Windows Active Directory Administrator

Responsibilities:

• Managing, installing, and troubleshooting Microsoft Windows Active Directory, DNS, and services on Windows 2012/2016 platforms.
• Installing and configuring Active Directory Domain Services for object management (users, groups, network printers, and network guest nodes) and Active Directory Lightweight Directory Services for deployment of applications.
• Creating Organizational Units (OUs) and setting up Group Policy Objects (GPOs) and Group Policy Containers (GPCs).
• Knowing the DCPROMO process and configuring AD Site, OU structure, Site Link, DNS, DHCP, WINS, Global Catalog server, Directory Services, Subnet mask, DNS forwarders, and Reverse Lookup.
• Involved in fixing interoperability among different applications and setting the rules on profiles in the Application Isolation Environment (AIE). Involved in troubleshooting functionality errors of the applications in the isolation environment.
• Creating and linking group policies for Windows Server in the AD domain. Experience in performing the domain functional level in Windows Server.
• Experience working closely with Security Service teams for least privilege configurations.
• Experience in creating and maintaining group policy objects for Windows Server host access.
• Experience in analyzing system issues to determine root cause and working with concerned teams in testing and implementing fixes to resolve issues.
• Coordinate with service providers, vendors, and various teams throughout the organization to ensure timely resolution of issues.
• Monitor performance of the Windows Server environment and take appropriate proactive measures to prevent impacts.
• Design and develop specialized automation tools, scripts, and processes for the administration and performance monitoring of Windows systems
• Strong troubleshooting skills in a Windows environmentevent log analysis, installation and administration of Windows Server, including user setup and defining roles, performance tuning, backup and restore, security monitoring, and registry and AD scripting.
• Experience with vulnerability mitigation and patch management.
• Configuring and managing DNS and Active Directory. Created Active Directory sites, OU containers, and groups to assign permissions.
• Assigning shared level/security level permissions to customer folders and files.
• Managing and maintaining services for the client as per the agreed contract and SLAs
• Reporting daily operational issues in daily review meetings with account management
• Reporting outage incidents and ensuring RCAs are provided to the client. Keep track of RCA records towards timely completion from the team.
• On-call support during off-duty hours on weekdays, weekends, and holidays on a scheduled/rotating basis.
• Act as a member of the Windows Active Directory Domain Administrator Support Team in providing timely and efficient support to assigned operations; coordinate day-to-day operations; apply security patches/fixes and anti-virus updates as released by software manufacturers and anti-virus vendors; and create and implement domain-level security policies such as authentication mechanisms, password policies and rules, IPSEC policies, etc
• Review domain-level rights and privileges and perform changes to the same as appropriate
• Collaborate in assessing current and expected Windows infrastructure needs, configuration, maintenance, optimization, and documentation of Windows infrastructure.
• Follow and apply configuration and security standards and policies within a defined change management process.
• Assist with implementing solutions for hardware and software. Implement common preventive maintenance practices for hardware and software.
• Ensure that system improvements and changes are implemented correctly and completely, and monitor all effects of the modifications.

Requirements:

• Strong hands-on administration experience on Windows Server: forest, domain trust, AD, ADFS, DNS, WINS, DHCP, Group Policy, distribution lists, Windows folder security, and IP filter.
• Expert-level knowledge of Active Directory LDAP service, shell scripting, certificate services (PKI), and AD site topology, all under a multi-site, multi-domain Windows 2012 environment.
• Expertise in Active Directory design and support (Group Policy Object (GPO), Active Directory (AD) Schema, Organization Unit (OU), LDAP, Sites, Replication, etc. )
• Experience in vulnerability remediation.
• Strong working knowledge of ITIL Incident, Problem, and Change Management disciplines.
• 4+ years of IT or IT security experience, including the following: Windows 2012/2016 server, Forest, domain trust, AD, ADFS, DNS, WINS, DHCP, Group Policy, distribution lists, Windows folder security, and IP filter.
• 2+ years' experience with server technology capabilities and products.