Sr. System Administrator Windows-AD

Sr. System Administrator Windows-AD

An active directory administrator is a key player, and his duties include managing domains, auditing user permissions across platforms, developing strategies for disaster recovery, offering technical support to users, and ensuring compliance with regulations and configure policies in d Domain Service (AD DS) environment. Windows-AD administrator can enforce security policies for all computers and installing or updating software. Exchange Servers Implementation, Configuration, and Administration. Certificate Authority Installation, Configuration, and Administration. Hyper-V Virtual Machines Installation and Configuration. OCS Configuration and Administration. Administrator provides support, implementation, and design services for Microsoft Active Directory and Windows-based systems across the enterprise, including directory and identity management solutions. Resolves and appropriately completes assigned cases and change requests and acts as an escalation for support issues. The core infrastructure technology duties include enterprise Microsoft Active Directory and Windows file services architecture creation and management, national system security and policy configuration, and top-level support for enterprise-wide initiatives.

Role and Responsibilities:

• Creation and management of directory infrastructure
• Domain Controller Management, Policy monitoring and compliance.
• Secure remote administration of the DCs and member servers managed by the Infrastructure Group.
• Perform AD Site preparation, Organizational Unit (OU), Users and Groups, and Group Policy management. And Domain Controller Management.
• Monitoring and reporting associated with the reliability and security of the domain.
• Physical security of the domain controllers in IT Division space and oversite for all domain controllers
• Backups and restores on domain controllers
• Full disaster recovery plan and practice recovery of DCs and core Directory objects. Group Policy Object (GPO) creation, troubleshooting, and management
• Publishing resource objects from their OU hierarchy in the Active Directory as applicable
• Manage Group Policy Object (GPO) links within their OU hierarchy
• Coordinate activities of Member Server owners
• Define and administer all aspects of multiple Windows Server 2012 R2, 2016, 2019 Active Directory environments.
• Troubleshoot DNS Service and DNS resolution issues
• Assist in management and support of internal and external DNS systems
• Act as a member of the Windows Active Directory Domain Administrator Support Team in providing timely and efficient support to assigned operations
• Troubleshoot Active Directory authentication and LDAP configuration issues
• Configure and support DNS for new domain
• Work with other senior staff members to resolve escalated, complex incidents
• Continually seek opportunities to improve our existing AD and Exchange architecture
• Research acute technical problems such as inconsistent email retention, cluster communication failures, and public folder replication issues
• Work cross functional with other teams to drive initiatives
  • Use PowerShell and VBScripts to perform User and Group and Computer Object management.
  • Deploy and maintain Active Directory infrastructure (Domain Controller Lifecycle).
  • Administer and troubleshoot AD replication, Domain Name System (DNS), Windows Internet Name Service (WINS), Distributed File System (DFS), Distributed File System Replication (DFSR), Active Directory Federation Service (ADFS), Lightweight Directory Server, Lightweight Directory Access (LDS) Protocol (LDAP) connections, Kerberos and Windows Challenge Response authentication.
  • Maintain Forest and Domain Trusts and set up cross-forest security and authentication.
  • Administrate Active Directory Role delegations, Fine Grained Password Policies and Group Policy Managed Service Accounts.
  • Test and perform Forest, Domain, and Domain Object level recovery, when required.
  • Help Develop new AD services, application integration, and Domain migration planning.
  • Familiarity with Exchange, Lync, Failover Clustering, Certificate Services, Web Services, Lightweight Directory Services, and other related technologies.
  • Administrating Windows Server core, VMware administration.
  • Azure Cloud integration Office 365 with Hybrid solution

• Perform the planning, evaluation, analysis, and recommendation of technical computing products on large, complex and enterprise (cross business unit) level projects recognized as an expert throughout the company and within the related technology industry.
• Advise management on strategic direction of related technologies. Provide the highest level technical product support including response to user questions, installation, system monitoring, testing, problem diagnosis, tracking, resolution, and routine maintenance.
• Facilitate and perform the delivery of technical services including the preparation of cost justifications, application requirements, alternative solutions, and technical recommendations.
• Formulate and direct the preparation of technical procedures, documentation, manuals, and reports.
• Maintain broad technical industry knowledge and broad understanding of AEP infrastructure.
• Mentor and provide functional/technical leadership and work direction to staff

• Produce enterprise-level designs for Active Directory and Windows File Services for global initiatives following those through to implementation via collaboration with project and support teams.
• Own Root Cause Analysis and Problem Management for corporate Identity Management environment.
• Serves as escalation point for application support and troubleshooting, provides guidance and direction in resolution of escalated issues and/or complex production, application or system problems.
• Serves as the first line of escalation support for domain technology issues that cannot be resolved by tier one and two server support.
• Perform daily system monitoring, verifying the integrity and availability of all hardware, server resources, systems and key processes, reviewing system and application logs, and verifying completion of scheduled jobs.
• Install, configure, and maintain Active Directory and third party software utilities for hardware systems within company operational guidelines.
• Create and maintain system documentation for domain technologies, including installation, configuration, and appropriate troubleshooting steps.
• Improve existing processes through solutions to recurring problems and enhancements to existing solutions or documentation.
• Manage customer satisfaction through effectively communicating and managing customer expectations
• Experience working with Microsoft Identity technologies including Active Directory, Windows File Services, and Group Policies.

• Expert knowledge of AD, ADFS, PKI in Windows Server 2012, Windows Server 2012 R2 and 2016.
• Expert knowledge of DNS, DHCP, WINS, DFS, in a Windows 2012 landscape.
• Knowledge of Microsoft Forefront Identity Management (FIM), Microsoft Exchange, Quest Active Roles Server (ARS) are preferable.
• Must have deep and thorough understanding of monitoring best practices, preferably with Microsoft System Center Operation Manager (SCOM) understanding and experience.
• Develops, documents, and enforces the standards, security procedures, and controls for access to ensure integrity of the Windows Systems, Active Directory, and related systems.
• Knowledge of server virtualization technologies, preferably VMware and/or Microsoft technologies
• Team Player with proven leadership, communication, organizational, and strong interpersonal skills. The role requires significant interaction with many different teams across a global company.