Remote Senior Active Directory & Infrastructure Engineer

Ultipro

United States

Remote

USD 120,000 - 160,000

Full time

4 days ago

Be an early applicant

Application generator

Stand out for this role — generate a tailored resume and cover letter in about a minute.

Get past ATS filters

Job summary

Communications & Power Industries (CPI) seeks a Senior Systems Engineer with deep AD/Infrastructure expertise to own AD DS in a multi-forest environment and lead modernizations, security hardening, and patching across on-premises and cloud. You will manage Entra ID, MECM/Intune, and backup tech including VMware, NetApp, and Rubrik, while collaborating with security teams on DR and continuity.

The role is remote, US-based, with a focal responsibility for enterprise identity and Windows

Qualifications

Advanced knowledge of AD with hands-on experience administering multi-forest/domain/tenant environments.
Experience with AD consolidation, migration, cleanup, restructuring, or modernization.
Advanced Windows Server administration and troubleshooting experience.
Strong experience with Windows patch management, vulnerability remediation, and systems lifecycle management leveraging MECM/Configuration Manager and/or Intune.
Strong PowerShell scripting and automation skills.
Hands-on experience with Microsoft Entra ID, hybrid identity, and directory synchronization.
Working knowledge of Kerberos, NTLM, SAML, OAuth/OIDC, AD CS, DNS, DHCP, and networking dependencies.
Ability to troubleshoot across infrastructure layers and work independently in a small, collaborative infrastructure team.
Strong documentation, communication, troubleshooting, and root-cause analysis skills.
Security and Compliance perspective, NIST 800-43, 171, CMMC, CUI, ITAR, ECI

Responsibilities

Serve as the primary administrator and technical SME for Microsoft Active Directory Domain Services (AD DS), in a multi-forest, multi-domain, and multi-tenant environment.
Design, implement, maintain, troubleshoot, and optimize Group Policy Objects (GPOs), security/WMI filtering, and policy performance.
Lead Active Directory consolidation, cleanup, restructuring, and modernization, including remediation of stale accounts/objects, legacy configurations, unnecessary policies, excessive privileges, and other directory complexity.
Administer and support Microsoft Entra ID and hybrid identity, including directory synchronization and authentication/authorization across on-premises and cloud environments.
Troubleshoot complex AD, Group Policy, DNS, Kerberos, NTLM, certificates, authentication, authorization, and replication issues.
Own and improve Windows Server and endpoint patching, using MECM/Configuration Manager and Intune including patch planning, deployment, compliance reporting, troubleshooting failed updates, and remediation of vulnerable or unsupported systems.
Provide senior-level backup and troubleshooting support for VMware compute/virtualization, NetApp storage, Rubrik backup and recovery, and related infrastructure.
Work with security and infrastructure teams on AD security hardening, privileged access, least privilege, vulnerability remediation, disaster recovery, and business continuity.