Sr. Active Directory Engineer - on-site, NO H-1B, NO C2C

Pay Range
Base pay: $90.00/hr - $95.00/hr

Schedule: 4 days onsite, no flexibility.

Responsibilities

Lead the assessment and analysis of the Domain controllers in the AD forest.

Document and guide the operations team with the decommissioning, upgrade and migration of domain controllers.

Analyze the existing use of PKI certificates in legacy directories and help migrate them into Microsoft’s PKI service.

Evaluate capabilities of services/products and design solutions to deliver future service offerings through detailed technical analysis.

Define engineered designs, including full documentation.

Follow structured methodologies for technical analysis of products and solutions.

Basic Qualifications

Minimum of 5 years of related work experience.

Demonstrated experience designing, implementing, and integrating enterprise‑level highly connected hybrid LDAP solutions with at least 40,000 users, including:

Active Directory

Microsoft Identity Manager

Active Directory Federation

Services / AADC

Integrations between key services and various LDAP providers.

Experience in engineering, designing, and integrating both infrastructure components (domain controllers, sites and services, connectivity, etc.) and logical aspects (GPO management, directory structure, and management toolsets).

Experience in project management of large IT initiatives.

Experience working with and directing suppliers in an outsourced environment infrastructure.

Project Work

Assess existing domain controllers, identify consolidation opportunities, and develop a migration strategy.

Ensure replication integrity and domain health during consolidation.

PKI Certificate Migration & Cleanup

Analyze existing PKI infrastructure and certificates.

Migrate certificates to a modern PKI infrastructure with minimal disruption.

Revoke, renew, and replace legacy or non‑compliant certificates.

Ensure compliance with security policies and best practices.

Active Directory Administration & Cleanup

Identify and remove stale objects, orphaned accounts, and unused policies.

Optimize AD replication, site topology, and group policy objects (GPOs).

Implement best practices for AD security, auditing, and hardening.

Troubleshooting & Support

Diagnose and resolve AD, DNS, and PKI‑related issues.

Work with security and infrastructure teams to remediate vulnerabilities.

Document configurations, policies, and procedures for future reference.

Seniority Level
Mid‑Senior level

Employment Type
Contract

Job Function
Information Technology

Industries: IT Services and IT Consulting and Entertainment Providers

#J-18808-Ljbffr