Engineer, Active Directory

XPO India Shared Services
Job Title: Engineer, Active Directory
Reports to: Manager, Technology Infrastructure
Job Grade:
Assigned by Comp.
Job Code: 50493
FLSA Status: Exempt
FLSA Category, if Exempt:
Assigned by Comp.
EEO Category:
Assigned by Comp
Prepared By: Mark Sobczak
Date Approved:
Entered by Comp.
Approved By:
Entered by Comp.
GENERAL DESCRIPTION:
The Engineer, Active Directory is responsible for the design, implementation, administration, and optimization of the organization 's Microsoft Active Directory Environment. This mid:level role focuses on ensuring secure, reliable, and efficient directory services that support identity and access management across the enterprise. Responsibilities include collaborating with cross:functional teams to deliver scalable and resilient identity solutions, leveraging automation and scripting, evaluating system performance, resolving complex issues, and contributing to continuous improvement initiatives aligned with business needs.
ESSENTIAL DUTIES AND RESPONSIBILITIES:
stylelist:style:type:square;margin:bottom:0.0in;margin:top:0.0px:
:Install, configure, and maintain Active Directory forests, domains, and domain controllers
:Manage Group Policy Objects (GPOs), DNS, DHCP, and related services
:Monitor AD replication and system performance, applying patches and upgrades as required
:Create, modify, and deprovision user, service, and computer accounts while maintaining least:privilege access
:Implement and maintain password policies, privileged access controls, and security baselines
:Investigate and resolve authentication failures, replication issues, and trust relationship errors
:Participate in root:cause analysis and continuous service improvement initiatives
:Audit and review access permissions and Group Policies regularly
:Assist with migrations, consolidations, and upgrades of AD environments and related infrastructure
:Maintain accurate design diagrams, configuration documentation, and standard operating procedures
:Recommend improvements for scalability, automation, and disaster recovery
SUPERVISORY RESPONSIBILITIES:
stylelist:style:type:square;margin:bottom:0.0in;margin:top:0.0px:
:This Job has no supervisory responsibilities.
DECISION:MAKING RESPONSIBILITIES:
stylelist:style:type:square;margin:bottom:0.0in;margin:top:0.0px:
:This Job has no decision:making responsibilities.
EDUCATION/EXPERIENCE:
stylelist:style:type:square;margin:bottom:0.0in;margin:top:0.0px:
:Minimum Required Education: Associate 's degree or equivalent related work or military experience
:Minimum Required Experience: 3 years of experience managing Active Directory environments and Azure Active Directory
:Desirable Education/Experience:
stylelist:style:type:square;margin:bottom:0.0in;margin:top:0.0px:
:
stylelist:style:type:circle;margin:bottom:0.0in;margin:top:0.0px:
:Strong understanding of: AD Site component topology; Forest/Inter:Forest Operations and Topology; AADConnect
:Strong knowledge and experience with Group Policy management
:Strong Knowledge of AD on Windows Server 2016 and newer
:Strong experience with DNS management, AD security policies and service accounts management
:Associate 's or Bachelor 's degree in Information Technology, Computer Science, or related field (or equivalent practical experience)
:3 years of experience managing Active Directory environments and Azure Active Directory
:Experience with CyberArk
:Experience with Saviynt Identity Manager
:Experience with VMWare environments
:Experience with Citrix Environments
CERTIFICATES AND LICENSES:
Desireable Certifications
stylelist:style:type:square;margin:bottom:0.0in;margin:top:0.0px:
:Microsoft Certified: Identity and Access Administrator Associate
:Microsoft Certified: Windows Server Hybrid Adminstrator Associate
:Microsoft Certified Solutions Expert (MCSE) or legacy MCSA
JOB RELATED COMPETENCIES:

Job Type: Permanent