Active Directory Specialist

About the role

We are seeking an experienced Active Directory / Azure AD (Microsoft Entra ID) Specialist to support and manage enterprise Directory Services operations within a large-scale hybrid identity environment.

Responsibilities

• Administer and support enterprise Active Directory and Microsoft Entra ID (Azure AD) environments, ensuring high availability, security, and performance.
• Manage user, group, computer, and service accounts, including provisioning, deprovisioning, and access control activities.
• Support and troubleshoot Azure AD Connect synchronization, hybrid identity, authentication, and Single Sign-On (SSO) issues.
• Administer and maintain AD-integrated DNS, public DNS (Cloudflare), domain registrations, renewals, and DNS security.
• Manage PKI and Certificate Services, including Internal CA and external certificates (Sectigo), renewals, and troubleshooting.
• Monitor and resolve Active Directory replication, Group Policy (GPO), authentication, LDAP, Kerberos, and permissions-related issues.
• Provide advanced support for critical P1/P2 incidents, perform root cause analysis, and implement preventive measures.
• Perform Active Directory health checks, Domain Controller maintenance, patching, OS updates, backup validation, and recovery activities.
• Manage AD security tools including Quest RMAD, Quest Change Auditor, password auditing, and identity security monitoring solutions.
• Drive continuous improvement initiatives by identifying operational gaps, documenting procedures, recommending best practices, and partnering with stakeholders to enhance directory services operations.

Requirements

• Bachelor's degree in Information Technology, Computer Science, or related discipline.
• 8+ years of experience administering Active Directory environments.
• 5+ years of experience supporting Microsoft Entra ID (Azure AD) and Azure AD Connect.
• Strong hands-on experience with:
• Active Directory (On-Premises)
• Microsoft Entra ID (Azure AD)
• Azure AD Connect
• DNS Administration
• Group Policy (GPO)
• Identity & Access Management (IAM)
• Certificate Services / PKI
• Hybrid Identity Management
• Experience supporting hybrid identity environments.
• Strong troubleshooting skills across authentication, synchronization, and access management issues.
• Experience with incident management, problem management, and root cause analysis.
• Excellent client-facing communication skills.

Preferred Qualifications

• Experience with Quest RMAD.
• Experience with Quest Change Auditor.
• Experience managing Sectigo certificates.
• Knowledge of DFS (Distributed File Services).
• Experience in pharmaceutical, healthcare, or regulated industries.
• Familiarity with GxP compliance requirements.
• Microsoft certifications related to Entra ID, Identity Management, Azure, or Windows Server Administration.

Benefits

• Cognizant offers the following benefits for this position, subject to applicable eligibility requirements:
• Medical/Dental/Vision/Life Insurance
• Paid holidays plus Paid Time Off
• 401(k) plan and contributions
• Long-term/Short-term Disability
• Paid Parental Leave
• Employee Stock Purchase Plan

Work Model

This is an onsite role requiring 5 days a week at client site in Sleepy Hollow, New York, USA. The working arrangements for this role are accurate as of the date of posting. This may change based on the project you’re engaged in, as well as business and client requirements.