Sr. Active Directory Engineer - on-site, NO H-1B, NO C2C

TechLink Resources, Inc; Los Angeles (CA); On-site; USD 123,984 - 130,872; Part time

Job summary

A technology consulting company is looking for a mid-senior level contract role focusing on leading the design and implementation of enterprise-level hybrid LDAP solutions. The ideal candidate will have at least 5 years of experience, specializing in Active Directory and PKI migrations. Responsibilities include assessing domain controllers, optimizing directory structures, and troubleshooting related issues. The position is located in Los Angeles, California, and offers a competitive pay range of $90 to $95 per hour.

Qualifications

• Minimum of 5 years of related work experience.
• Experience in engineering and integrating infrastructure components and logical aspects.
• Experience working in an outsourced infrastructure environment.

Responsibilities

• Lead the assessment and analysis of the Domain controllers in the AD forest.
• Document and guide the operations team with decommissioning, upgrade, and migration.
• Analyze existing PKI infrastructure and migrate certificates.

Skills

Designing enterprise-level hybrid LDAP solutions

Active Directory

Microsoft Identity Manager

Project management

Troubleshooting AD and PKI issues

Job description

Pay Range

Base pay: $90.00/hr - $95.00/hr

Schedule: 4 days onsite, no flexibility.

Responsibilities

• Lead the assessment and analysis of the Domain controllers in the AD forest.
• Document and guide the operations team with the decommissioning, upgrade and migration of domain controllers.
• Analyze the existing use of PKI certificates in legacy directories and help migrate them into Microsoft’s PKI service.
• Evaluate capabilities of services/products and design solutions to deliver future service offerings through detailed technical analysis.
• Define engineered designs, including full documentation.
• Follow structured methodologies for technical analysis of products and solutions.

Basic Qualifications

• Minimum of 5 years of related work experience.
• Demonstrated experience designing, implementing, and integrating enterprise‑level highly connected hybrid LDAP solutions with at least 40,000 users, including:
  • Active Directory
  • Microsoft Identity Manager
  • Active Directory Federation
  • Services / AADC
• Integrations between key services and various LDAP providers.
• Experience in engineering, designing, and integrating both infrastructure components (domain controllers, sites and services, connectivity, etc.) and logical aspects (GPO management, directory structure, and management toolsets).
• Experience in project management of large IT initiatives.
• Experience working with and directing suppliers in an outsourced environment infrastructure.

Project Work

• Assess existing domain controllers, identify consolidation opportunities, and develop a migration strategy.
• Ensure replication integrity and domain health during consolidation.

PKI Certificate Migration & Cleanup

• Analyze existing PKI infrastructure and certificates.
• Migrate certificates to a modern PKI infrastructure with minimal disruption.
• Revoke, renew, and replace legacy or non‑compliant certificates.
• Ensure compliance with security policies and best practices.

Active Directory Administration & Cleanup

• Identify and remove stale objects, orphaned accounts, and unused policies.
• Optimize AD replication, site topology, and group policy objects (GPOs).
• Implement best practices for AD security, auditing, and hardening.

Troubleshooting & Support

• Diagnose and resolve AD, DNS, and PKI‑related issues.
• Work with security and infrastructure teams to remediate vulnerabilities.
• Document configurations, policies, and procedures for future reference.

Seniority Level

Mid‑Senior level

Employment Type

Contract

Job Function

Information Technology

Industries: IT Services and IT Consulting and Entertainment Providers