Active Directory Specialist

Job Description

• Design, implement, and manage AD forests, domains, and trusts across complex, multi-site enterprise environments.
• Perform daily operational support including user/group provisioning, OU management, GPO updates, and DNS/DHCP troubleshooting.
• Manage domain controllers, ensure replication health, maintain SYSVOL integrity, and time synchronization.
• Apply and maintain Group Policy Objects (GPOs) to enforce security hardening and compliance standards.
• Conduct health checks, clean up stale or orphaned objects, and maintain a well-governed AD environment.
• Troubleshoot authentication, replication, and directory service issues and provide root cause analysis.
• Coordinate patching, upgrades, and changes to directory services in line with change management protocols.
• Manage Active Directory Sites & Services, subnets, and replication topology.
• Support backup and restore operations using enterprise-grade tools.
• Administer and secure Microsoft Entra ID, including Conditional Access, Identity Protection, and dynamic group management.
• Integrate on-prem AD with Entra ID using Azure AD Connect / Cloud Sync, ensuring seamless hybrid identity and synchronization.
• Implement and manage SSO, MFA, and passwordless authentication with Microsoft Entra features.
• Implement Privileged Identity Management (PIM) and Just-in-Time (JIT) access to enforce RBAC for privileged roles.
• Monitor and mitigate identity security risks using Microsoft Defender for Identity, Entra ID Protection, Access Reviews, and Audit Logs.
• Assist with identity lifecycle management, joiner/mover/leaver processes, and enforcement of least privilege.
• Collaborate with security, networking, and IAM teams to integrate services like DNS, DHCP, PKI, and MFA.

͏

• Design, implement, and manage AD forests, domains, and trusts across complex, multi-site enterprise environments.
• Perform daily operational support including user/group provisioning, OU management, GPO updates, and DNS/DHCP troubleshooting.
• Manage domain controllers, ensure replication health, maintain SYSVOL integrity, and time synchronization.
• Apply and maintain Group Policy Objects (GPOs) to enforce security hardening and compliance standards.
• Conduct health checks, clean up stale or orphaned objects, and maintain a well-governed AD environment.
• Troubleshoot authentication, replication, and directory service issues and provide root cause analysis.
• Coordinate patching, upgrades, and changes to directory services in line with change management protocols.
• Manage Active Directory Sites & Services, subnets, and replication topology.
• Support backup and restore operations using enterprise-grade tools.
• Administer and secure Microsoft Entra ID, including Conditional Access, Identity Protection, and dynamic group management.
• Integrate on-prem AD with Entra ID using Azure AD Connect / Cloud Sync, ensuring seamless hybrid identity and synchronization.
• Implement and manage SSO, MFA, and passwordless authentication with Microsoft Entra features.
• Implement Privileged Identity Management (PIM) and Just-in-Time (JIT) access to enforce RBAC for privileged roles.
• Monitor and mitigate identity security risks using Microsoft Defender for Identity, Entra ID Protection, Access Reviews, and Audit Logs.
• Assist with identity lifecycle management, joiner/mover/leaver processes, and enforcement of least privilege.
• Collaborate with security, networking, and IAM teams to integrate services like DNS, DHCP, PKI, and MFA.

͏

2. Skill upgradation and competency building

• Clear wipro exams and internal certifications from time to time to upgrade the skills
• Attend trainings, seminars to sharpen the knowledge in functional/ technical domain
• Write papers, articles, case studies and publish them on the intranet

͏

• Design, implement, and manage AD forests, domains, and trusts across complex, multi-site enterprise environments.
• Perform daily operational support including user/group provisioning, OU management, GPO updates, and DNS/DHCP troubleshooting.
• Manage domain controllers, ensure replication health, maintain SYSVOL integrity, and time synchronization.
• Apply and maintain Group Policy Objects (GPOs) to enforce security hardening and compliance standards.
• Conduct health checks, clean up stale or orphaned objects, and maintain a well-governed AD environment.
• Troubleshoot authentication, replication, and directory service issues and provide root cause analysis.
• Coordinate patching, upgrades, and changes to directory services in line with change management protocols.
• Manage Active Directory Sites & Services, subnets, and replication topology.
• Support backup and restore operations using enterprise-grade tools.
• Administer and secure Microsoft Entra ID, including Conditional Access, Identity Protection, and dynamic group management.
• Integrate on-prem AD with Entra ID using Azure AD Connect / Cloud Sync, ensuring seamless hybrid identity and synchronization.
• Implement and manage SSO, MFA, and passwordless authentication with Microsoft Entra features.
• Implement Privileged Identity Management (PIM) and Just-in-Time (JIT) access to enforce RBAC for privileged roles.
• Monitor and mitigate identity security risks using Microsoft Defender for Identity, Entra ID Protection, Access Reviews, and Audit Logs.
• Assist with identity lifecycle management, joiner/mover/leaver processes, and enforcement of least privilege.
• Collaborate with security, networking, and IAM teams to integrate services like DNS, DHCP, PKI, and MFA.

͏