Active Directory Engineer

Senior Print Info Security Engineer
Remote


Managing and maintaining multiple separate Active Directory infrastructures, enhancing the security of those Active Directory environments, working with business partners and application owners to increase the security of their application's utilization of Active Directory services, providing consulting services for application teams in migrating their applications to the Client core AD or cloud environment, decommissioning the Active Directory domain, participating in a 24x7 On-Call rotation.

Responsibilities
Operationally manage Active Directory infrastructure of multiple Active Directory environments. Review, investigate, and remediate any AD performance irregularities identified by the management and monitoring tools. Work with the business and application teams to increase the security of the Active Directory environments by remediating identified security vulnerabilities. Leverage security scanning tools to monitor and maintain the Active Directory environment to the published baseline security standards. Work with the business and application teams to migrate their applications to the Client core AD environment or Client cloud environment. Move the Active Directory environment towards consolidation.



Skills

Must have
We are looking for a senior Active Directory Engineer or Architect with substantial experience in domain integration and migration projects, as well as deep familiarity with the tools and products listed below for managing and maintaining distinct Active Directory infrastructures. The ideal candidate should have significant experience collaborating with business partners and application teams to enhance the security of their Active Directory resource usage and assist in migrating their applications to the Client core AD or cloud environment, as part of the Active Directory domain consolidation efforts.
Active Directory infrastructure engineering (15+ years)
Active Directory performance management and tuning (8+ years)
Server hardware management (6+ years)
VMware ESX / Hyper-V engineering and operations (6+ years)

Nice to have
PowerShell scripting/programming,
VB scripting,
Batch scripting,
System Center Operations Manager (SCOM),
Microsoft EndPoint Configuration Manager (SCCM/MECM),
Quest InTrust,
Quest Change Auditor,
Quest Enterprise Reporter,
Quest GPO Admin,
Quest Recovery Manager for AD (RMAD),
Bloodhound Enterprise,
Microsoft Risk Assessment Program (RAP),
Firewall engineering/operations,
Networking/subnetting, DNS.