System Administrator – Active Directory & PKI Specialist

About the role

We are looking for an experienced System Administrator to own and operate our enterprise on‑premises Microsoft Active Directory environment. You will ensure the health, security, availability and performance of directory services that underpin authentication and many critical business applications.

Key responsibilities

• Maintain and monitor Active Directory health across multi‑domain and multi‑forest infrastructures.
• Design, implement and troubleshoot trust relationships, FSMO roles, Kerberos authentication and replication topology.
• Manage Group Policy Objects, OU structures, schema updates and permissions delegation.
• Configure and support AD‑integrated DNS and resolve related issues.
• Deploy, manage and maintain Active Directory Certificate Services (AD CS/PKI) including CA hierarchy, certificate templates and lifecycle.
• Provide technical guidance and documentation for security group design, inheritance management and GPO enforcement.

Required profile

• 7+ years of hands‑on experience administering on‑premises Microsoft Active Directory.
• Strong expertise in Windows Server versions 2008, 2012 and later.
• Proven track record designing multi‑domain/forest environments and managing complex trust models.
• Deep understanding of DNS, PKI and Kerberos authentication mechanisms.

Required skills

• Microsoft Active Directory
• Group Policy Management
• Windows Server (2008, 2012, later)
• Active Directory Integrated DNS
• Active Directory Certificate Services (AD CS/PKI)
• Kerberos authentication and KDCs
• FSMO role management
• Trust relationships and troubleshooting
• OU design and object lifecycle management
• Schema updates and permissions delegation
• Security group design and inheritance management
• GPO design, precedence, enforcement and troubleshooting