Senior Windows and Active Directory Engineer

Technology Support Engineer

Project Role : Technology Support Engineer
Project Role Description : Resolve incidents and problems across multiple business system components and ensure operational stability. Create and implement Requests for Change (RFC) and update knowledge base articles to support effective troubleshooting. Collaborate with vendors and help service management teams with issue analysis and resolution.
Must have skills : Microsoft Windows Server Administration
Good to have skills : NA
Minimum 7.5 year(s) of experience is required
Educational Qualification : 15 years full time education

Job Title
Senior Windows & Active Directory (Microsoft Entra ID) Engineer
Career Level: 8
Experience
9–12 Years
Location
Bangalore (Onsite Client Location)
Employment Type
Full-Time

Job Summary
We are looking for a seasoned Senior Windows & Active Directory (Microsoft Entra ID) Engineer with 10+ years of experience in managing large-scale enterprise Windows infrastructure. The role requires deep expertise in Windows Server administration, Active Directory, and Hybrid Identity (AD–Entra ID), along with strong troubleshooting and automation skills. The candidate will act as a technical SME, supporting business-critical environments and driving identity modernization initiatives.

Key Responsibilities
Windows Server Administration
Administer and support Windows Server 2012 R2 / 2016 / 2019 / 2022 in enterprise environments.
Perform installation, configuration, patching, and hardening of Windows servers.
Handle Windows OS upgrades, in-place and side-by-side migrations.
Manage Windows Failover Clustering, file servers, print servers, and application servers.
Perform server performance tuning, capacity planning, and root cause analysis.
Troubleshoot complex OS-level, service, and application integration issues.
Active Directory (On-Prem)
Design, manage, and support multi-domain / multi-forest Active Directory environments.
Perform AD health checks, replication monitoring, and cleanup activities.
Manage FSMO roles, AD sites & services, trusts, and delegation models.
Create, manage, and troubleshoot Group Policy Objects (GPOs) including security baselines.
Support DNS, DHCP, and time synchronization services.
Microsoft Entra ID (Azure AD)
Manage Microsoft Entra ID in hybrid identity environments.
Configure and support Entra ID Connect / Cloud Sync.
Implement and manage Conditional Access, MFA, device-based access, and identity protection.
Manage RBAC, Privileged Identity Management (PIM), and access reviews.
Support SSO integrations with enterprise and SaaS applications.
Security & Compliance
Implement Windows and AD security hardening aligned with CIS / Microsoft benchmarks.
Support Zero Trust Identity principles.
Work with security teams on identity-related incidents, audits, and remediation.
Enable logging, monitoring, and compliance reporting.
Automation & Scripting
Develop and maintain PowerShell scripts for automation, reporting, and bulk operations.
Automate user lifecycle management, server health checks, and routine admin tasks.
Operations & Leadership
Act as Level 3 / SME support for Windows & Identity platforms.
Participate in major incident management and problem resolution.
Provide technical guidance and mentoring to junior engineers.
Prepare SOPs, runbooks, and operational documentation.
Coordinate with network, cloud, security, and application teams.

Mandatory Skills (India Hiring Focus)
Windows & AD
10+ years of hands-on experience in Windows Server & Active Directory
Strong expertise in Windows Server 2012–2022
Advanced knowledge of AD DS, GPO, DNS, DHCP, Kerberos, LDAP
Experience in Windows server build, patching, upgrades, and decommissioning
Hands-on with Failover Clustering, File Services, NTFS permissions
Strong troubleshooting skills for OS-level and AD-related issues
Identity & Cloud
Strong experience with Microsoft Entra ID (Azure AD)
Hands-on with Hybrid Identity, Entra ID Connect, and SSO
Experience implementing MFA, Conditional Access, PIM
Automation
Strong PowerShell scripting skills
Experience automating Windows & AD administration tasks

Good to Have / Preferred Skills
Experience with ADFS, PKI, and certificate lifecycle management
Exposure to Microsoft Intune and device identity
Knowledge of Defender for Identity / Defender for Endpoint
Experience in large enterprise / captive / global delivery environments
Working knowledge of ITIL processes (Incident, Change, Problem)

Certifications (Preferred – Not Mandatory)
Microsoft Certified: Windows Server / Identity & Access Administrator
Microsoft Certified: Azure Administrator or Security Engineer
ITIL Foundation

Soft Skills
Strong communication skills for stakeholder interaction
Ability to work in 24x7 enterprise support environments (on-call / shifts if required)
Strong documentation and knowledge-sharing mindset
Proactive and ownership-driven approach