Description

Key Responsibilities
✅ Design, implement, and secure Microsoft Active Directory forests, domains, trusts, organizational units (OUs), Group Policies, and Domain Controllers.
✅ Engineer enterprise IAM solutions supporting secure authentication and authorization across business applications.
✅ Partner with IAM and PAM teams to implement privileged access controls, delegated administration models, and administrative group structures.
✅ Monitor, troubleshoot, and resolve Active Directory issues related to authentication, replication, DNS, domain controller availability, and account lifecycle management.
✅ Integrate Active Directory with Identity Governance, Access Management, Certification, and Authentication platforms.
✅ Develop authentication integration patterns between Active Directory and AWS using LDAP and Kerberos.
✅ Promote secure application authentication by implementing Kerberos-based authentication standards and best practices.
✅ Maintain operational documentation, standards, runbooks, and technical procedures for Active Directory services.
✅ Participate in change management, audits, incident response, security initiatives, and IAM modernization programs.
✅ Collaborate with enterprise security, cloud, infrastructure, and application teams to strengthen identity security posture.
🎯 Required Skills
✔ 10+ Years of Identity & Access Management (IAM) Experience
✔ Enterprise Microsoft Active Directory Administration
✔ Active Directory Forests, Domains, Trusts & Group Policies
✔ Active Directory Security & Delegation Models
✔ Identity Governance & Privileged Access Management (PAM)
✔ Authentication, Replication & DNS Troubleshooting
✔ AWS Active Directory (Managed AD / Self-Hosted AD)
✔ LDAP & Kerberos Authentication
✔ Global Multi-Domain / Multi-Region Active Directory Environments
✔ Strong Analytical & Problem-Solving Skills

Key Skills

Education

Bachelor's degree