Systems Administrator (Domain Services Specialist)

Domain Services Specialist

Work Set-up: Hybrid work arrangement

Shift: 8:00 AM to 5:00 PM

This is in preparation for the upcoming large-scale projects involving Active Directory (AD), identity lifecycle management, SSO, MFA, and hybrid/cloud integration

ROLES AND RESPONSIBILITIES:

• Domain Administration: Design, plan, implement and manage Microsoft Entra ID, AD Domain Services, AD Sites and Services, GPOs, DHCP, and DNS for all the domains in the organization.
• Provide and maintain integration with all the applications the organizations interfaces with AD DS and Microsoft Entra ID.Plan and execute Active Directory Domain level upgrades.
• Plan and design Group Policy Objects as required to ensure compliance with organization policies for servers, users, and end-user devices.
• Implement and manage IAM platforms
• Manage identity lifecycle (Joiner/Mover/Leaver processes)
• Implement MFA and conditional access policies
• Role-based access control (RBAC) design
• Conduct periodic access reviews
• Support audits and compliance initiatives
• Automate identity provisioning workflows
• Collaborate with security and infrastructure teams
• Troubleshoot and resolve Active Directory, GPO, DNS, SSO, MFA and password management issues.

Required Technical Skills

Essential Skills:

• Identity & Directory Services: Microsoft Active Directory (AD DS), Azure AD / Entra ID, Group Policy (GPO), DNS, DHCP fundamentals, AD replication & trusts, LDAP
• IAM & Authentication: SSO (SAML 2.0, OAuth 2.0, OpenID Connect, MFA implementation, Conditional Access, Identity lifecycle management, Privileged Access Management (PAM)
• Access Governance: RBAC design, Least privilege principles, Access certification campaigns, Segregation of duties
• Scripting & Automation: PowerShell (mandatory), Basic Python (preferred), Automation using APIs

• Hybrid AD architecture
• Identity federation (ADFS or equivalent)
• Experience with IAM tools (e.g., SailPoint, Okta, CyberArk, etc.)
• Cloud IAM (Azure, AWS, GCP)
• Zero Trust principles
• ITIL knowledge
• Experience supporting audits (ISO 27001, SOC2, etc.)

• Strong analytical and troubleshooting skills
• Ability to design scalable architecture
• Documentation discipline
• Cross-team collaboration
• Security-first mindset
• Project implementation experience