Role & responsibilities
- Managing Windows 2016/2019 Domain controllers
- Active Directory users and groups management (Domain ID Creation, Deletion control management, Delegation)
- Active directory Replication Monitoring & Troubleshooting
- Experience with backup and restore for Active Directory
- Creation and Configuration of AD sites
- Demoting and Promoting Domain Controllers and Performing a Meta Data Clean-up
- Performing AD restore of AD objects
- Group Policy Management (Creation/Modification/Deletion/Link)
- Knowledge on the group policies features such as block inheritance, Security filtering, WMI filtering, Loopback policies etc
- Patch management of domain controllers
- Troubleshoot and provide L2 Support for Active Directory complex issues and requirements
- Hybrid Identity Management: Managing and troubleshooting Microsoft Entra Connect (formerly Azure AD Connect), including synchronization rules, password hash synchronization, and health monitoring
- Identity Governance:
Managing Conditional Access policies to enforce security requirements like Multi-Factor Authentication (MFA), compliant devices, and location-based access
- Cloud Object Management: Administration of Azure AD users, security groups, and Microsoft 365 groups, including Energetic Group membership rules
- Enterprise Application Integration: Configuring Single Sign-On (SSO) for SaaS applications and managing App Registrations and Service Principals
- Security & Monitoring: Monitoring Sign-in logs and Audit logs to investigate failed logins, suspicious activity, and identity-related security risks
- Role-Based Access Control (RBAC): Assigning and managing Azure AD roles (Global Admin, User Admin, etc) and implementing Privileged Identity Management (PIM) for "just-in-time" access
- Self-Service Management: Configuration and support for Self-Service Password Reset (SSPR) and security info registration
- Device Management Integration: Managing device identities in Azure AD, including Azure AD