Senior Active Directory Engineer

Bizzstrong; United States; Remote; USD 130,000 - 190,000; Full time

Job summary

Bizzstrong is seeking a Senior/Principal Active Directory Services Engineer to lead AD architecture, design, and security for enterprise environments in the US. The role emphasizes modernization, consolidation, and identity lifecycle automation using PowerShell and modern tools.

The candidate will collaborate with Security, Cloud, and Infrastructure teams to ensure directory stability, scalability, and compliant operations.

Qualifications

• 10+ years hands-on Active Directory experience in large enterprises.
• Expertise in AD architecture, domain controllers, replication, GPOs, DNS/DHCP, trusts, and security models.
• Strong PowerShell scripting and automation capabilities.
• Deep understanding of identity security, PAM, and Zero Trust.
• Proven ability to lead large directory upgrades and migrations.

Responsibilities

• Serve as principal expert for AD architecture, design, and operations across multi-domain environments.
• Lead modernization initiatives including domain consolidation and AD hardening.
• Architect and maintain Group Policy, DNS, DHCP, replication, trusts, and DC strategy.
• Oversee AD security posture: privileged access, tiering, auditing, Zero Trust alignment.
• Drive root-cause analysis of directory issues affecting authentication and apps.
• Develop standards, runbooks, and automation using PowerShell and config tools.
• Collaborate with Security, Cloud, Infrastructure, and Applications teams for stability.
• Evaluate vendor and staffing partnerships supporting directory services.

Skills

Active Directory

PowerShell

Zero Trust

Identity security

Automation

Tools

Group Policy

DNS

DHCP

Job description

We are actively seeking qualified candidates for the following position. The selected person will work directly with our Client that is based in US and is an industry leader in their area of operations. Our client is rated among the top 100 best places to work for by Fortune.

Role Overview

The Senior/Principal Active Directory Services Engineer is the organizations top technical authority for Active Directory and core identity infrastructure. This role leads the design, modernization, security, and lifecycle management of enterprise directory services, ensuring reliability, scalability, and alignment with business and regulatory requirements.

Key Responsibilities

• Serve as the principal expert for Active Directory architecture, design, and operations across multidomain, multiforest environments.
• Lead modernization initiatives including domain consolidation, schema upgrades, AD hardening, and identity lifecycle automation.
• Architect and maintain Group Policy, DNS, DHCP, replication, trusts, and domain controller strategy.
• Oversee AD security posture: privileged access, tiering models, delegation, auditing, and Zero Trust alignment.
• Drive rootcause analysis and resolution of complex directory issues impacting authentication, authorization, and enterprise applications.
• Develop standards, runbooks, and automation using PowerShell and modern configuration tools.
• Collaborate with crossfunctional teams (Security, Cloud, Infrastructure, Applications) to ensure directory stability and performance.
• Evaluate and optimize vendor, contractor, and staffing partnerships supporting directory services.

Required Experience

• 10+ years of handson experience with Active Directory in large, complex enterprise environments.
• Expertlevel knowledge of AD architecture, domain controllers, replication, GPOs, DNS/DHCP, trusts, and security models.
• Strong experience with PowerShell scripting and automation.
• Deep understanding of identity security, privileged access management, and Zero Trust principles.
• Proven ability to lead largescale directory upgrades, migrations, and remediation efforts.

Preferred Qualifications

• Background in AD forest recovery, DR planning, and cyberresiliency hardening.
• Microsoft certifications (MS102, AZ104, SC300) or equali​ve​nt is a plus