Active Directory Technical SME

Job description:

• Designing, Configuring, and maintaining Active Directory services on Windows server 2003, 2008, 2012, 2016, 2019 DC
• Good knowledge on FIM and ADFS
• Should have worked on GPO consolidation, OU restructuring, AD Sites, permissions, and Domain decommissioning and sizing projects.
• Remediation of domains, Domain controllers build, Functional level upgrade.
• Strong experience on Infrastructure assessment, solution design, architecture, planning and execution for Active Directory domain migrations
• Experience on Active Directory domain migrations using Quest/ADMT or similar tool - This is a must
• Assessment of all domains and Forest along with IIS, File, Print, Database servers etc.
• Implementation of Azure AD Connect, Conditional Access policies, MFA, FIDO Authentication, Windows hello for Business setup
• Gather migration requirements interacting with multiple stakeholders and Application Owners
• Good to have Exposure on Azure Infrastructure as a service.
• Familiarity in the following areas: Single Sign On, directory schema, replication topology, RBAC, User lifecycle.
• Managing Identity and Access Management of Azure subscriptions, Azure AD, Azure AD Application Proxy, Azure AD PTA
• Design and develop specialized automation tools, scripts, and processes for administration and performance monitoring.
• Experience in syncing the Objects, users, groups, workstation in Hybrid approach.
• Excellent knowledge of designing Active Directory, DNS, DHCP
• Good to have - understanding on authentication protocols such as SAML, WS-Fed, Oauth and OpenID. Design and implementation of Active Directory Federation Services.
• Troubleshooting AD Domain migration related issues and suggest best practices
• End to end support for migration of all directory objects
• Team player, ability to be able to work with virtual teams
• Ability to work in a variety of client settings and platforms
• Powershell: Knowledge of scripting is add-on