Technical Services Engineer Practitioner

Key Responsibilities:

1. Solution Design and Architecture: Design and implement comprehensive Active Directory architectures for on-premises, hybrid, and cloud environments. Design and implement Active Directory tiering strategies (e.g., separating privileged accounts and managing access to critical AD components) to enhance security and limit exposure of sensitive data. Architect highly available and fault-tolerant AD solutions, ensuring security, data integrity, and performance. Provide guidance on AD deployment models, including forests, domains, trusts, and organizational units (OUs), and design cross-platform integration strategies.

2. Identity and Access Management (IAM) Solutions: Develop and implement strategies for centralized identity management using Active Directory and Azure AD.Ensure seamless integration of AD with enterprise applications, databases, and cloud services (e.g., Azure, AWS).Implement and manage identity federation, single sign-on (SSO), and multi-factor authentication (MFA) technologies. Integrate AD tiering models to segregate different levels of access to critical systems and resources.

3. Security and Compliance: Architect AD solutions that align with security best practices, regulatory requirements, and industry standards.Implement Privileged Access Management (PAM) strategies within AD tiering to ensure secure management of highly privileged accounts.Design and enforce security policies for user authentication, encryption, and access control within Active Directory environments.Implement solutions for data protection, auditing, and incident response, ensuring compliance with GDPR, HIPAA, or other relevant data protection regulations.Conduct regular audits to ensure compliance with internal security policies and industry best practices.

4. Backup, Recovery, and Disaster Recovery Planning:Design and implement backup and disaster recovery (DR) solutions for Active Directory environments.Architect strategies for AD replication, site failover, and ensure appropriate Recovery Time Objectives (RTOs) and Recovery Point Objectives (RPOs) for critical systems.

5. Integration and Optimization: Integrate AD with third-party applications and cloud platforms (e.g., Office 365, AWS, Azure).Implement automation and scripting (using PowerShell, for example) to streamline AD management, reduce manual intervention, and improve efficiency

6. Leadership and Collaboration: Provide technical leadership to cross-functional teams during the design, implementation, and migration of AD solutions. Collaborate with infrastructure, cloud, security, and application teams to ensure seamless integration of AD services

Technical Skills: Active Directory (AD): Extensive experience with AD domains, trusts, replication, and GPO management. Cloud Technologies: Proficiency in cloud-based identity management with Azure AD, AWS IAM, or other cloud IAM solutions .Backup and Recovery: Experience with AD backup solutions, including native AD backup tools and third-party solutions (e.g. Commvault).Security and Encryption: Knowledge of AD security practices, including user authentication methods, LDAP, Kerberos, and TLS encryption standards. Scripting/Automation: Expertise in PowerShell scripting for AD management and automation. Directory Integration: Experience integrating AD with cloud applications (e.g., Office 365), third-party identity providers, and hybrid environments. Virtualization: Familiarity with virtualization technologies (e.g., VMware, Hyper-V) for running AD in virtualized environments.

Soft Skills: Strong analytical, troubleshooting, and problem-solving abilities. Excellent verbal and written communication skills for documentation and presentation.Ability to prioritize tasks and manage multiple projects in a fast-paced, dynamic environment. Collaborative mindset with the ability to work effectively across teams

Preferred Qualifications: Education: Bachelors degree in Computer Science, Information Technology, or equivalent. Certifications: Microsoft Certified: Azure Solutions Architect Expert, Microsoft Certified: Identity and Access Administrator Associate, or equivalent certifications.

Experience: At least 10 years of hands-on experience in Active Directory design, management, and troubleshooting.Proven experience with large-scale AD environments, including multi-domain and forest configurations. Experience with Active Directory Federation Services (ADFS), Group Policy, and Identity Management. Cloud Exposure: Experience working with cloud platforms like AWS, Google Cloud, or Alibaba Cloud in an AD-integrated environment.