Sr. Domain Administrator – Active Directory (Onsite)

Key Responsibilities

• Research, test and document standardized technical procedures for the deployment / troubleshooting of server hardware, the associated operating systems and application software.
• Perform system vulnerability assessments using vendor native (MS SCT) and third-party tools (Nessus), recommending mitigation options based on risk of exploit after consideration of environmental factors.
• Schedule and perform risk assessments regularly and when vulnerabilities are identified on operational network equipment, such as computer systems devices and various software packages.
• Act as a service response escalation point, working with teams of varying technical ability in response to service availability and/or performance related incidents / problems.
• Support disaster recovery by verifying continuous availability of domain services such as Active Directory, DNS, DHCP, IPAM, DFS.
• Serve as a technical advisor for project and service response and related tasks.
• Apply the aforementioned processes/procedures in support of the following technologies:
• Microsoft Windows Server 2019/2022/2025
• Microsoft Active Directory
• Microsoft DNS
• Microsoft ADCS
• Microsoft DFS
• Microsoft Public Key Infrastructure solutions
• Hardware Security Module support for protection of private keys
• SAML, OAuth 2.0, OpenID Connect and SCIM
• FIDO2 security keys
• Provide systems administration expertise for special projects, which may include working with internal and external clients and vendors. This includes technical input and recommendations; automation solutions; and, other system administration actions.
• Provide systems administration support for any new systems added to IT infrastructure, assisting with testing, configuration, integration and implementation efforts, including developing test plans, implementation schedule, scope, dependencies, documentation, and user training.
• Create, develop / draft and recommend cross training and functional documentation of subject matter for audiences; conduct User training on an individual or group basis as requested.
• Participate in process workshops, including project lessons learned, group improvement and documentation efforts for procedures, processes, standards, guidelines, practices, and other technical and instructional material.

  Requirements/Qualifications

  • Bachelor’s Degree in Computer Science, Information Technology, Engineering, or a related technical field is preferred.
  • With an Associate’s or Bachelor’s Degree in applicable fields, 8 years of experience is required.
  • With an Associate’s or Bachelor’s Degree not in applicable fields or without a degree, 10 years of experience is required.
  • Applicable Certifications may count for 1 year of experience.
  • Experience must include direct work experience in Information Technology performing System Administration.
  • 5 Years of knowledge and experience sufficient to administer disparate Active Directory domains and services necessary to support these domains such as DNS, ADCS, DFS.
  • 7 Years of knowledge of and experience sufficient to successfully troubleshoot Windows operating systems using text-based logs, windows event logs, and various utilities.
  • 5 Years of knowledge of and experience with TCP/IP and related services.
  • 5 Years knowledge of and experience with Kerberos authentication in enterprise environments and a strong understanding of Active Directory (AD) integration, LDAP, and hybrid-joined infrastructure.
  • 2 Years knowledge and experience of Active Directory Federation services as well as federated identity concepts to support authentication in a SaaS environment.
  • 2 years Hands-on experience with Microsoft Entra ID and a solid understanding of SSO and identity protocols such as SAML, OAuth 2.0, OpenID Connect, and SCIM. Implementation of FIDO2 security keys and experience migrating large enterprise user bases from traditional MFA to passwordless solutions is desirable.