Sr Advanced Systems Administrator - AD Expert

Senior Active Directory Expert plays a critical role within the Enterprise Infrastructure IT Team, taking responsibility for architecting, managing, and supporting the organization's Active Directory services across global environments. This position focuses on Active Directory Domain Services (AD DS), Azure AD/Entra ID integration, Group Policy, identity and access management, DNS, DHCP, and authentication services to ensure a secure, scalable, and highly available enterprise infrastructure

JOB DUTIES:

• Administer and support enterprise Microsoft Active Directory across multiple domains and forests. 
• Manage Domain Controllers, DNS, Sites & Services, FSMO roles, and trust relationships. 
• Monitor AD health, replication, authentication, and perform L3 troubleshooting and root cause analysis. 
• Plan and execute Active Directory upgrades, migrations, domain consolidations, and disaster recovery activities. 
• Administer Microsoft Entra ID (Azure AD) and Azure AD Connect in a hybrid identity environment. 
• Configure and troubleshoot Azure AD Connect synchronization, synchronization rules, filtering, and staging servers. 
• Manage Enterprise Applications, Single Sign-On (SSO), SAML, OAuth, and OpenID Connect integrations. 
• Implement and maintain Multi-Factor Authentication (MFA), Conditional Access Policies, Identity Protection, and Zero Trust security controls. 
• Design, implement, and troubleshoot Group Policy Objects (GPOs) and security baselines. 
• Develop and maintain advanced PowerShell scripts, modules, and automation solutions for Active Directory, Entra ID, Microsoft 365, and IAM operations. 
• Manage Microsoft 365 and Entra ID licensing, automate license assignments, and generate compliance reports. 

• Maintain operational documentation, SOPs, runbooks, architecture diagrams, and participate in on-call support and major incident management.

YOU MUST HAVE:

• 8–10 years of hands-on experience in Microsoft Active Directory administration (Windows Server 2016/2019/2022).

• Strong expertise in Microsoft Entra ID (Azure AD) and Azure AD Connect.

• Experience managing Domain Controllers, AD replication, DNS, DHCP, Kerberos, LDAP, and Group Policy. 
• Proven experience handling L2/L3 support, troubleshooting, and root cause analysis in enterprise environments. 
• Strong knowledge of Identity & Access Management (IAM), MFA, Conditional Access, RBAC, and SSO technologies. 
• Advanced PowerShell scripting skills with experience in automation, reporting, and Microsoft Graph PowerShell modules. 
• Experience administering Microsoft 365 licensing and hybrid identity environments. 
• Strong analytical, troubleshooting, communication, and stakeholder management skills. 

WE VALUE:

• Experience with Privileged Identity Management (PIM) and Identity Governance. 
• Familiarity with Microsoft Graph API and automation frameworks. 
• Experience with enterprise Active Directory migrations and domain consolidation projects. 
• ITIL process knowledge and experience working in large enterprise or managed services environments. 

• Proactive mindset with a strong focus on automation, continuous improvement, and operational excellence.

WHAT'S IN IT FOR YOU:

• Opportunity to work on enterprise-scale hybrid identity and Microsoft cloud technologies. 
• Exposure to cutting-edge Microsoft Entra ID, Identity & Access Management.
• Hands-on experience with automation, PowerShell, and Microsoft Graph to drive operational efficiency. 
• Opportunity to lead complex L3/L4 troubleshooting, migrations, and modernization projects. 
• Collaborative work environment with opportunities to enhance technical expertise and career growth. 

• Hybrid work model with exposure to enterprise infrastructure, cloud identity, and security transformation initiatives.

#LI-JR2

#Hybrid

Resideo Technologies has announced its intention to spin off ADI Global Distribution and establish it as a separate, publicly traded company. Under this plan, ADI will continue its role as a leading global wholesale distributor serving commercial and residential markets, while Resideo will retain its manufacturing and product-solutions business. Upon separation, both companies will operate independently to better serve their respective markets and customers. The spin-off is currently targeted for completion in the second half of 2026, subject to customary conditions.

Resideo is a $6.76 billion global manufacturer, developer, and distributor of technology-driven sensing and control solutions that help homeowners and businesses stay connected and in control of their comfort, security, energy use, and smart living. We focus on the professional channel, serving over 100,000 contractors, installers, dealers, and integrators across the HVAC, security, fire, electrical, and home comfort markets. Our products are found in more than 150 million residential and commercial spaces worldwide, with tens of millions of new devices sold annually. Trusted brands like Honeywell Home, First Alert, and Resideo power connected living for over 12.8 million customers through our Products & Solutions segment. Our ADI | Snap One segment spans 200+ stocking locations in 17 countries, offering a catalog of over 500,000 products from more than 1,000 manufacturers. With a global team of more than 14,000 employees, we offer the opportunity to make a real impact in a fast-growing, purpose-driven industry. Learn more at www.resideo.com.

At Resideo, we bring together diverse individuals to build the future of homes. Resideo is an equal opportunity employer. Qualified applicants will be considered without regard to age, race, creed, color, national origin, ancestry, marital status, affectional or sexual orientation, gender identity or expression, disability, nationality, sex, religion, or veteran status. For more information on applicable U.S. equal employment regulations, refer to the "EEO is the Law" poster, "EEO is the Law" Supplement Poster and the Pay Transparency Nondiscrimination Provision. Resideo complies with applicable equal employment laws in all countries where we do business. For more information on how we process your information in the job application process, please refer to Recruitment Privacy Notice. If you require a reasonable accommodation to apply for a job, please use Contact Us form for assistance.