Role Purpose

Provide engineering ownership and subject-matter expertise for enterprise Active Directory services across IT and OT environments. The role covers AD architecture, domain controller lifecycle, security hardening, Group Policy, authentication and LDAPS, monitoring, tooling, configuration management and technical remediation.

Key Responsibilities

- Engineer and maintain Active Directory domains, domain controllers, AD Sites, OU structures and supporting infrastructure.
- Define and review OU design, GPO boundaries and delegation models to support secure and consistent administration.
- Manage domain controller lifecycle activities, including deployment, upgrade, replacement, decommissioning, patching, monitoring, hardening and configuration/CI management.
- Review AD security findings and coordinate targeted remediation for inactive users, computers and service accounts, including ownership and business validation where production impact is possible.
- Maintain Group Policy infrastructure and ADMX templates, with controlled backups and version tracking before changes.
- Engineer and support LDAP/LDAPS configuration and certificate lifecycle activities; assess authentication dependencies, validation needs and rollback considerations.
- Maintain effective AD service monitoring and evaluate monitoring solutions while preserving administrative tier separation.
- Provide AD engineering support for OT domains and OT-hosted domain controllers in coordination with infrastructure, site, application, security and QA stakeholders.
- Evaluate and support AD administration and automation tools,



including use cases for domains outside the strategic IGA platform.
- Maintain technical documentation, change records, standards and operational handover material for AD services.

Technical Knowledge & Experience
- Microsoft Active Directory Domain Services, Domain Controllers, AD Sites, DNS and replication concepts.
- Organizational Units, administrative delegation, Group Policy, GPO filtering and ADMX management.
- LDAP/LDAPS, Microsoft PKI certificates and Windows authentication dependencies.
- AD security hardening, privileged administration, service accounts and computer account lifecycle.
- Windows Server lifecycle and enterprise AD monitoring, including Microsoft SCOM; exposure to ManageEngine ADManager Plus or OpManager is beneficial.
- Experience supporting regulated or validated environments, including GxP change and validation considerations, is desirable.
- Experience working across IT and OT environments with clear infrastructure and administrative ownership boundaries.

Key Interfaces

IAM and AD Operations; OT infrastructure and site teams; application owners; Windows/server teams; Security and PKI teams; QA/Validation; managed service providers; and project/lifecycle teams.

Expected Outcomes

- Secure, resilient and supportable Active Directory services across enterprise IT and OT environments.
- Controlled AD changes with transparent risk assessment, ownership, validation and rollback considerations.
- Consistent AD architecture, policy management, monitoring and lifecycle practices.
- Effective technical coordination and documentation for operational support and audit readiness.

📌 Active Directory Engineer (Contract) (India)
🏢 Document IT
📍 India