Active Directory Admin

Qualifications

• Need at least 7+ years of hands‑on experience in on premises Microsoft Active Directory administration and support.
• Strong expertise in Active Directory domain and forest design, trust relationships, and troubleshooting.
• In-depth knowledge of directory infrastructure including FSMO roles, Kerberos authentication, KDCs, DNS integration, Sites & Services, SYSVOL, and replication topology.
• Hands‑on experience installing, configuring, administering, and troubleshooting Windows Server Active Directory (2008, 2012, and later versions).
• Strong understanding of OU design, object lifecycle management, schema updates, permissions delegation, inheritance, and security group design.
• Expertise in Group Policy Management, including design, precedence, enforcement, blocking, and troubleshooting.
• Strong experience with Active Directory–integrated DNS configuration and issue resolution.
• Hands‑on experience with Active Directory Certificate Services (AD CS / PKI) including:
  • Trust models and integration with AD
  • Experience with DFS / DFSR, SYSVOL health, and replication troubleshooting.
• Ability to develop and maintain PowerShell scripts for AD administration, health checks, reporting, and automation.

Key Responsibilities

• Design, configure, administer, and support on premises Active Directory environments, including multi domain and multi forest setups.
• Perform Active Directory trust creation, validation, and troubleshooting across forests and domains.
• Own and maintain the overall health of Active Directory, including replication, DNS integration, SYSVOL, and time synchronization.
• Manage, troubleshoot, and optimize Group Policy Objects (GPOs) to meet enterprise operational and governance requirements.
• Administer and support Active Directory Certificate Services (AD CS / PKI), including CA hierarchy management (Root and Issuing CAs).

#J-18808-Ljbffr