Job
Description
Role Description Core Responsibilities Lead end-to-end Active Directory migration projects, including domain/forest upgrades, schema extensions, and functional level changes (Windows Server 2012 to 2016/2019/2022). Assess current AD infrastructure and design scalable, secure, and future-ready AD architectures. Execute FRS to DFSR migration for SYSVOL and validate replication health using diagnostic tools. Perform schema upgrades while ensuring application and business service compatibility. Drive domain consolidation and forest restructuring initiatives using tools like ADMT, PowerShell, and inter-forest trust configurations. Design, implement, and maintain Group Policy Objects (GPOs) aligned with security and compliance standards. Troubleshoot complex AD issues involving replication, authentication, delegation, and policy enforcement. Conduct Active Directory health checks using dcdiag, repadmin, PowerShell, and custom diagnostic scripts. Participate in CAB (Change Advisory Board) meetings, manage Change Requests (CRs), and coordinate with stakeholders for approvals and execution. Collaborate with application owners, cloud teams, and infrastructure leads to ensure seamless transitions with minimal downtime. Prepare detailed documentation including design specifications, implementation plans, migration runbooks, and rollback strategies. Ensure compliance with security best practices, backup and recovery procedures, and audit readiness for all AD operations. Organizational Skills Proven ability to lead technical projects independently and take full ownership of delivery. Skilled in coordinating across cross-functional and geographically dispersed teams. Familiarity with ITIL-based service management, including Change, Incident, and Problem Management. Strong planning and tracking abilities using tools such as Excel, Confluence, and ServiceNow. Personal Skills Strong interpersonal and communication skills, capable of managing stakeholder expectations effectively. Demonstrates initiative, leadership, and ability to work both independently and collaboratively. High attention to detail and a structured approach to problem-solving and documentation. Committed to continuous learning, knowledge sharing, and mentoring junior engineers. Technical Skills Expertise in Active Directory architecture, including FSMO roles, domain/forest structures, and OU delegation. Hands-on with Sites and Services, trust relationships (intra/inter-forest), and domain controller placement. Advanced experience in GPO design, modeling, security filtering, and troubleshooting. Strong PowerShell scripting skills for automation, reporting, and configuration tasks. Proficient with tools such as ADMT, IDFix, Azure AD Connect, dcdiag, repadmin, ldp, and Event Viewer. Solid understanding of authentication protocols (Kerberos, NTLM) and PKI/certificate-based authentication. Experience with Azure AD, hybrid identity configurations, SSO setup, and troubleshooting. Experience 8+ years of hands-on experience in Active Directory administration, support, and operations. Minimum 3+ years managing L3-level escalations and complex AD migration projects. Successfully led or contributed to two or more end-to-end AD migrations to Windows Server 2016/2019/2022. Experience in modernizing legacy environments, including Windows Server 2012 and earlier. Proven track record in managing multi-site AD environments and enterprise domain structures. Preferred Certifications Microsoft Certified: Identity and Access Administrator Associate Microsoft Certified: Windows Server Hybrid Administrator Associate MCSE: Core Infrastructure) ITIL Foundation Skills Active Directory,Schema extensions,Domain Consolidation
