Active Directory Specialist

Profile - Active Directory Engineer

Experience: 5–8 Years

Employment Type: Full-Time

Job Summary

We are looking for an experienced Active Directory Engineer with 5–8 years of hands-on experience in Microsoft Active Directory administration, recovery, Domain Controller deployment, replication, and AD migration.

The candidate will be responsible for maintaining and supporting enterprise Active Directory environments, executing AD recovery plans, setting up Read-Only Domain Controllers (RODC) and Read/Write Domain Controllers (RWDC), troubleshooting replication issues, and supporting Active Directory migrations and upgrades.

Key Responsibilities

• Execute and support Active Directory recovery and disaster recovery plans, including restoration and recovery of Domain Controllers and AD services.
• Perform Active Directory health checks, troubleshooting, monitoring, and remediation of AD-related issues.
• Design, deploy, configure, and manage Read/Write Domain Controllers (RWDC) and Read-Only Domain Controllers (RODC).
• Perform Domain Controller promotion and demotion, including installation and configuration of AD DS roles.
• Troubleshoot and manage Active Directory replication, including inter-site and intra-site replication issues.
• Analyze and resolve replication problems using tools such as Repadmin, Dcdiag, Event Viewer, and PowerShell.
• Manage Active Directory Sites and Services, replication topology, subnets, and site links.
• Support Active Directory domain, forest, and tenant migration activities.
• Hands-on experience with AD migration, domain consolidation, domain restructuring, and Domain Controller migration.
• Plan and execute Domain Controller upgrades and replacement, ensuring minimal impact to business operations.
• Manage FSMO roles, Global Catalogs, DNS integration, and Domain Controller dependencies.
• Troubleshoot DNS, DHCP, Kerberos, LDAP, Group Policy, authentication, and domain trust-related issues.
• Manage and troubleshoot Group Policy Objects (GPOs) and policy application issues.
• Support AD disaster recovery, backup, restore, and business continuity activities.
• Perform authoritative and non-authoritative Active Directory restores where required.
• Work with infrastructure and security teams during AD-related incidents, migrations, and recovery exercises.
• Prepare and maintain technical documentation, recovery procedures, migration plans, and operational runbooks.
• Participate in planned maintenance, change management, incident management, and problem management activities.

Mandatory Technical Skills

• 5–8 years of hands-on experience with Microsoft Active Directory.
• Strong experience in Active Directory recovery and disaster recovery procedures.
• Hands-on experience setting up and managing:
• RWDC – Read/Write Domain Controller
• RODC – Read-Only Domain Controller
• Strong knowledge of Active Directory replication and troubleshooting.
• Experience with AD migration, including domain/forest migration and Domain Controller migration.
• Strong knowledge of AD DS, DNS, DHCP, LDAP, Kerberos, and Group Policy.
• Experience with FSMO roles, Global Catalog, Sites & Services, Trusts, and OU structure.