Active Directory & Hybrid Infrastructure Engineer

Position Summary

We are seeking a highly skilled and experienced Active Directory & Hybrid Infrastructure Engineer to design, implement, migrate, and operate Microsoft on‑premises and hybrid identity and infrastructure services.

The ideal candidate has strong hands‑on experience with Active Directory Domain Services (AD DS), Microsoft Entra ID Connect, PKI / ADCS, Windows Server–based infrastructure, and high‑availability solutions. This role requires the ability to clearly explain architecture and best practices to customers and stakeholders.

Experience with Azure and hybrid cloud environments is a strong advantage.

Key Responsibilities

Active Directory & Identity Management

Design, implement, and migrate Active Directory Domain Services (AD DS) environments, including:

Domain Controllers

DNS and DHCP

Organizational Units (OUs) and delegation models

Design, implement, and migrate Microsoft Entra ID Connect (formerly Azure AD Connect) to synchronize identities, groups, and credentials between on‑premises AD and cloud environments

Monitor and maintain AD health, replication, and Group Policy Objects (GPOs) to ensure stability and security compliance

Understand and clearly explain Active Directory tiering and security models to customers

Active Directory Certificate Services (AD CS) & PKI Design, implement, and migrate Public Key Infrastructure (PKI) using Active Directory Certificate Services (AD CS)

Manage Certificate Authorities (CAs), including configuration, maintenance, and lifecycle operations Understand and explain two‑tier ADCS architectures Issue, renew, and troubleshoot certificates used for servers and end‑user authentication On‑Premises Systems & High Availability

Configure and manage Windows Failover Clustering to provide high availability for:

File services

Critical applications

Maintain and troubleshoot on‑premises Windows Server infrastructure

Remote Desktop Services (RDS) & Application Delivery

Design, implement, and migrate Remote Desktop Services (RDS) environments, including:

Session Hosts

Connection Broker

Remote Desktop Gateway

Customer Engagement & Delivery

Lead and support customer engagements related to:

Identity modernization

Infrastructure upgrades and migrations

Security improvements and best practices

Clearly communicate technical designs and operational concepts to customers and stakeholders

Required Skills & Qualifications

Strong experience with Active Directory Domain Services (AD DS)

Solid understanding of DNS, DHCP, and Windows Server architecture

Hands‑on experience with Microsoft Entra ID Connect

Experience designing and operating ADCS / PKI environments

Knowledge of Windows Failover Clustering and RDS

Strong troubleshooting and problem‑solving skills

Preferred Qualifications

Experience in enterprise‑scale, multi‑domain environments

Hybrid identity experience involving Microsoft Entra ID

Azure infrastructure knowledge

Ability to explain complex technical concepts clearly to customers