Senior Active Directory Specialist

Optimal Growth Technologies; Johannesburg; On-site; ZAR 800 000 - 1 200 000; Full time

Job summary

A leading technology firm is seeking a Senior Active Directory Specialist to oversee the design, implementation, and maintenance of their Active Directory environment. The role requires expertise in security best practices, identity management, and collaboration with IT teams. The ideal candidate will have extensive experience in AD administration, scripting, and compliance, ensuring optimal performance and security across the organization.

Qualifications

• Minimum of 8+ years of experience in managing and administering Active Directory.
• Proficiency in implementing security best practices and AD hardening techniques.

Responsibilities

• Manage and maintain the Active Directory infrastructure, including domain controllers.
• Develop and manage IAM policies, procedures, and controls.
• Implement security best practices, including MFA and AD security baselines.

Skills

Active Directory Management

Troubleshooting

PowerShell Scripting

Security Best Practices

Analytical Skills

Communication

Education

Bachelor's degree in Computer Science

Tools

Windows Server

DNS

DHCP

Group Policy

Azure AD

ADFS

IAM Solutions

Job description

Job Description: Senior Active Directory Specialist

Role Overview:

The Senior Active Directory Specialist is responsible for the design, implementation, administration, and maintenance of the Active Directory (AD) environment, ensuring optimal performance, security, and availability. This role involves managing identity and access, implementing security best practices, and supporting enterprise-wide authentication and directory services.

Key Responsibilities:

Active Directory Administration:

• Manage and maintain the Active Directory infrastructure, including domain controllers, DNS, DHCP, and Group Policy.
• Perform regular monitoring, troubleshooting, and optimization of AD to ensure stability and performance.

Identity & Access Management (IAM):

• Develop, implement, and manage IAM policies, procedures, and controls.
• Handle user provisioning, de-provisioning, and access control in line with security policies.

Security & Compliance:

• Implement security best practices, including MFA, AD security baselines, and privileged access management.
• Conduct regular security audits, patch management, and vulnerability assessments for the AD environment.

Disaster Recovery & Backup:

• Develop and maintain AD disaster recovery and business continuity plans.
• Execute regular backups and recovery tests to ensure data integrity and availability.

Scripting & Automation:

• Develop PowerShell scripts to automate AD processes, including account management and reporting.
• Implement automated solutions for monitoring and alerting on AD performance and security.

Collaboration & Support:

• Collaborate with IT teams to integrate AD with cloud services (e.g., Azure AD, O365).
• Provide technical support for AD-related issues and incidents.

Documentation & Reporting:

• Maintain comprehensive documentation for AD architecture, policies, procedures, and troubleshooting guides.
• Generate and present reports on AD health, security incidents, and user access.

Required Skills and Qualifications:

• Bachelors degree in Computer Science, Information Technology, or related field.
• Minimum of 8+ years of experience in managing and administering Active Directory in enterprise environments.
• Strong expertise in Windows Server, DNS, DHCP, Group Policy, and PowerShell scripting.
• Experience with Azure AD, ADFS, and identity federation.
• Proficiency in implementing security best practices and AD hardening techniques.
• Knowledge of multi-factor authentication (MFA), PKI, and LDAP.
• Familiarity with IAM solutions such as Okta, CyberArk, or similar tools.
• Excellent troubleshooting, analytical, and problem-solving skills.
• Strong verbal and written communication skills for technical and non-technical stakeholders.

Preferred Certifications:

• Microsoft Certified: Identity and Access Administrator Associate
• Microsoft Certified: Windows Server Hybrid Administrator Associate
• CompTIA Security+ or CISSP
• Azure Fundamentals or Azure Administrator