Active Directory L3

Role Summary

Active Directory (On-Prem) & ADFS L3 Engineer

Mandatory Skills

• Strong hands-on experience in On-Prem Active Directory

  (2012/2016/2019).

• Expertise in ADFS (Active Directory Federation Services)

  configuration, relaying parties, certificates, troubleshooting.

• Experience with Azure AD Connect (Full/Delta sync, alerts, health monitoring).

• Identity & Access Management (IAM)

  user lifecycle, provisioning/deprovisioning.

• PowerShell scripting

  for automation and AD/Azure operations.

Key Responsibilities

Active Directory (On-Prem) Administration

• Manage, design, and troubleshoot

  On-Prem AD Domain Services

  .
• Manage

  OU structure

  , Domain Controllers, DNS, GPO, AD Sites & Services, Replication.
• Handle AD migrations/upgrades (2012 2016/2019).
• Troubleshoot issues related to

  authentication, permissions, replication

  , and GPO.

ADFS (Federation Services) – Mandatory

• Configure and manage

  ADFS 3.0

  including:
• Relaying Party Trusts
• Claims rules
• Certificates
• Authentication policies
• Monitor ADFS health, resolve SSO issues, and support app onboarding.

Azure AD Connect / Hybrid Identity

• Monitor sync health, resolve sync failures, and manage alerts.
• Troubleshoot Azure AD Connect issues involving

  sync rules, connectors, and attribute flows

  .
• Ensure hybrid identity consistency between

  On-Prem AD and Azure AD

  .

Azure AD / Entra ID

• Support Conditional Access, Application registration & Enterprise Apps.
• Manage MFA, SSPR, Privileged Identity Management (PIM).
• Support Azure AD IAM workflows and access governance.

Required Skills

• Overall 8+ years and 5+ years of strong hands-on experience in

  On-Prem Active Directory

  .
• Deep expertise in

  ADFS architecture, configuration, and troubleshooting

  .
• Strong knowledge of IAM concepts (Identity Governance, Access control).
• Hands-on experience in

  Azure AD Connect

  and hybrid identity setups.
• Experience in PKI, Certificates, DNS, GPO, and Domain Controller maintenance.
• Strong PowerShell scripting skills.
• Exposure to security/compliance tools (Sentinel, Workbooks, KQL).