Senior Active Directory Engineer

5 - 7 Years 1 Opening Trivandrum Role description Roles and Responsibilities Lead and support complex Active Directory (AD) migrations and upgrades , including schema extensions , domain consolidations , and trust relationship configurations (Windows Server 2012 to 2016/2019/2022). Collaborate with Application Teams and other Infrastructure Teams to identify dependencies and develop execution plans for upgrading legacy AD servers. Participate in CAB (Change Advisory Board) calls, raise/manage Change Requests (CRs) , and coordinate Go/No-Go approvals with stakeholders for AD upgrade activities. Perform advanced user and group management , including nested groups , service accounts , OU-level delegation , and dynamic access control . Administer and troubleshoot Group Policy Objects (GPOs) , including login scripts , folder redirection , and security filtering . Address and resolve AD replication issues , manage FSMO roles , and support multi-site domain controller setups. Conduct regular Active Directory health checks using tools such as dcdiag, repadmin, netdiag, and PowerShell diagnostics . Manage FRS to DFSR migrations , validate SYSVOL consistency , and resolve replication-related challenges. Implement security hardening and ensure compliance with standards (e.g., CIS benchmarks ), including ACL reviews and service account controls . Create and maintain comprehensive AD documentation —topology diagrams, policy records, naming conventions, and recovery guides. Contribute to disaster recovery planning , perform backup validation , and lead domain controller restoration drills . Organizational Skills Effective time management across BAU (Business-as-Usual) and project-based tasks. Strong focus on documentation , compliance , and audit-readiness . Ability to multitask in high-pressure environments with tight SLAs. Proactive in stakeholder communication and delivery tracking . Experienced in Change and Incident Management , including CRQs and RCAs. Personal Skills Strong analytical and root cause analysis capabilities. Excellent written and verbal communication skills , including client-facing interactions . Self-motivated and accountable; capable of independently leading smaller initiatives. Collaborative and team-oriented; actively mentors L1/L2 engineers . Demonstrates high ownership and a strong commitment to security and system stability . Technical Skills Deep expertise in Active Directory design , administration , and troubleshooting . Proficient in FSMO role management , AD replication , and multi-site topologies . Advanced understanding of Group Policy (GPMC, GPO modeling, troubleshooting). Strong foundation in DNS , DHCP , and name resolution within AD environments. Proficient in PowerShell scripting for automation, auditing, and reporting. Experienced in FRS to DFSR transitions , SYSVOL replication , and schema updates . Familiar with Azure AD , Azure AD Connect , hybrid identity models , and SSO configurations. Skilled in tools like ADUC , GPMC , Event Viewer , Sites and Services , repadmin, dcdiag, and ldp. Knowledge of AD backup and restore procedures using Windows Server Backup , Veeam , or Azure Backup . Understanding of RBAC , delegation models , and tiered AD administration . Experience Total Experience: 5–7 years Minimum 3+ years in L3-level Active Directory support , handling escalations and project implementations. Involved in at least two full-cycle AD migration projects , including domain controller upgrades (e.g., 2012 to 2019/2022). Hands-on with legacy environment management , compatibility resolution, and upgrade planning. Direct experience in disaster recovery drills , backup validation , and domain controller restoration . Familiar with ITIL-aligned environments and workflows in Change , Incident , and Problem Management . Preferred Certifications Microsoft Certified: Windows Server Hybrid Administrator Associate Microsoft Certified: Identity and Access Administrator Associate ITIL Foundation (preferred) MCSE: Core Infrastructure Skills Active Directory,Schema extensions,Domain Consolidation About UST UST is a global digital transformation solutions provider. For more than 20 years, UST has worked side by side with the world’s best companies to make a real impact through transformation. Powered by technology, inspired by people and led by purpose, UST partners with their clients from design to operation. With deep domain expertise and a future-proof philosophy, UST embeds innovation and agility into their clients’ organizations. With over 30,000 employees in 30 countries, UST builds for boundless impact—touching billions of lives in the process.