Assistant Manager - IT Operations & Infrastructure

Job Title: Active Directory Administrator L3

Experience: 610+ Years
Location: (As applicable)
Department: Infrastructure / Identity & Access Management (IAM)

Role Summary

The Active Directory L3 Administrator is responsible for the design, administration, troubleshooting, and optimization of Microsoft Active Directory and identity services across onpremises and hybrid environments. This role provides Level3 escalation support, drives architecture improvements, and ensures security, availability, and compliance of directory services.

Key Responsibilities

Active Directory & Identity Management

• Design, manage, and support Active Directory Domain Services (AD DS) in large enterprise environments
• Administer and troubleshoot:
  • Forests, domains, trusts
  • Sites & services
  • DNS, DHCP integration
  • Group Policies (GPO design, optimization, troubleshooting)
• Handle complex AD replication, authentication, and trust issues
• Lead AD upgrades, migrations, and domain consolidation projects

Hybrid Identity & Azure AD / Entra ID

• Manage Hybrid AD environments using:
  • Azure AD Connect / Entra Connect
  • Password Hash Sync (PHS), PassThrough Authentication (PTA)
• Troubleshoot hybrid identity issues:
  • Sync errors
  • Duplicate objects
  • Attribute conflicts
• Support Azure AD / Entra ID features:
  • Conditional Access
  • MFA
  • Identity Protection
  • Privileged Identity Management (PIM)

Security & Compliance

• Implement and enforce AD security best practices
• Manage:
  • Tiered admin model
  • Privileged access
  • Secure LDAP
  • Hardening of DCs
• Investigate and remediate:
  • AD security incidents
  • Compromised accounts
  • Kerberos / NTLM issues
• Support audit, compliance, and security reviews

Operations & L3 Support

• Act as L3 escalation point for AD, authentication, and access issues
• Perform root cause analysis (RCA) for P1/P2 incidents
• Coordinate with:
  • Security teams
  • Network teams
  • Application teams
• Create and maintain:
  • SOPs
  • Runbooks
  • Architecture documentation

Automation & Optimization

• Develop and maintain PowerShell automation for:
  • User and group management
  • AD health checks
  • Reporting
• Improve operational efficiency and reduce manual effort

Technical Skills (Mandatory)

• Microsoft Active Directory (AD DS)
• Group Policy Management
• DNS / DHCP
• Azure AD / Microsoft Entra ID
• Azure AD Connect
• PowerShell scripting
• Windows Server (2016/2019/2022)
• AD security & hardening

Good to Have

• Experience with ADFS
• Identity Governance & Lifecycle Management
• PAM tools (BeyondTrust, CyberArk, etc.)
• Microsoft Defender for Identity
• Largescale enterprise environments (50k+ users)

Soft Skills

• Strong troubleshooting and analytical skills
• Ownership mindset and accountability
• Ability to handle highpressure incidents
• Clear communication with technical and nontechnical stakeholders
• Documentation and process orientation