MS Active Directory Administrator
UST Global Inc
Role Overview:
We are seeking a skilled Active Directory Support Engineer with 4+ years of hands-on experience in managing and supporting Active Directory environments. The ideal candidate will be responsible for day-to-day administration, troubleshooting, and operational support of Active Directory, Group Policies, DNS, DHCP, and related identity services in an enterprise setup.
Primary Responsibilities:
User & Group Management: Maintain and manage user accounts, security groups, and Organizational Units (OUs) following compliance standards. Authentication & Authorization: Implement and enforce access control policies to secure enterprise resources effectively. Incident Management: Troubleshoot and resolve Active Directory-related issues, ensuring minimal downtime. Access Provisioning & Revocation: Manage access requests, ensuring compliance with security policies. GPO Management: Create and maintain Group Policy Objects (GPOs) to standardize security and operational settings. Domain Controller Maintenance: Monitor and manage domain controllers, ensuring high availability and performance. Audit & Compliance: Perform regular Active Directory audits, ensuring adherence to security policies and best practices. Automation & Scripting: Utilize PowerShell to automate user/group management and improve operational efficiency. Perform regular health checks using dcdiag, repadmin, and event logs. Manage FSMO roles, Global Catalog servers, and AD Sites & Services. Ensure AD replication is healthy across all domain controllers. Manage AD-integrated DNS zones, forwarders, and conditional forwarders. Troubleshoot name resolution issues, stale DNS records, and dynamic updates. Work with DHCP scopes, reservations, and lease issues (if DHCP is AD-integrated). Performance Monitoring & Automation Use Performance Monitor (Perfmon), Resource Monitor, and Event Viewer to diagnose performance issues. Write PowerShell scripts for automation of AD tasks (user creation, reporting, cleanup, etc.). Coordinate with vendor teams for complex issues and escalations.Required Skills:
Strong hands-on experience in Active Directory Domain Services (AD DS). Expertise in user account management, security groups, and OU management. In-depth knowledge of LDAP, Kerberos, and NTLM authentication protocols. Experience with Group Policy Management (GPOs). Familiarity with ITIL processes, incident & problem management. Hands-on experience in PowerShell scripting for automation.Preferred Certifications:
Microsoft Certified: Windows Server Hybrid Administrator AssociateQualification and Educational requirements:
· Any degree in an IT related field is preferred
Por favor confirme su dirección de correo electrónico: Send Email