Active Directory Security Customer Engineer

Job Title:

Active Directory Security Customer Engineer

Job Description

We're Concentrix. The intelligent transformation partner. Solution-focused. Tech-powered. Intelligence-fueled.

The global technology and services leader that powers the world’s best brands, today and into the future. We’re solution-focused, tech-powered, intelligence-fueled. With unique data and insights, deep industry expertise, and advanced technology solutions, we’re the intelligent transformation partner that powers a world that works, helping companies become refreshingly simple to work, interact, and transact with. We shape new game-changing careers in over 70 countries, attracting the best talent.

The Concentrix Technical Products and Services team is the driving force behind Concentrix’s transformation, data, and technology services. We integrate world-class digital engineering, creativity, and a deep understanding of human behavior to find and unlock value through tech-powered and intelligence-fueled experiences. We combine human-centered design, powerful data, and strong tech to accelerate transformation at scale. You will be surrounded by the best in the world providing market leading technology and insights to modernize and simplify the customer experience. Within our professional services team, you will deliver strategic consulting, design, advisory services, market research, and contact center analytics that deliver insights to improve outcomes and value for our clients. Hence achieving our vision.

Our game-changers around the world have devoted their careers to ensuring every relationship is exceptional. And we’re proud to be recognized with awards such as "World's Best Workplaces," “Best Companies for Career Growth,” and “Best Company Culture,” year after year.

Join us and be part of this journey towards greater opportunities and brighter futures.

Summary: As a Customer Engineer, you will collaborate directly with customer teams to provide expert advisory services across a range of technologies. By leveraging structured intellectual property (MIP) engagements, you will establish trusted advisor relationships and guide customers towards achieving a healthy and secure state.

Relevant MIP/VBD Titles

On-Demand Assessment - Active Directory

WorkshopPLUS - Active Directory: Troubleshooting

Onboarding Accelerator - Password-less Authentication

Active Directory Recovery Execution Services

Onboarding Accelerator - Deployment and Migration Assistance for Active Directory Base

Skills Required

This role requires deep knowledge (300 – 400 level) in the following technology areas:

• Active Directory Domain Services

• Design and architecture

• Multi-domain forest design concepts

• Forest trust planning

• Domain Controller capacity planning

• FSMO role placement

• OU Topology design

• Knowledge of Active Directory site topology design

• Group Policy strategy and best practice

• Privilege account best practices \ Tier model

• Delegation of permissions strategy

• Group management best practice

• Integration of third-party LDAP applications

• RODC (Read-Only Domain Controller) deployment and management

• Basic PowerShell scripting for automation and configuration management

• Entra Connect and synchronization.

• Troubleshooting

• GPO policy processing

• Sysvol and Active Directory replication

• Domain Controller performance

• Authentication failures in including cross-forest authentications

• Upgrade Planning

• Introduction of new Domain Controller OS

• Raising functionality levels

• Operational Governance

• Understanding of change control best practices

• Patch management best practice

• Recovery

• Active Directory forest recovery

• Active Directory object recovery

• Networking Knowledge

• IPv4/IPv6

• Active Directory integrated DNS with security dynamic updates

• DHCP design and management

• Windows Firewall configuration and best practices

• Port and protocol requirements for Active Directory services

• Knowledge of network packet analysis tools (e.g., Wireshark) for AD traffic.                           

Optional Skills

• Entra ID

• RBAC

• Authentication Models

• Cloud Auth (PTA/PHS)

• Federation

• Device Management

• Hybrid Join

• AADJ

• Entra ID Connect