Active Directory Engineer

Active Directory Expert

We are seeking a highly skilled and experienced Active Directory Expert to manage, maintain, and optimize our enterprise Active Directory environment and to use such expertise in getting a specific Active Directory compliant for CMMC compliance. The ideal candidate should have a deep understanding of Microsoft identity and access management services, including AD DS, AD FS, and Group Policy with strong troubleshooting and scripting skills. Candidate required to be US Citizen.

Day-to-day activities will include:

• Design, implement, and maintain Active Directory Domain Services (AD DS) across multi-site environments.
• Manage Group Policy Objects (GPOs), Organizational Units (OUs), and user/computer accounts.
• Monitor and optimize Active Directory replication, performance, and health.
• Implement and manage Active Directory Federation Services (AD FS) and Azure AD integration.
• Configure and troubleshoot DNS and DHCP services related to AD.
• Ensure security best practices for AD infrastructure, including role-based access control, auditing, and hardening.
• Develop and maintain PowerShell scripts for automation of routine AD tasks.
• Collaborate with the security and compliance teams on identity governance and access control.
• Support hybrid identity infrastructure (on-prem and cloud).
• Participate in disaster recovery planning and backup strategies for directory services.
• Perform domain migrations, trust configurations, and forest design as needed.

We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment regardless of their race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or recruiting process, please send a request to HR@insightglobal.com.

Skills and Requirements:

• Proven experience (7+ years) managing enterprise-scale on prem Active Directory environments.
• In-depth knowledge of Active Directory, DNS, DHCP, GPOs, ADFS, and LDAP.
• Strong PowerShell scripting and automation tools.
• Understanding of identity federation, SSO, and conditional access policies.
• Strong analytical and troubleshooting skills.
• Excellent documentation and communication skills.
• Microsoft Certifications such as MCSA/MCSE, Microsoft Certified: Identity and Access Administrator Associate, or Azure Solutions Architect.
• Experience with tools like ADManager Plus, Quest.
• Exposure to Zero Trust, Privileged Access Management (PAM), or Identity Governance and Administration (IGA).
• Experience with cloud identity platforms like Okta, Ping Identity, or SailPoint is a plus.
• Exposure or knowledge of Cybersecurity Maturity Model Certification (CMMC), NIST SP 800-171, NIST SP 800 172 a plus.