Active Directory Administrator

Job Opening: Windows & Active Directory Administrator (L2) - BSE LTDJob Highlights

• Experience: 4 - 6 Years of relevant domain experience
• Location: Mumbai (Fort) - Onsite
• Shift: 24x7 Rotational Shifts (Onsite Support)
• Education: B.E. / B.Tech / Diploma / B.Sc-IT / BCA / MCA (Full-Time only; No education gaps)
• Key Skills: Active Directory Management, GPO, Server Hardening, AD Replication, PowerShell, DNS, DHCP

Job DescriptionWe are seeking a skilled and experienced Active Directory (AD) & Windows Administrator (L2) to join our infrastructure team onsite at BSE LTD, Mumbai (Fort). The ideal candidate will possess strong technical capabilities in managing, supporting, and securing AD Servers, configuring Group Policies, executing system hardening, and handling routine patching.Key Responsibilities1. Active Directory Infrastructure & Management

• Manage Directory Infrastructure: Oversee FSMO roles, domain trusts, Kerberos KDCs, and replication topologies.
• OU Hierarchy & Permissions: Create top-level Organizational Unit (OU) hierarchies with standard sub-OUs, groups, and precise security permissions.
• Access Control: Add OU Admins to designated groups (Add Computers, Group Policy Creator Owners, mail lists) and configure proper permissions on newly created objects.
• AD Migration: Execute Active Directory promotion and migration from lower versions to higher versions.
• Housekeeping & Upkeep: Perform regular AD housekeeping, metadata cleanups, and maintain active database health.

2. Monitoring, Maintenance & Troubleshooting

• Daily Health Checks: Conduct daily AD health checkups and day-to-day management of domain controllers.
• Replication & Synchronization: Monitor and troubleshoot connectivity, synchronization, replication, net logon, time services, schema, NTDS database partitions, and trust relationships.
• Log Analysis: Review Domain Controller (DC) event logs and security logs to implement corrective actions.
• Backup & Recovery: Perform authoritative and non-authoritative backups and restores on domain controllers.

3. Security, Hardening & GPO

• Domain Controller Hardening: Implement and maintain DC hardening aligned strictly with CIS benchmark policies.
• Endpoint Security: Apply baseline hardening knowledge and troubleshooting skills to member servers and endpoints.
• Group Policy Management: Create, configure, link, and troubleshoot Group Policies (GPOs) across the infrastructure.

4. Network Services & Scripting

• Core Services: Manage and troubleshoot DNS zones, SRV records, and DHCP scope configurations.
• Automation: Utilize PowerShell scripting knowledge to automate routine administrative tasks.
• Advanced Deployments: Manage Read-Only Domain Controllers (RODC) and demonstrate a solid understanding of Certificate Authority (CA) servers.

Desired Candidate ProfileTechnical Skills (Must Haves):

• Active Directory Promotion & Migration
• Group Policy Object (GPO) Management
• Baseline & CIS Hardening (Servers & Endpoints)
• Advanced AD Replication Troubleshooting
• DNS and DHCP Management & Troubleshooting

Technical Skills (Good to Have):

• PowerShell Scripting for automation
• Routine AD Housekeeping practices
• Certificate Authority (CA) Server infrastructure understanding

Education & Eligibility Criteria (Mandatory):

• Degrees Allowed: B.E. / B.Tech / Diploma (Computer Science, IT, Electronics & Telecommunication). Civil and Mechanical engineering backgrounds are not preferred.
• Alternative Degrees: B.Sc. - IT, BCA, or MCA from a reputed university.
• Course Type: Strictly Full-Time courses only.
• Education Gap: Strictly No Gaps in education. Candidates must be able to specify exact passing years for S.S.C, H.S.C, and Degree/Diploma.

Certifications (Preferred):

• Relevant Microsoft certifications (e.g., MCSA/MCSE equivalents or hybrid cloud identity certifications) are a strong plus.