Senior Systems Engineer

• Perform advanced troubleshooting of AD, Entra ID, hybrid identity, and authentication issues in complex multi-site, multi-domain environments.
• Manage and optimize Active Directory (domains, trusts, sites, replication, DNS, GPOs, PKI).
• Support and maintain Entra ID including users, groups, roles, Conditional Access, MFA, Identity Protection, and PIM.
• Administer and troubleshoot Azure AD Connect, federation (ADFS), SSO integrations, and identity synchronization problems.
• Analyze and resolve complex identity, access, and permission issues across cloud and on-prem systems.
• Ensure high availability, performance, and health of identity services through monitoring, patching, and regular audits.
• Work with cross-functional teams to implement secure identity solutions and enforce IAM best practices.
• Automate routine tasks and troubleshooting workflows using PowerShell or other scripting tools.
• Document architecture, procedures, incident resolutions, and technical guidelines.
• Participate in major incident resolution and root-cause analysis involving authentication or directory services.

Required Skills & Experience:

• 8 + years of experience in Systems Engineering with strong specialization in AD and Entra ID.
• Expert-level troubleshooting of AD replication, GPO conflicts, authentication failures, DNS issues, and hybrid identity sync.
• Strong understanding of Identity and Access Management (IAM) principles in enterprise environments.
• Hands-on experience with Azure AD Connect, Conditional Access, MFA, ADFS, SAML/OAuth/OIDC.
• Proficiency with Windows Server, DNS, DHCP, PKI/Certificates, and federation services.
• Advanced PowerShell scripting for automation and diagnostics.
• Experience supporting large, distributed, or complex infrastructures.

Soft Skills:

• Strong analytical and critical thinking skills.
• Clear communication and documentation abilities.
• Ability to work independently in high-pressure environments.
• Collaborative approach with cross-functional technical teams

Preferred Qualifications:

• Microsoft certifications (AZ-104, SC-300, MS-100/101, or similar).
• Experience with Zero Trust security models.
• Familiarity with SIEM/SOAR tools and identity governance solutions.