Windows Active Directory Engineer

Overview:

The Active Directory Engineer will plan, support, implement and design a directory synchronization system for Microsoft Active Directory and Windows-based systems across the enterprise, including directory and identity management solutions

Location: Remote

Responsibilities:

• You should be a "Windows Guru" knowing it inside and out.
• Manage workstations with imaging platform.
• Manage templates and apply/manage settings via group policies.
• Desired State Configuration via Scripting/GPO/SCCM.
• Excellent troubleshooting skills.

Basic Qualifications

• 10 years of Active Directory Architecture experience
• 10 years working experience with the following:
• Windows 10/11/2019/2022 Performance management, monitoring, and tuning
• Windows 10/11/2019/2022 Security and Hardening
• Windows 10/11/2019/2022 Configuration Management and Drift Prevention
• Windows 10/11/2019/2022 GPOs
• Windows 10/11/2019/2022 User Experience
• Windows 10/11/2019/2022 roadmap and planning
• Windows 10/11/2019/2022 PowerShell and Scripting
• Windows 10/11/2019/2022 MFA, RSA and MS Authenticator
• Windows AD, ADFS, DNS and DHCP infrastructure
• Bachelor Degree in Computer Science or a related field or equivalent experience

Preferred Qualifications

• Microsoft Windows certifications are ideal and highly desired for this position.
• 10 years of experience with Windows tools
• Application Packaging
• Previous experience working for Microsoft or major consulting firm - a big plus
• Securing the operating system, a big plus, such as Defender support (Defender ATP/Defender for Endpoint)
• MS Defender
• MS Defender Azure Services
• Symantec AV
• Crowdstrike
• ForcePoint
• Qualys
• RSA endpoint
• Strong understanding of AD Attributes, LDAP Queries, PowerShell Scripting to Modify AD Attributes, Group Policy Analysis, GPO Configuration & Item-Level Targeting, Workstation Configurations, Browser Configuration Settings, familiarity with VMView and other Applications that integrated with Active Directory
• Strong knowledge of permissions that are granted natively to various Microsoft Built-in Groups to perform Active Directory Administrative Functions, knowledge of native permissions granted when building AD objects, knowledge of permissions granted natively to Built-In Groups via GPOs and/or Local Policies
• Thorough functional understanding and ability to configure Active Directory Server Roles (CAs, IIS, File/Print, DNS)
• Working knowledge of GPOs, AD Sites, Replication Topology, and native AD troubleshooting tools
• Public Key Infrastructure (PKI)
• Platforms: PC, Laptops, VMware VDI, Wyse Enterprise IoT, Azure VDI
• Cloud, Azure
• Intune, Intune Autopilot/ESP
• Modern Build Tools NuGet, Chocolatey
• Automation
• Infrastructure as Code
• Declarative and Immutable environments, Desired State Configuration
• PowerShell Tooling, not just PowerShell

Evolver is an equal opportunity/affirmative action employer. All qualified applicants will receive consideration for employment without regard to sex, gender identity, sexual orientation, race, color, religion, national origin, disability, protected Veteran status, age, or any other characteristic protected by law. Actual salary will depend on factors such as skills, qualifications, experience, market and work location. The client offers benefits, including health, dental and vision insurance, 401(k), flexible spending account, and paid leave (including PTO and parental leave) in accordance with our applicable plans and policies