Active Directory Admin/Engineer

Mondo; New York (NY); On-site; USD 69,000 - 80,000; Full time

Benefits offered by this job

Health

Dental

Vision

401K

Job summary

Mondo is seeking an experienced Active Directory Administrator/Engineer to join our IT Infrastructure team onsite in New York. The successful candidate will design, deploy, and maintain AD environments, supporting thousands of users and devices across multiple sites.

Responsibilities include implementing security best practices, managing IAM and directory synchronization, and providing documentation and training.

Qualifications

• 5 years of hands-on AD administration in enterprise environments.
• Strong AD architecture, replication, GPOs and domain services knowledge.
• Experience with Windows Server 2016/2019/2022 or newer.
• PowerShell scripting for automation and administration.
• DNS, DHCP, and core network protocol knowledge.
• Experience with directory synchronization and IAM platforms (Azure AD Connect, Entra ID, Okta).
• Understanding of identity security, least-privilege and compliance.
• CompTIA Security or Microsoft Identity and Access Administrator certification or equivalent.
• Excellent communication, documentation and collaboration skills.

Responsibilities

• Design, deploy, and manage enterprise AD infrastructure.
• Administer user/computer accounts, OUs, GPOs, and security groups.
• Implement AD security best practices and least privilege access.
• Manage IAM solutions and directory synchronization tools.
• Monitor AD health, replication, and troubleshoot escalations.
• Collaborate with networks, security and apps teams for identity integration.
• Plan and execute AD upgrades, migrations and changes.
• Develop and maintain runbooks and technical documentation.
• Provide knowledge transfer and training to IT staff and end users.

Skills

AD administration

AD architecture

GPOs

PowerShell

Windows Server

Azure AD Connect

Okta

Identity security

Troubleshooting

Documentation

Tools

Microsoft Entra ID

Okta

Job description

Job Title: Active Directory Administrator/Engineer

Location-Type: Fully Onsite at one of the following locations:

• 731 Lexington Avenue, New York, NY 10022
• 120 Park Avenue, New York, NY 10117
• 919 3rd Avenue, New York, NY 10022

Start Date: ASAP

Duration: Contract, 6-9 Months

Compensation Range: $50-58/hr

Benefits: Eligible for Health, Dental, Vision, and 401K

Visa Sponsorship: Not eligible for visa sponsorship

Job Description

We are seeking an experienced Active Directory Administrator/Engineer to join our IT Infrastructure team. The successful candidate will be responsible for designing, implementing, maintaining, and troubleshooting Active Directory environments across our organization. This role requires strong technical expertise, attention to detail, and the ability to manage complex directory services that support thousands of users and devices.

Job Summary

• Design, deploy, and manage enterprise Active Directory (AD) infrastructure, including domains, forests, and trust relationships.
• Administer user and computer accounts, Organizational Units (OUs), Group Policies (GPOs), and security groups.
• Implement and maintain AD security best practices, including least‑privilege access, compliance controls, and security policies.
• Manage Identity and Access Management (IAM) solutions and directory synchronization tools.
• Monitor AD performance, health, and replication across multiple sites.
• Troubleshoot and resolve complex Active Directory issues and escalations.
• Collaborate with network, security, infrastructure, and application teams to ensure seamless directory and identity integration.
• Plan and execute Active Directory upgrades, migrations, and infrastructure changes.
• Implement and maintain disaster recovery and business continuity procedures for directory services.
• Develop and maintain technical documentation, configurations, procedures, and operational runbooks.
• Provide technical support, knowledge transfer, and training to IT staff and end users.
• Stay current on Microsoft technologies, security patches, industry best practices, and emerging identity technologies.

Minimum Requirements

• 5 years of hands‑on Active Directory administration experience in enterprise environments.
• Strong understanding of Active Directory architecture, replication, Group Policy, and domain services .
• Experience administering Windows Server 2016, 2019, 2022, or newer .
• Proficiency with PowerShell scripting for automation and system administration.
• Strong knowledge of DNS, DHCP, and core network protocols .
• Experience with directory synchronization and identity platforms such as Azure AD Connect, Microsoft Entra ID, Okta, or similar technologies .
• Understanding of identity security, least‑privilege access, and compliance requirements .
• Strong troubleshooting and problem‑solving skills, particularly in complex enterprise environments.
• Excellent communication, documentation, and collaboration skills.
• CompTIA Security , Microsoft Certified: Identity and Access Administrator, or equivalent experience .

Preferred Qualifications

• Microsoft Certified: Enterprise Administrator Expert or similar advanced certification.
• Experience with hybrid cloud identity environments , particularly Microsoft Entra ID/Azure AD.
• Knowledge of identity and authentication protocols including LDAP, Kerberos, and SAML .
• Experience with Privileged Access Management (PAM) solutions.
• Familiarity with IT Service Management (ITSM) platforms and ticketing systems.
• Experience working in healthcare, financial services, or other regulated industries .