Platform Engineer – Active Directory

Job Description

Roll Overview

The Active Directory and EntraID Engineer is responsible for the support, implementation, and strategic planning of enterprise-wide identity and access services. This includes Microsoft Active Directory, Group Policy Objects (GPOs), LDAP, Microsoft PKI, Microsoft MFA, Cisco Duo MFA, and Entra ID (Azure AD), along with associated infrastructure technologies. The role ensures the integrity, availability, and security of identity platforms while contributing to service improvement, compliance, and project delivery.

Key Responsibilities

Technical Operations & Support

• Administrate and maintain core identity services including:

• Microsoft Active Directory (including Group Policy Objects, Managed Service Accounts etc.)

• Active Directory Integrated DNS
• LDAP & LDAPS
• Lightweight Directory Services (LDS)
• Microsoft PKI
• EntraID (Azure AD) and associated services
• Microsoft MFA, Windows Hello for Business
• Cisco Duo MFA
• Veeam Active Directory Explorer
• Veeam Backup and Replication

• Windows Server (2012 R2, 2016, 2019, 2022, 2025) and Windows Client (7, 8, 10, 11)

• Perform daily health checks and system monitoring across identity platforms, DNS, DFS, DFS-R, and PKI services.

• Troubleshoot and resolve complex issues, acting as an escalation point for support teams.
• Maintain system documentation including installation, configuration, and troubleshooting procedures.

Service Management

• Manage and resolve Incident, Change, and Problem tickets in alignment with ITIL best practices.
• Ensure timely and accurate completion of assigned service requests and change implementation.
• Participate in root cause analysis and implement permanent fixes for recurring problems.

Compliance & Security

• Enforce security standards and access controls across identity platforms.
• Support compliance reporting and audit activities related to identity services.
• Ensure systems adhere to global security policies and regulatory requirements.

Project & Innovation

• Contribute to the delivery of identity related projects, including migrations, upgrades, service improvements, and new service deployments.
• Collaborate with engineering and architecture teams to evaluate and implement new technologies
• Identify opportunities to enhance service delivery through automation. Process improvement, and innovation.

Required Skills & Experience

• Expert level knowledge of the following technologies:
• Active Directory and associated services
• EntraID (AzureAD), ADFS, AAD Connect
• Windows Server and Client OS
• DNS, DFS/DFS-R
• Microsoft PKI
• Experience with the following technologies:
• Microsoft Identity Technologies
• Virtualization platforms (VMWare, Hyper-V)
• LAN/WAN , VPN, and Firewall technologies
• Automation and scripting with PowerShell, Python etc.
• Strong understanding of the following technologies:
• Windows security principles
• Infrastructure and server architecture
• Compliance and audit frameworks

Qualifications, Skills, and Experience

The following are minimum requirements for this position:

• Bachelor's degree or equivalent level of demonstrated skills and experience.
• At least 5 years' windows systems administration experience in a production environment with demonstrated increasing responsibility.
• A minimum of 5 years of experience administering a large-scale Active Directory environment.
• A minimum of 5 years of experience administering a large-scale EntraID (AzureAD) environment.
• Advanced expertise configuring and maintaining Microsoft Windows servers, including automation of common configuration and setup procedures.
• Ability to translate technical issues into understandable business language for end users.
• In-depth knowledge and understanding of Desktop operating systems methodologies (file system, registry, services, etc.), as well as system tools and remote desktop support.
• Experience securely provisioning Windows Servers for production level services.
• Demonstrated strong multi-tasking skills.
• Demonstrated self-starter.
• MCSA or MCSE Certification in Windows Server 2016 or later.
• Microsoft Azure Fundamentals Certification.
• Microsoft 365 Fundamentals Certification.
• Candidates with experience serving the needs of diverse populations are strongly desired.
• Ability to translate technical issues into understandable business language for end users.
• Must be able to work and mentor in a team environment with a "can do" attitude capable of overcoming difficult challenges.
• Knowledge and experience with Active Directory backup and restore technologies.
• Knowledge and experience with Application Virtualization (App-V, MSIX).
• Knowledge and experience with Service Now or alternative problem and incident management tools.