Microsoft Windows Infrastructure Security and Domain Administrator

Key Responsibilities

Active Directory and Identity Management:

•    Design, administer, and maintain a complex Microsoft Active Directory Domain Services (AD DS) environment, including domain controllers, forests, domains, and trusts.

•    Manage Group Policy Objects (GPOs) for security hardening, software deployment, and user configuration across the enterprise.

•    Administer Azure Active Directory (Azure AD) and hybrid identity solutions (Azure AD Connect).

•    Implement and manage identity and access management (IAM) solutions, including user provisioning, de-provisioning, and role-based access control (RBAC).

•    Troubleshoot and resolve complex AD replication, authentication, and DNS issues.

Windows Server Management:

•    Install, configure, patch, and maintain Windows Server operating systems (2016, 2019, 2022).

•    Manage core infrastructure services including DNS, DHCP, DFS, and File/Print services.

•    Implement and manage Hyper-V or VMware virtualization platforms.

•    Perform system monitoring, performance tuning, and capacity planning.

Security and Compliance:

•    Harden Windows servers and Active Directory according to industry benchmarks (e.g., CIS Benchmarks, NIST guidelines).

•    Develop and execute a rigorous patch management strategy for all Windows systems.

•    Implement and manage endpoint security solutions (Microsoft Defender for Endpoint, CrowdStrike, etc.).

•    Configure and manage security tools such as Microsoft Defender for Identity, and Azure Sentinel for threat detection and response.

•    Conduct regular security audits, access reviews, and vulnerability assessments.

•    Respond to security incidents, participate in investigations, and implement remediation plans.

•    Ensure compliance with organizational policies and relevant regulations (e.g., SOX, HIPAA, GDPR).

Automation and Scripting:

•    Automate repetitive administrative tasks using PowerShell scripting.

•    Utilize DevOps principles and infrastructure-as-code (IaC) tools like Ansible, Terraform, or DSC for configuration management.

Backup, Disaster Recovery, and High Availability:

•    Design, test, and maintain robust backup and disaster recovery solutions for critical infrastructure.

•    Implement high-availability configurations like Failover Clustering.

Collaboration and Support:

•    Serve as an escalation point for help desk and other IT teams for complex issues.

•    Create and maintain detailed system documentation, network diagrams, and operational procedures.

•    Collaborate with network, security, and application teams on projects and initiatives.

Qualifications and Skills

Required:

•    Bachelor’s degree in Computer Science, Information Technology, or a related field, or equivalent experience.

•    5+ years of hands-on experience administering enterprise-level Windows Server environments and Active Directory.

•    Expert-level knowledge of Active Directory, Group Policy, DNS, and DHCP.

•    Strong experience with Windows security hardening, patch management, and vulnerability remediation.

•    Proficiency in PowerShell scripting for automation.

•    In-depth experience with virtualization technologies (Hyper-V or VMware).

•    Solid understanding of core networking concepts (TCP/IP, VLANs, firewalls, VPN).

•    Experience with backup and disaster recovery methodologies and tools.

•    Excellent analytical and problem-solving skills.

•    Strong communication and documentation skills.

Preferred (A Plus):

•    Relevant industry certifications (e.g., Microsoft Certified: Azure Administrator Associate (AZ-104), Microsoft 365 Certified: Enterprise Administrator Expert (MS-100/101), CompTIA Security+, CISSP).

•    Hands-on experience with Microsoft Azure cloud services (Azure AD, Azure VM, Sentinel, Defender suite).

•    Experience with identity management and single sign-on (SSO) solutions (e.g., SAML, OAuth, Okta).

•    Knowledge of SIEM systems and security monitoring.

•    Experience with compliance frameworks (NIST, CIS, ISO 27001).