AD Engineer L3 - IN

Rackspace Technology; United States; Remote; USD 120,000 - 180,000; Full time

Job summary

Rackspace Technology in the United States seeks an experienced Active Directory and Azure identity specialist to lead the on-prem to cloud transition. You’ll collaborate with engineering teams to design secure, scalable directory services and drive hands-on implementation.

You will produce detailed documentation, handover packages, and knowledge transfer for global support teams, with a strong focus on governance, authentication, and compliance in multi-forest, Azure-integrated environments.

Qualifications

• Extensive hands-on experience with AD in multi-forest environments and LDAP queries.
• Strong skills in GPO configuration, security hardening and CIS benchmarks.
• Azure-based SSO implementations using SAML 2.0 and OIDC.
• Experience with DFS, ADFS, PKI and certificate lifecycle management.
• Proven ability to document complex architectures clearly.

Responsibilities

• Contribute to the first phase of on-prem to cloud delivery.
• Create highly detailed documentation and thorough handover to global support teams.
• Collaborate with customer lead engineers and communicate decisions.
• Ensure secure, compliant configurations aligned with Azure and AD best practices.

Skills

Active Directory

Group Policy

ADFS

Azure AD / Entra ID

DNS management

PowerShell

DFS

PKI / Certificate management

Security hardening

SAML 2.0 / OIDC

Tools

Quest migration tools

Azure Portal

Terraform

Packer

Job description

Summary

You will join a team of engineers deep in the first phase of complex on-prem to cloud delivery. With deadlines looming, it’s all hands to the pump. The second phase moves to a manage and operate mode where you’ll be required to deliver highly detailed documentation and in-depth handover to our support teams around the world.

Required technical skills

Deep understanding and practical experience with Microsoft Active Directory (+8 years), including:

• Group Policy configuration & implementation for servers & workstations.
• Item-level targeting, scopes, permissions and WMI filtering.
• Group Policy Modelling and Analysis.
• Security hardening of environments adhering to Microsoft & CIS benchmarks.
• Formulating LDAP queries.
• AD Sites and replication topology.
• Service account administrating, including Managed Service Accounts (MSA).
• Advanced Group Policy Management (AGPM). Version Control.
• undefined
• Experience implementing Distributed File System (DFS).
• undefined
• Experience implementing Active Directory Federation Services (ADFS).
• undefined
• Working knowledge of foundational topics, including:

TCP/IP, DNS, DHCP, Server Virtualisation & PowerShell.

• Strong hands-on experience managing AD-integrated DNS and public DNS records using third-party DNS management platforms such as GoDaddy or equivalent tools.
• Proven experience administering and troubleshooting complex Active Directory environments involving multiple domains and multi forests environment.
• Hands-on experience with AD-Microsoft Entra ID integration, directory synchronization configuration and customization, synchronization troubleshooting, and resolving identity synchronization issues.
• Strong understanding and hands-on experience with Azure-based SSO implementations using SAML 2.0 and OpenID Connect (OIDC) protocols.
• Public key infrastructure (PKI), including SSH. Key management and rotation, certificate life cycle management. Stand-alone and AD integrated CA infrastructure. Operating an offline root CA.
• The target environment is hosted in Microsoft Azure, therefore, the ability to confidently navigate the Azure Portal is essential.

Advantageous skills (In order of preference):

AD Migration and Forest Consolidation: Experience using Quest migration tools or equivalent third-party migration solutions for multi-forest consolidation, Active Directory migration, and cross-forest integration will be an added advantage.

Azure:

• Active Directory (AAD) (Entra): Intune, Management Groups, IAM, Apps, SPNs, etc.
• Key vaults.
• Storage accounts.
• Virtual machine: Creation and management.
• DevOps: Pipelines and Boards.
• Compute Gallery.
• Terraform. OS Image management automation (Hashicorp Packer).

Required soft skills

• Self-starter and comfortable taking the lead.
• Comfortable working in a fast passed production environment.
• Excellent communication skills and comfortable challenging decisions.
• Comfortable interfacing with the customer’s lead engineers.
• Excellent documentation skills with obsessive attention to detail.
• Desire and ability to inform and educate others based on your deep technical experiences.

About Rackspace Technology

Rackspace Technology is the trusted operator of the full enterprise AI stack, from governed private cloud to AI inference and agents in production. From edge to core to cloud, we operate the infrastructure, data layer, and software integration to deliver business outcomes with the predictable cost, reliability, security, and compliance that regulated and mission‑critical environments demand. We support customers in more than 120 countries with AI capabilities spanning private cloud, public cloud, applications, data and cyber resilience.

More on Rackspace Technology

Though we’re all different, Rackers thrive through our connection to a central goal: to be a valued member of a winning team on an inspiring mission. We bring our whole selves to work every day. And we embrace the notion that unique perspectives fuel innovation and enable us to best serve our customers and communities around the globe. We are committed to offering equal employment opportunity without regard to age, color, disability, gender reassignment or identity or expression, genetic information, marital or civil partner status, pregnancy or maternity status, military or veteran status, nationality, ethnic or national origin, race, religion or belief, sexual orientation, or any legally protected characteristic. If you have a disability or special need that requires accommodation, please let us know.