AD Engineer, L3

• Join a team of engineers in the first phase of complex on-premises-to-cloud delivery
• Deliver projects against looming deadlines in a collaborative engineering environment
• Deliver highly detailed documentation during the manage-and-operate phase
• Provide in-depth handover to support teams around the world

• Deep understanding and practical experience with Microsoft Active Directory (+8 years)
• Group Policy configuration and implementation for servers and workstations
• Item-level targeting, scopes, permissions, and WMI filtering
• Group Policy Modelling and Analysis
• Security hardening according to Microsoft and CIS benchmarks
• LDAP query formulation
• AD Sites and replication topology
• Service account administration, including Managed Service Accounts (MSA)
• Advanced Group Policy Management (AGPM) and version control
• Experience implementing Distributed File System (DFS)
• Experience implementing Active Directory Federation Services (ADFS)
• Working knowledge of TCP/IP, DNS, DHCP, server virtualization, and PowerShell
• Hands-on experience managing AD-integrated DNS and public DNS records using third-party DNS management platforms such as GoDaddy or equivalent
• Experience administering and troubleshooting complex Active Directory environments involving multiple domains and multi-forest environments
• Hands-on experience with AD–Microsoft Entra ID integration, directory synchronization configuration and customization, synchronization troubleshooting, and identity synchronization issue resolution
• Strong understanding and hands-on experience with Azure-based SSO using SAML 2.0 and OpenID Connect (OIDC)
• Public key infrastructure (PKI), including SSH, key management and rotation, certificate lifecycle management, stand-alone and AD-integrated CA infrastructure, and offline root CA operation
• Ability to confidently navigate the Microsoft Azure Portal
• Self-starter comfortable taking the lead
• Comfortable working in a fast-paced production environment
• Excellent communication skills and comfort challenging decisions
• Comfortable interfacing with customers' lead engineers
• Excellent documentation skills with obsessive attention to detail
• Desire and ability to inform and educate others based on deep technical experience

• Equal employment opportunity regardless of protected characteristics
• Disability or special-needs accommodation available upon request