Active Directory Engineer

Active Directory Engineer (Remote – India)

Experience: 5–10 years

Employment Type: Full-Time (FTE)

Compensation: ₹16 LPA

Work Mode: Remote

Shift: Monday–Friday, 6:00 PM – 2:00 AM IST

About the Role

We are looking for an experienced Active Directory Engineer to provide hands-on operational support and engineering expertise across complex enterprise identity environments .

This role is not limited to routine AD administration . You will work across Active Directory, DNS, observability platforms (Splunk, Microsoft Sentinel, Datadog) , and have working exposure to Microsoft Entra ID .

A strong understanding of clean forest architecture, OU/GPO design, and identity hygiene is critical.

The ideal candidate is someone who understands what “good” looks like in AD , can spot design flaws, fix them methodically, and document decisions clearly.

Key Responsibilities

• Operate and support enterprise Active Directory environments (single & multi-forest).
• Design, review, and optimize:
• Forest and domain architecture
• OU structures and delegation models
• Group Policy design, inheritance, and enforcement
• Manage and troubleshoot DNS (AD-integrated zones, forwarders, replication issues).
• Support identity-related operational incidents and escalations.
• Implement and maintain observability for AD using:
• Splunk (event ingestion, queries, dashboards)
• Microsoft Sentinel
• Datadog (where applicable)
• Perform AD health checks , security reviews, and remediation.
• Support hybrid identity scenarios and have working knowledge of Entra ID / Azure AD .
• Assist with automation and scripting (PowerShell) for operational efficiency.
• Produce clear documentation for architecture, SOPs, and operational runbooks.
• Participate in mock consultations , technical discussions, and solution reviews.

Required Skills & Expertise

• 5–10 years of hands-on Active Directory engineering experience .
• Strong understanding of:
• AD forests, domains, trusts, FSMO roles
• OU design and GPO management (not just editing policies)
• DNS fundamentals in AD environments
• Solid experience working with Windows Server–based Domain Controllers .
• Practical experience with Splunk , Microsoft Sentinel , or Datadog for identity observability.
• Good working knowledge of Microsoft Entra ID (hybrid identity concepts).
• Strong PowerShell scripting skills for AD and operational tasks.
• Ability to reason about best practices, security posture, and design trade-offs .
• Clear communication and documentation skills.

Preferred Skills

• Experience with large or regulated enterprise environments .
• Exposure to:
• AD security hardening
• Tiered access models
• Privileged access concepts
• Familiarity with identity-related compliance or audit requirements.
• Prior experience in consulting or L3 support roles.

Assessment Process

• 2-week paid assessment
• Compensation: ₹600/hour
• Practical, hands-on evaluation covering:
• Standing up AD forests and Domain Controllers
• Designing OU and GPO structures
• Configuring AD observability using Splunk / Sentinel / Datadog
• Automation and PowerShell tasks
• Mock consulting scenarios
• Documentation and design reasoning

All assessment work is performed in non-production

Engagement Details

• Shift: 6:00 PM – 2:00 AM IST (Monday–Friday)
• Employment Type: Full-Time (FTE)
• Annual Compensation: ₹16 LPA
• Work Mode: Remote (India)