Staff Engineer, Microsoft Active Directory

📋 Description

• Lead design, administration, and optimization of enterprise identity infrastructure (AD/Entra ID).
• Manage Domain Controllers, AD replication, FSMO roles, trusts, schema, NTDS, DFSR, and AD Sites
• Implement and secure Group Policy frameworks; administer Windows Server, DNS, DHCP, IIS, and core
• Design and enforce identity security controls: Conditional Access, MFA, SSO, RBAC, and PIM.
• Manage Hybrid Identity via Entra Connect and directory synchronization; support M365 identity
• Troubleshoot authentication issues (OAuth, SAML, Kerberos, NTLM) and develop automation with

🎯 Requirements

• Bachelor’s or Master’s in CS/IT or related field; 5.5+ years in AD administration.
• Extensive experience with Microsoft AD across enterprise, multi-site environments.
• Advanced Entra ID (Azure AD) administration, Hybrid Identity, Entra Connect experience.
• Strong Windows Server, DNS, DHCP, IIS, and GPO expertise.
• Experience with CA, SSO, MFA, RBAC, PIM, and identity lifecycle management.
• PowerShell scripting and Microsoft Graph API automation.

🎁 Benefits

• Opportunity to lead large-scale identity/security initiatives.
• Exposure to advanced Microsoft identity tech and cloud security practices.
• Collaborative environment with infra, cloud, and security pros.
• Continuous learning and technical growth opportunities.
• Contribution to automation and identity transformation projects.
• Flexible work environment and competitive compensation.