Company Description Cyberaube is a cybersecurity services company based in Nagpur and Pune that focuses on practical, vendor-neutral solutions instead of product reselling. The team brings over a decade of hands-on experience with leading security platforms such as QRadar, Splunk, CyberArk, Okta, and Guardium, helping clients avoid costly implementation mistakes.

Cyberaube supports organizations with security talent placement, SIEM and IAM operations, data protection, and compliance with India’s DPDP Act and SEBI requirements. The company works with a diverse range of clients, including banks, hospitals, e-commerce firms, government bodies, and SaaS startups across India and beyond.

Role Description

- Senior Active Directory Engineer (L3) – Multi-Forest Enterprise
- Location: Pune or Nagpur (WFO)
- Experience: 7+ years
- Notice: Immediate–30 days preferred

About the role We are looking for an L3 Active Directory engineer who owns the directory, not just the tickets in it. You will be the final technical escalation point for a large, multi-forest, multi-domain, multi-site Active Directory estate. When replication breaks, SYSVOL drifts or a DC fails, you read the repadmin and dcdiag output, find the root cause and fix it yourself.

What will you do

- Design, build and extend multi-domain and multi-forest AD: current domains, forest and external trusts, selective authentication, SID filtering and cross-forest DNS.
- Own replication health across a multi-site topology: sites, subnets, site links, costs, bridgeheads and KCC/ISTG behaviour.
- Diagnose and resolve deep replication failures: lingering objects, USN rollback, tombstone lifetime issues, and errors such as 8606, 8614, 8524 and 1722, using repadmin, dcdiag, ntdsutil and PowerShell.
- Support SYSVOL on DFSR: backlog analysis, dirty shutdown recovery, authoritative and non-authoritative restores, and FRS-to-DFSR migration where legacy domains remain.
- Manage the full DC lifecycle: promotion, demotion, forced removal, metadata cleanup, FSMO transfer and seizure,



Global Catalog placement and OS upgrades.
- Run proactive DC health monitoring: define checks and alert thresholds, review Directory Service, DFS Replication and DNS logs, and act before users notice.
- Lead AD incident response for P1/P2 events and write the RCA and problem records that remove the cause, not just the symptom.
- Maintain AD backup and disaster recovery: system state backups, DSRM, and forest recovery planning and testing.
- Mentor L1/L2 engineers, write runbooks, and raise and execute change requests to ITIL standards.

What you must have:

- 7+ years in Windows infrastructure, including 5+ years of hands-on L3 Active Directory engineering in a large enterprise.
- Production experience in multi-forest and multi-domain environments, including setting up and troubleshooting trusts.
- Command-line fluency with repadmin, dcdiag, ntdsutil, dfsrdiag, nltest, setspn and the PowerShell ActiveDirectory module.
- A track record of resolving replication and SYSVOL/DFSR failures yourself, not escalating them.
- Experience leading AD incidents end to end, including writing the root cause analysis.
- An active Microsoft certification: Windows Server Administrator Associate (AZ-802), Windows Server Hybrid Administrator Associate (AZ-800 + AZ-801), or legacy MCSA/MCSE: Windows Server.

Good to have:

- AD CS / PKI, ADFS, Entra Connect in a multi-forest topology
- AD security hardening: tiered administration, LAPS, Kerberos/NTLM hardening, privileged group control
- Domain migrations or consolidations with ADMT or Quest
- PowerShell automation for health reporting and remediation

THIS ROLE IS NOT A FIT IF... Your Active Directory experience is mainly user and group administration, password resets and lockouts, SSO/Okta onboarding, or Entra ID and Conditional Access. Those are valuable skills, but this role is about the infrastructure underneath: domain controllers, replication, SYSVOL, trusts and forest design.

Please apply OR you may also send your resume with other details such as your current CTC, your expected CTC and your tetative availability to join if offered at info[at]cyberaube[dot]com

📌 Active Directory Engineer (Pune)
🏢 CYBERAUBE
📍 Pune