Infobox Engineer

Key Responsibilities

• Assess AD environment (domain/forest design, OUs, GPOs, replication, DNS, FSMO roles).
• Remediate stale accounts, orphaned objects, and security group sprawl.
• Optimize Azure AD (Entra ID), including hybrid identity (Azure AD Connect / Cloud Sync), MFA, and conditional access.
• Evaluate and improve identity lifecycle management (provisioning, offboarding, privileged access, service accounts).
• Develop a prioritized identity and AD improvement roadmap.
• Provide ongoing SME support and escalation for AD/identity issues.
• Create and maintain operational documentation, standards, and runbooks.

Required Skills

• Strong Active Directory expertise (multi-domain/forest, GPOs, replication, DNS/DHCP).
• Azure AD / Entra ID and hybrid identity experience.
• Deep DNS/DHCP knowledge in enterprise environments.
• Windows Server administration fundamentals.
• Strong documentation and cross-team communication skills.

Preferred

• Microsoft Identity certifications.
• Experience with identity governance and access management.
• Familiarity with tools like Microsoft Defender for Identity.
• Automation/scripting (PowerShell, etc.).
• Consulting or professional services experience.