Active Directory Lead

Position Purpose

We are seeking a highly experienced Active Directory Lead to manage, optimize, and secure our hybrid identity environment. This role is critical in ensuring the seamless integration of both cloud-based and on-premises directory services. The ideal candidate will lead the Active Directory (AD) team, serve as the ultimate level of technical escalation, and drive the implementation of secure, scalable, and efficient identity management practices.

You will be responsible for designing, managing, and supporting both Azure Active Directory and on-premises Active Directory, implementing security best practices, and leading identity-related projects across the organization.

Key ResponsibilitiesActive Directory Design & Architecture

• Design and maintain AD forests, domains, and organizational units (OUs)
• Plan and manage trust relationships, replication strategies, and overall AD infrastructure

Group Policy & Authentication

• Develop and maintain Group Policy Objects (GPOs)
• Troubleshoot GPO application and authentication protocol issues (Kerberos, NTLM, LDAP)
• Implement secure authentication and Single Sign-On (SSO)

Security, Hardening & Compliance

• Secure domain controllers and enforce tiered administration models
• Monitor, audit, and harden AD and Azure AD environments
• Ensure compliance with industry standards (ISO 27001, NIST, GDPR)
• Implement Zero Trust, MFA, and access review processes

Backup & Disaster Recovery

• Define AD backup strategies; perform authoritative and non-authoritative restores
• Use tools such as Windows Server Backup, Azure Backup, and Veeam

Azure Active Directory & Hybrid Identity

• Design and manage hybrid identity solutions (Azure AD + on-prem)
• Administer Azure AD Connect, ADFS, PTA, and PHS
• Optimize Azure AD B2B and B2C for external identity scenarios
• Automate identity lifecycle management with PowerShell, Graph API, and Azure Automation

Identity & Access Management (IAM)

• Implement Conditional Access Policies (CAPs) and Privileged Identity Management (PIM)
• Manage role-based access control (RBAC) and group-based access
• Oversee lifecycle of internal and external identities

Monitoring & Incident Response

• Monitor using Semperis ADFR, DSP, Azure Monitor, and Log Analytics
• Lead incident response and root cause analysis for identity-related issues
• Provide Level 3 (L3) escalation support and mentor junior team members

QualificationsRequired Experience

• 5–7 years of experience in Identity and Access Management (IAM), especially with Azure AD
• 3+ years in a leadership or technical operations role, managing AD/Azure AD teams
• Strong background in both Azure and on-premises directory services

Technical Skills

• Expert-level knowledge of AD, Azure AD, and hybrid identity architectures
• Proficiency in PowerShell scripting, Graph API, and automation tools
• Experience with Azure AD Connect, ADFS, SAML, OAuth
• Familiarity with Microsoft Intune, Endpoint Manager, and Windows Hello for Business
• Solid understanding of security tools and frameworks including PIM, CAPs, and Identity Protection

Soft Skills

• Strong analytical and troubleshooting capabilities
• Excellent written and verbal communication
• Ability to lead teams and projects independently
• Collaborative mindset for working across departments

Preferred Certifications

• Microsoft Certified: Identity and Access Administrator Associate (SC-300)
• Microsoft Certified: Security, Compliance, and Identity Fundamentals (SC-900)
• Microsoft Certified: Azure Solutions Architect Expert (AZ-305) (preferred)

What to Expect

• Hybrid work-setup
• Competitive Salary

Job Types: Full-time, Fixed term

Contract length: 6-12 months

Benefits:

• Flexible schedule

Experience:

• Active Directory: 5 years (Preferred)

Work Location: In person