Wintel Active Directory Senior Infrastructure Lead

Active Directory & Wintel

1. Excellent working knowledge of Microsoft Active Directory and Azure Active Directory, with the ability to assess enterprise on‑prem AD environments and design and implement target solutions.
2. Strong expertise in Active Directory design and implementation, including:
3. AD forest and domain design
4. Sites and subnets
5. FSMO role placement
6. NTP configuration
7. RODC management
8. Experience with on‑premises Active Directory and Azure Active Directory integration and migration.
9. In‑depth knowledge of PKI, Certificate Services, ADFS, and identity federation technologies.
10. Hands‑on experience with Active Directory security, resilience, and recovery, including tools such as Semperis (AD Forest Recovery, AD Security & Audit).
11. Strong understanding of SSO and MFA implementations.
12. Experience in automating Active Directory and Azure AD tasks, and proposing and implementing infrastructure improvements and enhancements.
13. Proven experience with:
14. Domain Controller promotion and decommissioning
15. GPO design, creation, and implementation
16. Active Directory operational support and project work
17. Good knowledge of DNS, DHCP, File Services, DFS, and other AD‑dependent services.
18. Expertise in securing Microsoft client and server operating systems, including:
19. Authentication and authorization mechanisms
20. Encryption technologies
21. Certificate Authority services
22. Security hardening and compliance
23. Install, configure, tune, maintain, monitor, and troubleshoot Windows Server 2012 / 2016 / 2019 / 2022.
24. Strong experience in server hardening, patching, and vulnerability remediation.
25. Experience managing and supporting Hyper‑V, SCVMM, and Failover Clustering.
26. Ability to support application and infrastructure teams for AD‑related business requirements and incident resolution.
27. Manage work queues for incidents, problems, changes, tasks, and service requests, ensuring effective workload management.
28. Excellent written, verbal, and interpersonal communication skills.

Azure

1. Hands‑on experience in Azure architecture, deployment, and operations.
2. Strong experience with:
3. Azure Virtual Machines and compute services
4. Azure Storage (Accounts, Snapshots, Monitoring)
5. Azure Backup (MARS)
6. Azure Site Recovery
7. Azure Monitor
8. Experience migrating on‑prem applications and workloads to Azure.
9. Experience with Azure Arc for managing and governing on‑premises and multi‑cloud resources from Azure.
10. Knowledge and hands‑on experience with:
11. Azure Active Directory
12. Single Sign‑On (SSO)
13. Identity and access management
14. Understanding of cloud cost monitoring and optimization.
15. Deploy, manage, and support Azure resources using best practices and governance standards.

CyberArk (Secondary)

1. Basic experience with CyberArk PAM, including onboarding and managing privileged accounts (Windows, Active Directory, service accounts).
2. Familiarity with core CyberArk components (PVWA, CPM, PSM) and password rotation concepts.
3. Experience supporting CyberArk‑related incidents and access requests.
4. Understanding of privileged access security best practices and AD/Azure AD integration.

Total Experience Expected: 08-10 years