Microsoft Engineer

Role Summary:

We are seeking a highly skilled Senior Microsoft Engineer with deep expertise in Active Directory (AD) migrations, consolidation, and restructuring. This role will be responsible for planning, executing, and optimizing large-scale AD transformations, ensuring minimal downtime, maximum security, and seamless integration with related systems.

You will work closely with infrastructure architects, security teams, and project managers to deliver enterprise- Key Responsibilities

• Lead end-to-end Active Directory migration and restructuring projects, including forest/domain consolidations, upgrades, and reorganizations.
• Assess existing AD environments to identify gaps, technical debt, and opportunities for optimization.
• Design secure, scalable, and compliant AD architectures, following Microsoft best practices.
• Plan & Execute migration activities, including user, group, computer, and policy transfers, domain controller deployment, and trust configuration.
• Integrate AD with related Microsoft technologies (Azure AD, M365, SCCM, DHCP, File/Print, etc.).
• Implement group policies, OU structures, and delegation models to meet business and security requirements.
• Troubleshoot complex AD replication, authentication, and trust issues across multi-site environments.
• Collaborate with security teams to ensure compliance with identity governance and regulatory requirements.
• Document designs, processes, and post-migration configurations for operational handover.

Required Qualification:

• 7+ years of hands-on Microsoft infrastructure engineering experience.
• Proven track record in large-scale Active Directory migrations or restructures.
• Strong knowledge of Windows Server (2016/2019/2022) and AD DS concepts.
• Expertise in AD site topology, FSMO roles, DNS, replication, and trusts.
• Experience with PowerShell scripting for automation of AD tasks.
• Familiarity with Azure Active Directory and hybrid identity solutions.
• Understanding of security best practices for identity and access management.
• Excellent troubleshooting and problem-solving skills.
• Strong written and verbal communication abilities.
• Bachelor’s degree in engineering, Computer Science, or related field.

Preferred Qualification:

• Microsoft Certified: Identity and Access Administrator Associate or higher.
• Experience with Azure IaaS, PKI, and certificate services.
• Knowledge of MIM (Microsoft Identity Manager) or other identity governance tools.
• Experience in mergers, acquisitions, or divestitures involving AD consolidation.
• Exposure to cloud-based directory services and identity synchronization.