System Administrator (Active Directory)

About the role

The role focuses on designing, configuring, administering and supporting on‑premises Microsoft Active Directory environments for a global technology services firm. The candidate will work with multi‑domain and forest architectures, ensuring reliability, security and compliance across the infrastructure.

Key responsibilities

• Design, configure, administer, and support on‑premises Active Directory environments, including multi‑domain and forest setups.
• Manage Active Directory domain and forest design, trust relationships, FSMO roles, Kerberos, DNS integration, Sites & Services, SYSVOL and replication topology.
• Install, configure, and troubleshoot Windows Server Active Directory versions (2008, 2012 and later).
• Maintain OU design, object lifecycle, schema updates, permissions delegation, inheritance and security group structures.
• Develop and manage Group Policy objects, ensuring correct precedence, enforcement, blocking and troubleshooting.
• Configure and resolve issues with Active Directory‑integrated DNS.
• Implement and maintain AD Certificate Services (PKI), including CA hierarchy, templates, lifecycle and trust models.
• Troubleshoot DFS/DFSR and SYSVOL health and replication.
• Create and maintain PowerShell scripts for AD health checks, reporting and automation.

Required profile

• Several years of hands‑on experience administering on‑premises Microsoft Active Directory.
• Strong understanding of Active Directory design, trust relationships and troubleshooting.
• Proficiency with Windows Server versions 2008, 2012 and newer.
• Experience with Group Policy, DNS, PKI and DFS technologies.
• Ability to write PowerShell scripts for automation.

Required skills

• Microsoft Active Directory
• Windows Server (2008, 2012, later)
• Group Policy Management
• Active Directory DNS integration
• Active Directory Certificate Services (PKI)
• DFS / DFSR
• SYSVOL replication
• PowerShell scripting
• Kerberos authentication