CGEMJP00363080 -Windows Server + Active Directory Engineer

Role: Windows Server + Active Directory Engineer

Location: USA Remote

Job Summary

Engineer, administer, secure, and troubleshoot enterprise Windows Server and Active Directory services, ensuring reliable identity, authentication, name resolution, policy enforcement, patching, and operational support.

Key Responsibilities

• Install, configure, patch, harden, monitor, and troubleshoot Windows Server environments.
• Administer Active Directory Domain Services, Group Policy, trusts, sites and services, users, groups, and service accounts.
• Support DNS, DHCP, PKI/certificates, LDAP/Kerberos, file services, and related identity dependencies.
• Manage hybrid identity integrations with Microsoft Entra ID where applicable.
• Investigate replication, authentication, policy, performance, and availability issues.
• Execute vulnerability remediation, privileged-access controls, backup/restore validation, and disaster-recovery testing.
• Automate repeatable administration with PowerShell and maintain scripts in version control.
• Maintain runbooks, architecture records, configuration baselines, change records, and operational documentation.

Required Qualifications

• 1-3 years supporting Windows Server and Active Directory in a large enterprise environment.
• Deep knowledge of AD DS, Group Policy, DNS, authentication protocols, replication, and Windows security.
• Experience with patching, hardening, monitoring, backup/recovery, and incident/change processes.
• PowerShell scripting and structured troubleshooting skills.
• Ability to participate in maintenance windows and on-call support as required.

Preferred Qualifications

• Microsoft Windows Server, Azure Administrator, Identity and Access Administrator, or security certification.
• Experience with AD migrations, hybrid identity, PKI, PAM, clustering, and virtualization.