborate with IT teams to integrate AD with cloud services (e.g., Azure AD, O365).
• Provide technical support for AD-related issues and incidents.

Documentation & Reporting:

• Maintain comprehensive documentation for AD architecture, policies, procedures, and troubleshooting guides.
• Generate and present reports on AD health, security incidents, and user access.

Required Skills and Qualifications:

• Bachelors degree in Computer Science, Information Technology, or related field.
• Minimum of 8+ years of experience in managing and administering Active Directory in enterprise environments.
• Strong expertise in Windows Server, DNS, DHCP, Group Policy, and PowerShell scripting.
• Experience with Azure AD, ADFS, and identity federation.
• Proficiency in implementing security best practices and AD hardening techniques.
• Knowledge of multi-factor authentication (MFA), PKI, and LDAP.
• Familiarity with IAM solutions such as Okta, CyberArk, or similar tools.
• Excellent troubleshooting, analytical, and problem-solving skills.
• Strong verbal and written communication skills for technical and non-technical stakeholders.

Preferred Certifications:

• Microsoft Certified: Identity and Access Administrator Associate
• Microsoft Certified: Windows Server Hybrid Administrator Associate
• CompTIA Security+ or CISSP
• Azure Fundamentals or Azure Administrator