Staff Engineer, Microsoft Active Directory
Accountabilities: The Staff Engineer, Microsoft Active Directory will be responsible for managing and enhancing enterprise identity platforms, ensuring secure, reliable, and efficient authentication services. The role requires advanced technical knowledge, strong troubleshooting capabilities, and the ability to drive improvements across large-scale identity environments.
Design, administer, and optimize enterprise Microsoft Active Directory and Microsoft Entra ID environments.
Manage and maintain Domain Controllers, AD replication, FSMO roles, trusts, schema, NTDS, DFSR, and AD Sites & Services.
Implement, manage, and secure Group Policy (GPO) frameworks across enterprise environments.
Administer Windows Server environments, including DNS, DHCP, IIS, and other core identity infrastructure services.
Design and implement identity security controls including Conditional Access, Multi-Factor Authentication (MFA), Single Sign-On (SSO), Role-Based Access Control (RBAC), and Privileged Identity Management (PIM).
Manage Hybrid Identity solutions using Microsoft Entra Connect (Azure AD Connect) and ensure reliable directory synchronization.
Support Microsoft 365 identity services, Exchange Online, and Hybrid Exchange administration.
Manage mail flow configurations, connectors, SPF, DKIM, DMARC, licensing, and directory synchronization processes.
Troubleshoot complex authentication issues involving OAuth, SAML, Kerberos, and NTLM protocols.
Develop automation solutions using PowerShell and Microsoft Graph API to improve administration and reporting efficiency.
Lead Active Directory migrations, upgrades, consolidations, backup, disaster recovery, and high-availability initiatives.
Perform root cause analysis for critical identity-related incidents and implement long-term corrective solutions.
Collaborate with cloud, infrastructure, and security teams to strengthen identity security and operational processes.
Monitor identity security posture, support compliance initiatives, and continuously improve identity management practices.
Requirements:
The ideal candidate should have extensive experience managing enterprise identity platforms, strong Microsoft ecosystem expertise, and the ability to solve complex infrastructure challenges. The role requires a combination of technical depth, security awareness, automation skills, and effective collaboration with cross-functional teams.
Bachelor’s or Master’s degree in Computer Science, Information Technology, or a related field.
5.5+ years of professional experience in Microsoft Active Directory administration.
Strong experience managing Microsoft Active Directory across enterprise, multi-site environments.
Advanced knowledge of Microsoft Entra ID (Azure AD) administration and Hybrid Identity architectures.
Hands-on experience with Entra Connect (Azure AD Connect) and directory synchronization solutions.
Strong understanding of Windows Server technologies (2012–2022+), DNS, DHCP, IIS, and Group Policy administration.
Experience designing and implementing Conditional Access, SSO, MFA, RBAC, PIM, and identity lifecycle management solutions.
Strong knowledge of Microsoft 365 identity services, Exchange Online, and Hybrid Exchange environments.
Experience managing authentication protocols including OAuth, SAML, Kerberos, and NTLM.
Strong PowerShell scripting skills and experience using Microsoft Graph API for automation.
Experience with Active Directory migrations, upgrades, consolidations, backup, disaster recovery, and high-availability solutions.
Knowledge of IAM best practices, identity security principles, compliance requirements, and enterprise authentication standards.
Experience with Active Directory administration and migration tools such as Quest is preferred.
Strong analytical, troubleshooting, communication, and stakeholder management skills.
Ability to work independently while collaborating effectively with global technical teams.
Benefits:
Opportunity to work on large-scale enterprise identity and security initiatives.
Exposure to advanced Microsoft identity technologies and modern cloud security practices.
Collaborative environment with infrastructure, cloud, and cybersecurity professionals.
Opportunities for continuous learning and technical growth.
Ability to contribute to automation, security improvements, and identity transformation projects.
Flexible work environment supporting productivity and innovation.
Competitive compensation package aligned with experience and expertise.
Long-term career development op
How Jobgether works: We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team. We appreciate your interest and wish you the best! Why Apply Through Jobgether?
Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.
#LI-CL1