Active Directory Engineer

Job Description

The Senior Active Directory Engineer will be supporting a large-scale infrastructure transformation initiative. This role will focus on designing, building, migrating, and decommissioning Active Directory environments, with a strong emphasis on modernization and integration with Azure-based infrastructure.

Roles and Responsibilities

• Lead and execute Active Directory domain lifecycle activities, including:
  • Standing up new AD domains
  • Promoting and demoting domain controllers
  • Decommissioning legacy domains (~30+ environments)
• Support large‑scale AD migration initiatives, including:
  • Coordinating ~80+ domain controller builds
  • Transitioning workloads from on‑premises to Azure-based environments
• Design and implement Active Directory architecture and domain strategies, ensuring scalability, security, and performance
• Collaborate on Azure Landing Zone deployments, including:
  • Network and IP addressing planning
  • Security policy implementation
  • Integration with enterprise identity frameworks
• Execute and support domain controller migrations from on‑prem to hardened Azure environments
• Perform advanced troubleshooting across infrastructure layers, including:
  • DNS resolution issues, authentication and domain connectivity challenges, firewall configurations and rule updates
  • Work cross‑functionally with application and infrastructure teams to identify and remediate hard‑coded dependencies
• Support migration readiness and cutover activities
• Develop and maintain automation scripts (PowerShell preferred) to streamline AD operations and migration processes
• Ensure adherence to enterprise security standards, identity governance, and compliance requirements

Skills and Requirements

• 5+ years of hands‑on experience as an Active Directory Engineer / AD Specialist
• Strong expertise in Active Directory Domain Services (AD DS), including:
  • Domain controller build, promotion/demotion
  • Forest/domain design and administration
  • Group Policy management
• Proven experience with large‑scale AD migrations and domain transformations
• Hands‑on experience with Microsoft Azure infrastructure, including:
  • Azure Landing Zones
  • Hybrid identity environments
  • Migration of on‑prem AD to Azure‑hosted environments
• Strong understanding of DNS, networking concepts, and security policies within AD environments
• Experience troubleshooting complex, multi‑layer infrastructure issues
• Strong PowerShell scripting and automation capabilities
• Experience with identity modernization initiatives (e.g., hybrid or cloud‑first AD strategies)
• Exposure to enterprise‑scale transformation programs
• Familiarity with firewall configurations and network security tooling
• Experience working with distributed/offshore teams

We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment regardless of their race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or recruiting process, please send a request to View email address on ca.talent.com.