Specialist - System Management

Specialist - System Management

Job Title: Active Directory Domain Migration

Job Summary

We are seeking a highly skilled and experienced Senior Infrastructure Engineer specializing in Active Directory AD and Server Domain Migrations In this role you will lead the architecture planning and execution of complex domain consolidation and server migration projects You will be responsible for ensuring seamless identity migration minimal business downtime and strict adherence to security and compliance frameworks The ideal candidate will have extensive handson experience with Microsoft Windows Server ecosystems enterprise migration tools and hybrid cloud identity environments

Key Responsibilities

1) Migration Strategy Execution

Architecture Planning Design test and implement Active Directory migration strategies intraforest and crossforest migrations domain consolidations and greenfield forest deployments

Tool Management Configure and operate enterprise migration tools eg Quest Migration ManagerMigrator Pro Binary Tree or Microsoft ADMT to migrate users computers service accounts and security groups

FSMO Domain Controller Lifecycle Manage the promotion and demotion of Domain Controllers transfer FSMO roles and handle postmigration metadata cleanup

Server Migration Execute Windows Server OS upgrades and migrations eg migrating workloads to Windows Server 20222025 while preserving permissions share configurations and data integrity

2) Active Directory Core Infrastructure Management

Identity Directory Services Maintain and optimize AD DS Group Policy Objects GPOs OU structures and Active Directory Sites and Services

Core Network Services Manage and troubleshoot DNS resolution replication topologies DHCP and integrated PKICertificate Services during transitional migration states

Trust Management Establish configure and troubleshoot secure Forest and Domain trusts across distinct corporate environments

3) Security Hardening Compliance

Security Baseline Enforcement Ensure migrated and newly established environments comply with cyber security policies modern TLS defaults and strong cryptographic standards

SidHistory Remediation Manage sIDHistory cleaning and ensure proper access control translation during object migration phases

Health Validation Perform ongoing directory health checks using tools like dcdiag repadmin and SYSVOL verification via DFSR to address replication or structural errors promptly

4) Collaboration Documentation

Technical Writing Produce detailed Standard Operating Procedures SOPs fallbackrollback plans and architectural diagrams

CrossFunctional Support Coordinate with network security and cloud engineering teams to ensure application compatibility and minimal impact on enduser authentication

Qualifications Technical Skills

Education Bachelors degree in Computer Science Information Technology Cyber Security or equivalent practical experience

Experience 6 years of dedicated experience in enterprisescale Active Directory administration and complex domain migration projects

Technical Proficiencies

Operating Systems Deep expertise in Windows Server 2012R2 through Windows Server 20222025

Automation Advanced scripting proficiency in PowerShell for directory manipulation object modifications and automated migration tasks eg Move AD Directory Server Operation Master Role Set AD Forest Mode

Migration Utilities Hands on experience with Quest Software suites Directory Sync Pro or ADMT

Hybrid Identity Preferred Familiarity with Microsoft Entra ID Azure AD Azure AD ConnectCloud Sync and configuring custom B2CB2B identity policies or hybrid joins

Soft Skills

Strong analytical and troubleshooting mindset under timesensitive deployment windows

Exceptional communication skills to convey complex technical risks to project stakeholders

Proven ability to work independently during night or weekend maintenance windows