Senior Active Directory & Infra Engineer - Remote

Communications & Power Industries, Inc.

Plano (TX)

On-site

USD 110,000 - 160,000

Full time

2 days ago

Be an early applicant

Application generator

A complete application in a minute — tailored resume and cover letter, ready to send.

Get past ATS filters

Job summary

Communications & Power Industries, Inc. in Plano, TX is seeking a Senior Systems Engineer – Active Directory & Infrastructure to join a small, hands-on team. This remote role focuses on AD DS, Group Policy, hybrid identity, and Windows patching as the technical owner.

The successful candidate will lead AD consolidation, security hardening, lifecycle management, and patching across on-prem and cloud environments, with backup duties for virtualization and storage. U.S. Citizenship is required.

Qualifications

Advanced knowledge of AD with hands-on experience in multi-forest/domain/tenant environments.
Experience with AD consolidation, migration, cleanup, restructuring, or modernization.
Advanced Windows Server administration and troubleshooting experience.
Strong experience with Windows patch management, vulnerability remediation, and lifecycle management using MECM/Configuration Manager and/or Intune.
Strong PowerShell scripting and automation skills.
Hands-on experience with Microsoft Entra ID and hybrid identity, including directory synchronization.
Working knowledge of Kerberos, NTLM, SAML, OAuth/OIDC, AD CS, DNS, DHCP, and networking dependencies.
Ability to troubleshoot across infrastructure layers and work independently in a small, collaborative team.

Responsibilities

Serve as the primary administrator and technical SME for AD DS in a multi-forest, multi-domain, and multi-tenant environment.
Design, implement, maintain, troubleshoot, and optimize GPOs, security filtering, and policy performance.
Lead AD consolidation, cleanup, restructuring, and modernization efforts.
Administer and support Microsoft Entra ID and hybrid identity, including directory synchronization across on-prem and cloud environments.
Troubleshoot complex AD, GPO, DNS, Kerberos, NTLM, certificates, authentication, and replication issues.
Own and improve Windows Server and endpoint patching using MECM/Configuration Manager and Intune.
Provide senior-level backup and troubleshooting support for VMware compute/virtualization, NetApp storage, Rubrik backup and recovery.
Collaborate with security and infrastructure teams on AD security hardening, privileged access, least privilege, vulnerability remediation, disaster recovery, and business continuity.