We are looking for an experienced Active Directory (AD) Engineer – L2 to provide Level 2 support for enterprise Windows and Active Directory environments. The role will focus on AD administration, troubleshooting, Group Policy, DNS, authentication, replication, Windows Server, and hybrid identity. The engineer will handle escalated incidents, perform root-cause analysis, support changes, and collaborate with L1/L3, infrastructure, security, and application teams.

Key Responsibilities

Provide L2 operational support for Microsoft Active Directory and Windows Server environments.

Manage user, group, computer, and Organizational Unit (OU) objects.

Create, modify, disable, and troubleshoot AD accounts and access issues.

Configure and troubleshoot Group Policy Objects (GPOs), inheritance, permissions, and policy conflicts.

Troubleshoot DNS, DHCP, authentication, Kerberos, NTLM, and domain connectivity issues.

Monitor and troubleshoot AD replication, Domain Controllers, Sites & Services, SYSVOL, and FSMO roles.

Perform AD health checks and investigate recurring infrastructure issues.

Troubleshoot account lockouts, password issues, authentication failures, and permission-related incidents.

Support Active Directory integrated DNS and name-resolution issues.

Assist with AD migration, domain consolidation, upgrades, and decommissioning activities.

Support Azure AD / Microsoft Entra ID and hybrid identity environments.

Troubleshoot AD Connect / Entra Connect synchronization issues.

Handle incidents, service requests, changes, and problems through ITSM tools.





Perform root-cause analysis and escalate complex issues to L3 teams when required.

Maintain technical documentation, SOPs, knowledge articles, and troubleshooting guides.

Follow ITIL processes, SLA requirements, change-management procedures, and security policies.

Required Technical Skills Strong hands-on experience with Microsoft Active Directory / AD DS.

Windows Server 2016/2019/2022 administration.

Group Policy (GPO) management and troubleshooting.

DNS and DHCP administration.

AD replication, Sites & Services, FSMO roles, and Domain Controllers.

User, group, computer, and OU administration.

Knowledge of Kerberos, LDAP/LDAPS, NTLM, and authentication troubleshooting.

Microsoft Entra ID / Azure AD fundamentals.

AD Connect / Entra Connect synchronization.

Basic to intermediate PowerShell scripting.

Good understanding of Windows networking and TCP/IP.

Preferred Skills Experience with ServiceNow or other ITSM/ticketing tools.

Experience with AD migration and consolidation.

Knowledge of ADFS, PKI, certificates, and SSO.

Exposure to Microsoft 365 / Exchange Online.

Knowledge of VMware or other virtualization platforms.

Experience with SCCM/MECM or endpoint-management tools.

Understanding of AD security, privileged access, delegation, and least-privilege concepts.

Microsoft certifications such as AZ-800/AZ-801, AZ-104, or related certifications are an advantage.

Experience 4–7 years of experience in Active Directory / Windows Infrastructure support.

Minimum 2–3 years of hands-on L2 AD support in an enterprise setting.

Experience working in 24x7 or rotational support environments is preferred.

📌 AD Engineer (Vellore)
🏢 People Prime Worldwide
📍 Vellore