- Company Name
- Zenith Services Inc.
- Job Title
- Active Directory Specialist
- Job Description
-
Job Title: Active Directory Specialist
Role Summary:
Design, implement, secure, and maintain enterprise and hybrid identity services (On‑Prem AD, Azure AD, ADFS, AD Connect). Lead architecture, troubleshooting, automation, security, and compliance efforts for a global organization.
Expectations:
- Deliver robust, scalable AD infrastructure with zero downtime.
- Lead architectural decisions and ensure alignment with security standards (SOX, HIPAA, GDPR).
- Prototype and deploy automation for AD tasks.
- Mentor and collaborate with cross‑functional teams (Security, Cloud, Application).
Key Responsibilities:
- Architect and implement enterprise AD, Azure AD, and hybrid connectivity solutions.
- Develop and maintain OU structure, Group Policies, DNS/DHCP integration, and replication topology.
- Provide tier‑3 support for AD, ADFS, Azure AD Connect, and related identity issues.
- Monitor, troubleshoot, and optimize authentication and authorization flows.
- Manage PKI, certificate services, and secure LDAP deployments.
- Enforce security best practices including privileged access management, conditional access, MFA, and Zero Trust principles.
- Conduct audit support, vulnerability assessments, and remediation of identity components.
- Automate AD administration and reporting using PowerShell, Python, or similar.
- Drive adoption of modern IAM tools and cloud integrations (Microsoft 365, SaaS, SAML, OAuth, SCIM).
- Collaborate with Security, Cloud, and Application teams on migrations, upgrades, and integrations.
- Mentor junior engineers and contribute to knowledge sharing.
Required Skills:
- 8+ years of enterprise On‑Prem Active Directory experience.
- Expert in Windows Server (2016/2019/2022), DNS, DHCP, PKI.
- Deep knowledge of Azure AD, ADFS, Azure AD Connect, Conditional Access, SSO, federation.
- Advanced PowerShell scripting and automation.
- Proficiency with Group Policy, Kerberos, LDAP, NTLM, MFA.
- Familiarity with identity security frameworks (Zero Trust, PAM, MFA).
- Experience integrating Microsoft 365, SaaS apps, SAML, OAuth, SCIM.
- Strong analytical, problem‑solving, and communication skills.
Required Education & Certifications:
- Bachelor’s degree in Computer Science, Information Technology, or equivalent experience.
- Certified Microsoft Identity and Access Administrator Associate (or equivalent).
- Prefer certifications in IAM platforms (Okta, Ping) and cybersecurity incident response.