Senior Directory Services Engineer Active Directory Expert

DEXTER TECHNOLOGIES INC; Houston (TX); Remote; USD 120,000 - 180,000; Full time

Job summary

Dexter Technologies Inc. is seeking a Senior Directory Services Engineer (Active Directory Expert) for a remote contract-to-hire engagement. You will lead AD architecture, domain controllers, and security modernization across multi-domain environments.

You will drive automation with PowerShell, manage identity security, and guide staff through large upgrades and migrations while coordinating with Security, Cloud, and Infrastructure teams.

Qualifications

• 10+ years of hands-on Active Directory in large, complex enterprise environments.
• Expert-level knowledge of AD architecture, domain controllers, replication, GPOs, DNS/DHCP, trusts, and security models.
• Strong experience with PowerShell scripting and automation.
• Deep understanding of identity security, privileged access management, and Zero Trust principles.
• Proven ability to lead large-scale directory upgrades, migrations, and remediation efforts.

Responsibilities

• Serve as the principal expert for Active Directory architecture, design, and operations across multi-domain, multi-forest environments.
• Lead modernization initiatives including domain consolidation, schema upgrades, AD hardening, and identity lifecycle automation.
• Architect and maintain Group Policy, DNS, DHCP, replication, trusts, and domain controller strategy.
• Oversee AD security posture: privileged access, tiering models, delegation, auditing, and Zero Trust alignment.
• Drive root-cause analysis and resolution of complex directory issues impacting authentication, authorization, and enterprise applications.
• Develop standards, runbooks, and automation using PowerShell and modern configuration tools.
• Collaborate with cross-functional teams (Security, Cloud, Infrastructure, Applications) to ensure directory stability and performance.
• Evaluate and optimize vendor, contractor, and staffing partnerships supporting directory services.

Skills

Active Directory

Zero Trust

Identity security

Privileged access management

Domain controllers

GPOs

DNS/DHCP

Tools

PowerShell

Job description

Senior Directory Services Engineer (Active Directory Expert)

Location: Remote

Type: Contract to Hire (6-12 months)

Role Overview

The Senior/Principal Directory Services Engineer is the organisation's top technical authority for Active Directory and core identity infrastructure. This role leads the design, modernization, security, and lifecycle management of enterprise directory services, ensuring reliability, scalability, and alignment with business and regulatory requirements.

Key Responsibilities

• Serve as the principal expert for Active Directory architecture, design, and operations across multi-domain, multi-forest environments.
• Lead modernization initiatives including domain consolidation, schema upgrades, AD hardening, and identity lifecycle automation.
• Architect and maintain Group Policy, DNS, DHCP, replication, trusts, and domain controller strategy.
• Oversee AD security posture: privileged access, tiering models, delegation, auditing, and Zero Trust alignment.
• Drive root-cause analysis and resolution of complex directory issues impacting authentication, authorization, and enterprise applications.
• Develop standards, runbooks, and automation using PowerShell and modern configuration tools.
• Collaborate with cross-functional teams (Security, Cloud, Infrastructure, Applications) to ensure directory stability and performance.
• Evaluate and optimize vendor, contractor, and staffing partnerships supporting directory services.

Required Experience

• 10+ years of hands-on experience with Active Directory in large, complex enterprise environments.
• Expert-level knowledge of AD architecture, domain controllers, replication, GPOs, DNS/DHCP, trusts, and security models.
• Strong experience with PowerShell scripting and automation.
• Deep understanding of identity security, privileged access management, and Zero Trust principles.
• Proven ability to lead large-scale directory upgrades, migrations, and remediation efforts.

Preferred Qualifications

• Background in AD forest recovery, DR planning, and cyber-resiliency hardening.
• Microsoft certifications (MS-102, AZ-104, SC-300) or equivalent is a plus

This is a remote position.