Active Directory AdminEngineer

• 731 Lexington Avenue New York NY 10022
• 120 Park Avenue New York NY 10117
• 919 3rd Avenue New York NY 10022

We are seeking an experienced Active Directory Administrator/Engineer to join our IT Infrastructure team. The successful candidate will be responsible for designing implementing maintaining and troubleshooting Active Directory environments across our organization. This role requires strong technical expertise attention to detail and the ability to manage complex directory services that support thousands of users and devices.

• Design deploy and manage enterprise Active Directory (AD) infrastructure including domains forests and trust relationships.
• Administer user and computer accounts Organizational Units (OUs) Group Policies (GPOs) and security groups.
• Implement and maintain AD security best practices including least-privilege access compliance controls and security policies.
• Manage Identity and Access Management (IAM) solutions and directory synchronization tools.
• Monitor AD performance health and replication across multiple sites.
• Troubleshoot and resolve complex Active Directory issues and escalations.
• Collaborate with network security infrastructure and application teams to ensure seamless directory and identity integration.
• Plan and execute Active Directory upgrades migrations and infrastructure changes.
• Implement and maintain disaster recovery and business continuity procedures for directory services.
• Develop and maintain technical documentation configurations procedures and operational runbooks.
• Provide technical support knowledge transfer and training to IT staff and end users.
• Stay current on Microsoft technologies security patches industry best practices and emerging identity technologies.

• 5 years of hands-on Active Directory administration experience in enterprise environments.
• Strong understanding of Active Directory architecture replication Group Policy and domain services.
• Experience administering Windows Serveror newer.
• Proficiency with PowerShell scripting for automation and system administration.
• Strong knowledge of DNS DHCP and core network protocols.
• Experience with directory synchronization and identity platforms such as Azure AD Connect Microsoft Entra ID Okta or similar technologies.
• Understanding of identity security least-privilege access and compliance requirements.
• Strong troubleshooting and problem-solving skills particularly in complex enterprise environments.
• Excellent communication documentation and collaboration skills.
• CompTIA Security Microsoft Certified: Identity and Access Administrator or equivalent experience.

• Microsoft Certified: Enterprise Administrator Expert or similar advanced certification.
• Experience with hybrid cloud identity environments particularly Microsoft Entra ID/Azure AD.
• Knowledge of identity and authentication protocols including LDAP Kerberos and SAML.
• Experience with Privileged Access Management (PAM) solutions.
• Familiarity with IT Service Management (ITSM) platforms and ticketing systems.
• Experience working in healthcare financial services or other regulated industries.