Active Directory Engineer (Identity)

N-iX is a global software development service company that helps businesses across the globe create next-generation software products. Founded in 2002, we unite 2,400+ tech-savvy professionals across 40+ countries, working on impactful projects for industry leaders and Fortune 500 companies. Our expertise spans cloud, data, AI/ML, embedded software, IoT, and more, driving digital transformation across finance, manufacturing, telecom, healthcare, and other industries. Join N-iX and become part of a team where your ideas make a real impact.
Client Overview:
The client is a leading company in digital transaction management and e-signature solutions, helping organizations streamline agreements and accelerate business processes through secure, scalable, and user-friendly platforms.
Currently, we are looking for an Active Directory Engineer (Identity) to join the team.

Key Responsibilities:

• Design, implement, and optimize a secure, scalable, and highly available Active Directory (AD) and identity infrastructure to support centralized authentication, authorization, and resource access control across the organization.
• Ensure secure and streamlined identity lifecycle management (Joiner, Mover, Leaver processes).
• Enable efficient delegation of administrative tasks.
• Support integration with cloud services and applications (Azure AD, ADFS, hybrid identity).
• Implement best practices for operational reliability, security, and compliance.
• Provide training for IT administrators on managing AD components, including GPO administration and troubleshooting.
• Develop user guides and documentation for end-users regarding AD-related processes (e.g., password resets, account access).
• Establish change management processes and provide ongoing support, including patches and version upgrades.
• Configure auditing policies, integrate with SIEM solutions, and perform periodic security assessments to ensure compliance with data protection regulations (GDPR, HIPAA, SOX).
• Collaborate with HR, Security, Compliance, and business stakeholders to define provisioning policies, access control, and policy enforcement.
• Maintain regular project communication, reporting, and status updates to ensure alignment with business objectives.
  

Requirements:

• Knowledge of Windows Server versions (2016, 2019, 2022)
• Proficiency in PowerShell scripting for AD automation.
• Experience with Active Directory Certificate Services (AD CS).
• Familiarity with Group Policy Management Console (GPMC).
• Understanding of DNS, DHCP, and TCP/IP fundamentals.
• Experience with Azure AD, ADFS, and hybrid identity.
• Familiarity with IAM (Identity and Access Management) frameworks.

Infrastructure Requirements:

• Server infrastructure (physical or virtual) for domain controllers.
• Network connectivity across all AD sites.
• Backup and recovery solutions for AD (e.g., Veeam, Windows Backup).
• Security solutions like firewalls and endpoint protection.

Non-Functional / Organizational Requirements:

• Active participation of business and IT stakeholders for requirements, design reviews, and approvals.
• Understanding of organizational unit (OU) structure, business functions, and geographic needs for AD architecture alignment.
• Delivery of training programs and creation of user guides.
• Formal change management process to track AD environment changes.
• Compliance with data protection regulations and securing privileged account information.
• Auditing and logging of critical AD activities integrated with SIEM.
• Periodic security assessments and vulnerability scans.
• Clear project timeline with milestones and deliverables.
• Regular communication and escalation paths for project progress and issue resolution.
  

Preferred Skills:

• Experience in hybrid AD and cloud identity integration.
• Familiarity with regulatory compliance requirements.
• Experience with project management in AD deployment projects.
  

Reporting To:

• Sr. Manager, Identity and Access Management Engineering