Active Directory Engineer

• Develop and implement Active Directory migration plans including detailed timelines and risk mitigation strategies
• Perform assessments of current AD environments, including domain controllers, group policies, and security configurations
• Develop AD migration plan to migrate applications, servers, users, and data from the existing AD to the new 2019 AD
• Plan, Migrate and Implement Active Directory
• Collaborate with network, security, and application teams to ensure compatibility and successful migration
• Design, implement, and troubleshoot Directory Synchronization and Federation Services
• Design and implement DNS/DHCP and Group Policy
• Provide technical leadership and troubleshooting expertise during migration activities
• Work with customers and other IT stakeholders to identify and define secure solution requirements
• Use Quest Migration Manager to migrate data from the existing AD to the new AD
• Develop scripts to automate the AD migration
• Execute pre-migration testing and develop fallback plans
• Ensure compliance with security policies and best practices for AD environments
• Provide post-migration support and resolve any technical issues

• 10+ years of experience configuring and implementing Active Directory
• 5+ years of experience in planning and performing AD migrations
• Must have hands-on experience with Active Directory migration
• Experience with AD migration tools such as ADMT (Active Directory Migration Tool), Quest Migration Manager, or similar tools
• Experience with Quest Migration Manager is preferred
• Experience developing AD migration plan and developing scripts to automate AD data migration
• Experience running Active Directory health checks
• Proficiency in PowerShell scripting for automation and administration
• Strong experience with AD enterprise certificate services, rights management server, AD federation services, and identity manager
• Active Directory hands on experience in a multi-site/multi-domain/multi-forest environment, is required
• Proven experience with AD security and best practices

Experience with IAM (Identity and Access Management) and SSO (Single Sign-On) is preferred