Active Directory Engineer

Job Description & Requirements We are seeking a highly skilled Active Directory Engineer with experience in planning and executing Active Directory (AD) migrations/Upgrade. The ideal candidate will be responsible for developing comprehensive upgrade plans, performing assessments of existing environments, and ensuring a seamless migration with minimal disruption. In addition, candidate should have skill to lead the project and deal with stakeholders. Responsibilities: Develop and implement Active Directory servers upgrade plans including detailed timelines and risk mitigation strategies. Perform assessments of current AD environments, including domain controllers, group policies, and security configurations. Develop AD upgrade plan to opt new Windows 2025 AD Servers. Identify the Dependency on existing AD server and remove the dependency without interrupting the Business. Plan and implement the DC isolation, demotion, and promotion. Work with application and service owner to mitigate the insecure protocols whenever identified. Work with Application team to remove the hardcoding Collaborate with network, security, and application teams to ensure compatibility and successful Upgrade. Troubleshoot Directory Synchronization and Federation Services DFS, DNS and Group Policy management Provide technical leadership and troubleshooting expertise during migration activities. Work with customers and other IT stakeholders to identify and define secure solution requirements. Use Migration Manager to migrate data from the existing AD to the new AD. Develop scripts to automate the day-to-day task Execute pre-migration testing and develop fallback plans. Ensure compliance with security policies and best practices for AD environments. Ensure compliance with existing processes and security policies. Provide post-upgrade support and resolve any technical issues. Act as a technical lead, mentoring junior L1/L2 engineers, reviewing changes, and driving team adherence to ITIL processes. Knowledge Article Creation and Documentation. Qualifications: 10+ years of experience configuring, managing, and implementing Active Directory Good communication, writing, and customer services skills. Knowledge of Service Now, Change Management, Problem Management , reporting and Incident Management. Must have hands-on experience with Active Directory upgrade Extensive Experience of AD life cycle management. Experience to deal with authentication, authorization, and OS level issues. Experience with AD migration tools such as ADMT (Active Directory Migration Tool), Quest Migration Manager, or similar tools. Experience with windows 2025 Server/AD would be preferred. Experience developing AD migration plan and developing scripts to automate AD data migration Experience running Active Directory health checks. PowerShell scripting for automation and administration. Experience with AD enterprise certificate services, AD federation services, and identity manager Active Directory hands on experience in a multi-site/multi-domain/multi-forest environment, is required. Proven experience with AD security and best practices Experience with DFS Root and Link management and troubleshooting. Experience with IAM (Identity and Access Management), Entra and SSO (Single Sign-On) is preferred. Experience in project management, reporting and problem management