All jobs

Senior Active Directory Engineer

100% Remote Full-time Open now
Benefits:
  • 401(k)
  • Competitive salary

Job Description

We are seeking a Senior Active Directory Engineer with 10+ years of enterprise experience to support critical Directory Services initiatives for 2026. This is a hands‑on engineering role focused on Active Directory architecture, PKI/certificate automation, PowerShell scripting, and greenfield AD builds, including OT environments. Responsibilities
  • Design, build, and support enterprise Active Directory environments
  • Perform greenfield AD forest and domain builds
  • Implement and manage PKI and certificate lifecycle automation
  • Troubleshoot complex issues across AD, DNS, GPO, and authentication
  • Automate AD and server operations using PowerShell
  • Support Windows Server 2016/2022/2025 environments
  • Apply Microsoft tiered security models (Tier 0/1/2)
  • Ensure compliance with security and regulatory standards

Required Skills & Experience

Active Directory (Expert Level)
  • 10+ years of enterprise Active Directory experience
  • AD DS design, deployment, and troubleshooting
  • Domain controller build, promotion/demotion
  • FSMO roles, SYSVOL, DFS‑R
  • AD Sites & Services
  • Replication tools: repadmin, dcdiag
  • Authentication: LDAP, Kerberos
DNS (Critical Requirement)
  • AD‑integrated DNS
  • SRV records and zone configuration
  • DNS troubleshooting and security best practices
Group Policy (GPO)
  • GPO design, creation, optimization, and troubleshooting
Windows Server
  • Windows Server 2016, 2022, 2025
  • Server hardening and security baseline configuration
PKI / Certificates
  • Microsoft AD Certificate Services (ADCS)
  • Certificate templates and auto‑enrollment
  • TLS/SSL certificate lifecycle management
  • Certificate renewal automation
  • Experience with Sectigo Certificate Manager or similar PKI tools
Automation
  • Advanced PowerShell scripting for AD and server administration
AD Architecture & Security
  • Building AD forests/domains from scratch
  • OU design and delegation models
  • Microsoft tiered security model (Tier 0 / Tier 1 / Tier 2)
  • Credential hygiene and privileged access management
Compliance
  • Experience working in regulated environments (GxP preferred)
Preferred Qualifications
  • Hands‑on experience with Sectigo Certificate Manager
  • Exposure to OT (Operational Technology) Active Directory
  • Background in Pharma, Life Sciences, or other regulated industries

This is a remote position.

Apply To This Job

You might also like