Active Directory/Quest Engineer
TEKsystems
Stand out for this role — generate a tailored resume and cover letter in about a minute.
Job summary
TEKsystems in Houston, TX is seeking an expert-level Active Directory / Quest Migration Engineer to plan, execute, and optimize AD operations in a large-scale, mission-critical environment. You will serve as the primary expert for Quest migration tools and oversee migrations involving 35,000+ workstations, servers, and applications, with a focus on automation and hybrid identity.
Strong experience with on-premises AD, domain consolidation, Entra ID, Azure AD Connect, and PowerShell is required.
Qualifications
- Bachelor's degree in Computer Science, Information Technology, or related field or equivalent experience.
- 7+ years of hands-on experience with on-premises Active Directory.
- 3+ years of engineering experience.
- 2+ years supporting hybrid Active Directory and Microsoft Entra ID environments.
- Deep expertise in AD architecture: multi-domain, multi-forest, trusts, domain controllers, Sites and Services, schema modifications, OU design, replication topology.
Responsibilities
- Plan, execute, and optimize on-premises Active Directory operations.
- Design, deploy, administer, and support domain controllers, domains, forests, trusts, Sites and Services, and Group Policy Objects.
- Serve as the primary expert for Quest migration tools.
- Oversee migrations involving 35,000+ workstations and server/application transitions.
- Migrate legacy domains into a consolidated AD structure.
- Improve stalled migrations through automation and best practices.
- Manage hybrid AD configurations and synchronization with Azure AD Connect.
- Support identity federation, Conditional Access, Pass-through Authentication, SSO, and cloud identity management.
- Support cloud integration for a ~20% cloud-native workload environment.
- Troubleshoot complex AD issues: replication, DFS-R/SYSVOL, DNS, PKI, GPOs, Kerberos/LDAP issues.
- Identify and remediate AD security vulnerabilities per NIST/CIS.
- Develop and maintain PowerShell scripts for AD administration and bulk operations.
- Create automation for AD health monitoring, backup, migration operations, and monitoring with ADDS/DataDog.
Skills
Education
Tools
Job description
We are seeking an expert-level Active Directory / Quest Migration Engineer to plan, execute, and optimize Active Directory operations in a large-scale, mission-critical environment.
This engineer will serve as the primary subject-matter expert for Quest migration tools and oversee ongoing migrations involving more than 35,000 workstations, along with servers, applications, users, and other directory objects. The position requires extensive experience with on-premises Active Directory, domain consolidation, hybrid identity, Microsoft Entra ID, PowerShell automation, and Active Directory security.
- Plan, execute, and optimize on-premises Active Directory operations.
- Design, deploy, administer, and support domain controllers, domains, forests, trusts, Sites and Services, and Group Policy Objects.
- Serve as the primary subject-matter expert for Quest migration tools.
- Oversee ongoing domain migrations involving more than 35,000 workstations, as well as server and application transitions.
- Migrate legacy domains into a consolidated, modern Active Directory structure.
- Address stalled migration initiatives through automation, process improvements, and Active Directory best practices.
- Manage hybrid Active Directory configurations and synchronization between on-premises AD and Microsoft Entra ID using Azure AD Connect.
- Support identity federation, Conditional Access policies, Pass-through Authentication, single sign-on, and cloud identity management.
- Support cloud integration for an environment in which approximately 20% of workloads are cloud-native.
- Troubleshoot complex Active Directory issues, including replication failures, DFS-R/SYSVOL, DNS integration, schema extensions, Certificate Services, and performance problems.
- Identify and remediate Active Directory security vulnerabilities, including issues involving Kerberos and LDAP hardening.
- Support the integration of legacy domains associated with merger and acquisition activity.
- Develop and maintain PowerShell scripts for Active Directory administration, querying, reporting, and bulk operations.
- Develop automation for AD health monitoring, backup and recovery, compliance, and migration operations.
- Use ADDS, DataDog, or other third-party tools to support monitoring and operational visibility.
- Collaborate with security, application, networking, and infrastructure teams to assess migration dependencies.
- Identify and mitigate technical risks while minimizing downtime during critical migration activities.
- Implement Active Directory security best practices, including least privilege, auditing, compliance, and Privileged Access Management.
- Evaluate tools and technologies that support Active Directory and hybrid identity environments.
- Create technical roadmaps for domain consolidation and hybrid expansion.
- Provide regular project and migration updates to leadership.
- Guide technical teams, mentor peers, and influence engineering decisions without direct managerial authority.
- Bachelor’s degree in Computer Science, Information Technology, or a related field, or equivalent professional experience.
- At least 7 years of hands-on experience with on-premises Active Directory.
- At least 3 years of experience in engineering.
- At least 2 years of experience supporting hybrid Active Directory and Microsoft Entra ID environments.
- Deep expertise in Active Directory architecture, including:
- Multi-domain and multi-forest environments
- Domain and forest trusts
- Domain controllers
- Active Directory Sites and Services
- Schema modifications
- Organizational Unit design
- Replication topology
- Strong understanding of Quest migration tools and the ability to serve as the primary Quest migration expert.
- Proven experience completing large-scale Active Directory migrations using tools such as:
- Quest Migration Manager
- Active Directory Migration Tool
- PowerShell
- Experience migrating users and Active Directory objects at scale.
- Experience with domain consolidation and SIDHistory preservation.
- Experience overseeing workstation, server, and application transitions between legacy and target domains.
- Extensive experience troubleshooting:
- Active Directory replication
- DFS-R and SYSVOL
- DNS integration
- AD Certificate Services and PKI
- Group Policy processing
- Authentication and performance issues
- Strong Group Policy experience, including inheritance, filtering, deployment, and troubleshooting in complex environments.
- Strong knowledge of hybrid identity and cloud identity management, including:
- Microsoft Entra ID
- Azure AD Connect
- Pass-through Authentication
- Single sign-on
- Conditional Access
- Entra ID governance
- Strong PowerShell scripting skills for Active Directory administration, bulk operations, automation, and queries such as Get-ADUser and Get-ADComputer.
- Strong knowledge of Active Directory security, including least privilege, auditing, privileged access, and compliance with NIST or CIS benchmarks.
- Strong systems and server engineering experience.
- Excellent troubleshooting and problem-solving skills in large-scale, high-pressure, mission-critical environments.
- Experience guiding technical projects, mentoring engineers, and influencing technical decisions.
- Experience with Python.
- Experience with Microsoft Azure infrastructure.
- Experience supporting cloud environments.
- Experience with Windows Server 2016 or newer.
- Experience with Microsoft Intune for endpoint management.
- Experience with Active Directory monitoring or administration tools such as SolarWinds, ManageEngine, or DataDog.
- Security and compliance experience.
- Microsoft Certified: Identity and Access Administrator Associate.
- MCSE: Productivity or an equivalent certification.
- Active Directory
- Quest Migration Manager
- ADMT
- PowerShell
- Microsoft Entra ID
- Azure AD Connect
- Domain and forest migrations
- Domain consolidation
- SIDHistory
- Group Policy
- Windows Server
- DNS
- DFS-R and SYSVOL
- AD Certificate Services and PKI
- Kerberos
- LDAP
- Conditional Access
- SSO
- Privileged Access Management
- Python
- Azure
- Security
- Cloud infrastructure
This is a Contract to Hire position based out of Houston, TX.
The pay range for this position is $70.00 - $83.00/hr.
Individual compensation offered for this position within this range will depend on many factors, including qualifications, skills, relevant experience, job knowledge, geographic location, internal equity, and other pertinent job-related factors.
Eligibility requirements apply to some benefits and may depend on your job classification and length of employment. Benefits are subject to change and may be subject to specific elections, plan, or program terms. If eligible, the benefits available for this temporary role may include the following:
- Medical, dental & vision
- Critical Illness, Accident, and Hospital
- 401(k) Retirement Plan – Pre-tax and Roth post-tax contributions available
- Life Insurance (Voluntary Life & AD&D for the employee and dependents)
- Short and long-term disability
- Health Spending Account (HSA)
- Transportation benefits
- Employee Assistance Program
- Time Off/Leave (PTO, Vacation or Sick Leave)
This is a hybrid position in Houston,TX.
This position is anticipated to close on Sep 22, 2026.
We’re partners in transformation. We help clients activate ideas and solutions to take advantage of a new world of opportunity. We are a team of 80,000 strong, working with over 6,000 clients, including 80% of the Fortune 500, across North America, Europe and Asia. As an industry leader in Full-Stack Technology Services, Talent Services, and real-world application, we work with progressive leaders to drive change. That’s the power of true partnership. TEKsystems is an Allegis Group company.
The company is an equal opportunity employer and will consider all applications without regards to race, sex, age, color, religion, national origin, veteran status, disability, sexual orientation, gender identity, genetic information or any characteristic protected by law.
We’re a leading provider of business and technology services. We accelerate business transformation for our customers. Our expertise in strategy, design, execution and operations unlocks business value through a range of solutions. We’re a team of 80,000 strong, working with over 6,000 customers, including 80% of the Fortune 500 across North America, Europe and Asia, who partner with us for our scale, full-stack capabilities and speed. We’re strategic thinkers, hands‑on collaborators, helping customers capitalize on change and master the momentum of technology. We’re building tomorrow by delivering business outcomes and making positive impacts in our global communities. TEKsystems and TEKsystems Global Services are Allegis Group companies. Learn more at TEKsystems.com.
The company is an equal opportunity employer and will consider all applications without regard to race, sex, age, color, religion, national origin, veteran status, disability, sexual orientation, gender identity, genetic information or any characteristic protected by law.
San Francisco Fair Chance Ordinance: Pursuant to the San Francisco Fair Chance Ordinance, for all positions located in the city and county of San Francisco, we will consider for employment qualified applicants with arrest and conviction records.
Massachusetts Lie Detector: It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.
Use of Artificial Intelligence (AI): We may use Artificial Intelligence (AI) to support parts of our hiring process, including sourcing, screening, and evaluating candidates. AI helps assess applications and qualifications, but final decisions are made by our hiring team. By applying, you acknowledge and agree that your application may be reviewed using AI tools.
'/%3e%3cpath%20d='M101.744%2012.4726L102.894%2016.1947L99.0021%2013.2201L101.744%2012.4726ZM105.3%208.40937H100.488L99.0026%203.59473L97.5116%208.41047L92.7%208.40385L96.5965%2011.3834L95.1055%2016.1942L99.0021%2013.2196L101.408%2011.3834L105.3%208.40992V8.40937Z'%20fill='white'/%3e%3cdefs%3e%3clinearGradient%20id='paint0_linear_5593_1381'%20x1='90'%20y1='9.44471'%20x2='99'%20y2='9.44471'%20gradientUnits='userSpaceOnUse'%3e%3cstop%20stop-color='%2300AD70'/%3e%3cstop%20offset='0.998594'%20stop-color='%2300B67A'/%3e%3cstop%20offset='1'%20stop-color='%23DCDCE6'/%3e%3c/linearGradient%3e%3c/defs%3e%3c/svg%3e){kind=small}
