Active Directory Engineer - Remote - 1655739BR

Senior Active Directory Engineer

Customer is seeking an experienced Senior Active Directory Engineer contractor to provide operational and engineering support for our enterprise identity infrastructure during a temporary staffing backfill.

The successful candidate will support a large global Active Directory environment and associated identity management platforms including:

• Microsoft Active Directory
• One Identity Active Roles (ARS)
• Quest Recovery Manager for Active Directory (RMAD)
• Quest Change Auditor
• Quest On Demand Migration (ODM)
• Hybrid Identity Services

This individual will collaborate closely with the Active Directory Product Owner, AD Engineering Team, Infrastructure Teams, and Cybersecurity teams to maintain the stability, security, and operational excellence of Customer's Tier-0 identity services. The environment utilizes Active Roles, Recovery Manager, Change Auditor, and On Demand Migration as strategic identity administration, audit, recovery, and migration platforms.

Key Responsibilities

• Support enterprise Active Directory environments
• Troubleshoot authentication issues involving Kerberos, LDAP, DNS, and replication
• Support domain controller administration and maintenance
• Manage organizational units, users, groups, service accounts, and group policies
• Participate in incident response and outage resolution
• Support administration and maintenance of One Identity Active Roles
• Troubleshoot provisioning and delegation issues
• Manage access templates and security templates
• Support ARS upgrades and modernization activities
• Maintain documentation and operational procedures
• Monitor backup and recovery operations
• Perform object-level recovery activities
• Participate in disaster recovery testing exercises
• Assist with recovery planning and documentation
• Monitor AD audit events and alerts
• Generate security and compliance reports
• Support cyber investigations and audit requests
• Troubleshoot collection and monitoring issues
• Support directory migration projects
• Assist with identity synchronization activities
• Participate in merger, acquisition, and divestiture migration efforts
• Troubleshoot migration-related issues
• Develop and maintain Power Shell automation solutions
• Automate Active Directory operational activities where practical
• Create health-check, reporting, and monitoring scripts
• Support bulk administration and provisioning tasks
• Improve operational efficiency through scripting and automation
• Contribute to process improvements and documentation

Required Qualifications

• 7+ years of Active Directory administration experience
• Experience supporting large enterprise Active Directory environments
• Strong troubleshooting skills across:
  Active Directory, DNS, LDAP, Kerberos, Group Policy, AD Replication
• Experience supporting One Identity Active Roles (ARS)
• Experience supporting Quest RMAD or equivalent AD recovery solutions
• Experience supporting Quest Change Auditor or equivalent auditing platforms
• Working knowledge of Power Shell for administration and troubleshooting
• Strong written and verbal communication skills
• Experience supporting Tier-0 or other critical infrastructure services

Preferred Qualifications

Strongly Preferred

• Advanced Power Shell scripting and automation experience
• Experience developing production automation solutions
• Experience creating operational dashboards, reports, and health checks
• Experience automating:
  User provisioning, Group management, Service account administration, AD reporting, Compliance reporting

Additional Preferred Skills

• Quest On Demand Migration (ODM)
• Microsoft Entra  / Azure AD
• Microsoft Entra Connect
• Hybrid Identity
• Identity Governance solutions
• Cybersecurity or Identity Security experience