AD Engineer — Hybrid Identity & Automation (Houston Onsite)

Insight Global; Houston (TX); On-site; USD 76,000 - 103,000; Full time

Job summary

Insight Global in Houston, TX is seeking a hands-on Active Directory Engineer to join their Cloud Infrastructure / Identity team. This long-term contract role is on-site in the Energy Corridor three days a week, and you’ll manage a large, hybrid AD environment that combines on-prem with Entra ID.

You will stabilize, modernize, and clean up the environment, drive migrations, automate with PowerShell, and implement least-privilege controls while collaborating with IAM stakeholders.

Qualifications

• 7+ years of hands-on Active Directory engineering experience in enterprise environments.
• Strong experience in multi-domain/multi-forest AD environments, including domain controllers, trusts, schema, GPOs, FSMO, replication, and troubleshooting.
• Proven AD migration experience using tools and PowerShell-based migration and support scripting.
• Experience supporting hybrid identity environments, with AD integrated with Entra ID/Azure AD, Entra ID Connect and directory synchronization concepts.
• Strong PowerShell automation skills for operational improvements.
• Proven experience leveraging AD migration tools.
• Solid understanding of AD security, least-privilege access, auditing and hardening practices.
• A hands-on mindset with comfort working in imperfect, not perfectly documented environments.

Responsibilities

• Clean up, stabilize, and improve an existing enterprise Active Directory environment.
• Support and execute Active Directory migration and optimization efforts across workstations, servers, and applications with minimal disruption.
• Troubleshoot and remediate complex AD issues, including replication, DNS, schema, trusts, domain controllers, GPOs, and legacy performance problems.
• Assess AD health and drive improvements across multi-domain and multi-forest environments.
• Support hybrid identity operations, including on-prem AD integration with Entra ID and directory synchronization tooling.
• Build and maintain PowerShell automation to improve AD health, compliance, and operational consistency.
• Implement and reinforce tiered security / tiered administration practices, least-privilege access, and auditing standards.
• Collaborate with cross-functional teams to assess dependencies, mitigate risk, and execute changes in a controlled manner.
• Partner with IAM stakeholders to support governance workflows and understand how SailPoint integrates with AD for access lifecycle management.

Skills

AD engineering

Multi-domain AD

AD migration

Entra ID/Azure AD

PowerShell automation

AD security

Troubleshooting

Migration tooling

Tools

Quest Migrator Pro

Binary Tree

SailPoint

Azure AD Connect

Job description

Insight Global in Houston, TX is seeking a hands-on Active Directory Engineer to join their Cloud Infrastructure / Identity team. This long-term contract role is on-site in the Energy Corridor three days a week, and you’ll manage a large, hybrid AD environment that combines on-prem with Entra ID.

You will stabilize, modernize, and clean up the environment, drive migrations, automate with PowerShell, and implement least-privilege controls while collaborating with IAM stakeholders.