Active Directory Specialist

Hammerjack Pty Ltd; Philippines; On-site; PHP 600,000 - 1,000,000; Full time

Job summary

Hammerjack Pty Ltd invites an experienced Active Directory Engineer with 5–8 years of hands-on work to join our team. The role centers on managing enterprise AD environments, executing recovery plans, and deploying RWDC/RODC.

You will troubleshoot replication, support migrations, and collaborate with security teams on incidents and recovery exercises. The candidate will design and optimize AD DS, DNS, DHCP, LDAP, Kerberos, and Group Policy configurations, ensuring business continuity and

Qualifications

• 5–8 years of hands-on experience with Microsoft Active Directory.
• Strong experience in Active Directory recovery and disaster recovery procedures.
• Hands-on experience setting up RWDC and RODC.
• Strong knowledge of Active Directory replication and troubleshooting.
• Experience with AD migrations, including domain/forest migration and Domain Controller migration.
• Strong knowledge of AD DS, DNS, DHCP, LDAP, Kerberos, and Group Policy.
• Experience with FSMO roles, Global Catalog, Sites & Services, Trusts, and OU structure.

Responsibilities

• Execute and support Active Directory recovery and disaster recovery plans, including restoration and recovery of Domain Controllers and AD services.
• Perform Active Directory health checks, troubleshooting, monitoring, and remediation of AD-related issues.
• Design, deploy, configure, and manage RWDC and RODC.
• Perform Domain Controller promotion and demotion, including installation and configuration of AD DS roles.
• Troubleshoot and manage Active Directory replication, including inter-site and intra-site replication issues.
• Analyze and resolve replication problems using Repadmin, Dcdiag, Event Viewer, and PowerShell.
• Manage Active Directory Sites and Services, replication topology, subnets, and site links.
• Support Active Directory domain, forest, and tenant migration activities.
• Hands-on experience with AD migration, domain consolidation, domain restructuring, and Domain Controller migration.
• Plan and execute Domain Controller upgrades and replacement, ensuring minimal impact to business operations.
• Manage FSMO roles, Global Catalogs, DNS integration, and Domain Controller dependencies.
• Troubleshoot DNS, DHCP, Kerberos, LDAP, Group Policy, authentication, and domain trust-related issues.
• Manage and troubleshoot Group Policy Objects (GPOs) and policy application issues.
• Support AD disaster recovery, backup, restore, and business continuity activities.
• Perform authoritative and non-authoritative Active Directory restores.
• Work with infrastructure and security teams during AD-related incidents, migrations, and recovery exercises.
• Prepare and maintain technical documentation, recovery procedures, migration plans, and operational runbooks.
• Participate in planned maintenance, change management, incident management, and problem management activities.

Skills

AD administration

AD recovery

RWDC setup

RODC setup

Replication troubleshooting

AD migrations

DNS, DHCP, LDAP

Group Policy

Job description

Profile - Active Directory Engineer

Experience: 5–8 Years

Employment Type: Full-Time

Job Summary

We are looking for an experienced Active Directory Engineer with 5–8 years of hands‑on experience in Microsoft Active Directory administration, recovery, Domain Controller deployment, replication, and AD migration.

The candidate will be responsible for maintaining and supporting enterprise Active Directory environments, executing AD recovery plans, setting up Read-Only Domain Controllers (RODC) and Read/Write Domain Controllers (RWDC), troubleshooting replication issues, and supporting Active Directory migrations and upgrades.

Key Responsibilities

• Execute and support Active Directory recovery and disaster recovery plans, including restoration and recovery of Domain Controllers and AD services.
• Perform Active Directory health checks, troubleshooting, monitoring, and remediation of AD-related issues.
• Design, deploy, configure, and manage Read/Write Domain Controllers (RWDC) and Read-Only Domain Controllers (RODC).
• Perform Domain Controller promotion and demotion, including installation and configuration of AD DS roles.
• Troubleshoot and manage Active Directory replication, including inter‑site and intra‑site replication issues.
• Analyze and resolve replication problems using tools such as Repadmin, Dcdiag, Event Viewer, and PowerShell.
• Manage Active Directory Sites and Services, replication topology, subnets, and site links.
• Support Active Directory domain, forest, and tenant migration activities.
• Hands‑on experience with AD migration, domain consolidation, domain restructuring, and Domain Controller migration.
• Plan and execute Domain Controller upgrades and replacement, ensuring minimal impact to business operations.
• Manage FSMO roles, Global Catalogs, DNS integration, and Domain Controller dependencies.
• Troubleshoot DNS, DHCP, Kerberos, LDAP, Group Policy, authentication, and domain trust‑related issues.
• Manage and troubleshoot Group Policy Objects (GPOs) and policy application issues.
• Support AD disaster recovery, backup, restore, and business continuity activities.
• Perform authoritative and non‑authoritative Active Directory restores where required.
• Work with infrastructure and security teams during AD‑related incidents, migrations, and recovery exercises.
• Prepare and maintain technical documentation, recovery procedures, migration plans, and operational runbooks.
• Participate in planned maintenance, change management, incident management, and problem management activities.

Mandatory Technical Skills

• 5–8 years of hands‑on experience with Microsoft Active Directory.
• Strong experience in Active Directory recovery and disaster recovery procedures.
• Hands‑on experience setting up and managing:
• RWDC – Read/Write Domain Controller
• RODC – Read‑Only Domain Controller
• Strong knowledge of Active Directory replication and troubleshooting.
• Experience with AD migration, including domain/forest migration and Domain Controller migration.
• Strong knowledge of AD DS, DNS, DHCP, LDAP, Kerberos, and Group Policy.
• Experience with FSMO roles, Global Catalog, Sites & Services, Trusts, and OU structure.