Active Directory Engineer - Directory Services
Core
Administering and supporting on-premises Active Directory and Microsoft Entra ID in a hybrid identity environment, executing large-scale user and computer migrations, and maintaining core directory components.
Role type
Senior IC Active Directory Engineer
Builds
Stable and secure hybrid identity services, consolidated directory forests, and automated migration workflows.
Domain
Enterprise IT / Identity Management
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work -> infrastructure
Required skills
Microsoft Active Directory administration, Microsoft Entra ID, Quest Migration Manager (MPAD), PowerShell scripting, Windows domain membership management, DNS, Group Policy, LDAP, authentication troubleshooting, access control management, large-scale migration planning, pre-migration analysis, cutover execution, post-migration validation, domain consolidation, object synchronization.
Preferred skills
Large-scale Active Directory consolidation experience, forest/domain migration programs, hybrid identity solutions, directory synchronization scenarios, enterprise Windows environments with large user/device populations.
Responsibilities
Administer and support on-premises Active Directory and Microsoft Entra ID in a hybrid identity environment. Maintain and troubleshoot core directory components such as domains, OUs, trusts, DNS, Group Policy, and security principals. Support Entra ID integration scenarios, including synchronization, authentication flows, and identity lifecycle alignment. Keep identity services stable and secure throughout consolidation and migration efforts. Execute user, computer, group, and object migrations using Quest Migration Manager for Active Directory (MPAD). Perform pre-migration analysis, remediation, and validation of source and target directory objects. Coordinate and carry out cutover activities while minimizing disruption to users and business operations. Investigate and resolve migration issues involving authentication, access, group membership, and object alignment. Verify post-migration success and ensure objects function correctly in the target domain and Entra ID. Support domain consolidation for Windows workstations and servers, including joins, re-joins, and post-migration remediation. Assist with Group Policy alignment, device authentication issues, and system access during and after migration events. Collaborate with endpoint, server, and application teams to resolve cross-domain and post-migration dependencies. Develop and maintain basic to intermediate automation with PowerShell to support migration, validation, and cleanup tasks. Automate repetitive operational steps to reduce manual effort and improve consistency during large-scale migrations. Use scripts and tools to support reporting, validation, and exception handling. Work closely with identity, security, endpoint, application, and service desk teams throughout the consolidation lifecycle. Follow established migration procedures, standards, and security controls. Contribute to documentation, runbooks, and operational knowledge for directory services and consolidation activities. Participate in incident resolution, change activities, and continuous improvement initiatives related to directory operations.
Seniority
Senior, hands-on IC