Benefits:
401(k)
Competitive salary
Job Description
We are seeking a Senior Active Directory Engineer with 10+ years of enterprise experience to support critical Directory Services initiatives for 2026. This is a hands‑on engineering role focused on Active Directory architecture, PKI/certificate automation, PowerShell scripting, and greenfield AD builds, including OT environments.
Responsibilities
Design, build, and support enterprise Active Directory environments
Perform greenfield AD forest and domain builds
Implement and manage PKI and certificate lifecycle automation
Troubleshoot complex issues across AD, DNS, GPO, and authentication
Automate AD and server operations using PowerShell
Support Windows Server 2016/2022/2025 environments
Apply Microsoft tiered security models (Tier 0/1/2)
Ensure compliance with security and regulatory standards
Required Skills & Experience
Active Directory (Expert Level)
10+ years of enterprise Active Directory experience
AD DS design, deployment, and troubleshooting
Domain controller build, promotion/demotion
FSMO roles, SYSVOL, DFS‑R
AD Sites & Services
Replication tools: repadmin, dcdiag
Authentication: LDAP, Kerberos
DNS (Critical Requirement)
AD‑integrated DNS
SRV records and zone configuration
DNS troubleshooting and security best practices
Group Policy (GPO)
GPO design, creation, optimization, and troubleshooting
Windows Server
Windows Server 2016, 2022, 2025
Server hardening and security baseline configuration
PKI / Certificates
Microsoft AD Certificate Services (ADCS)
Certificate templates and auto‑enrollment
TLS/SSL certificate lifecycle management
Certificate renewal automation
Experience with Sectigo Certificate Manager or similar PKI tools
Automation
Advanced PowerShell scripting for AD and server administration
AD Architecture & Security
Building AD forests/domains from scratch
OU design and delegation models
Microsoft tiered security model (Tier 0 / Tier 1 / Tier 2)
Credential hygiene and privileged access management
Compliance
Experience working in regulated environments (GxP preferred)
Preferred Qualifications
Hands‑on experience with Sectigo Certificate Manager
Exposure to OT (Operational Technology) Active Directory
Background in Pharma, Life Sciences, or other regulated industries
This is a remote position.