Lead Engineer, Active Directory

XPO India Shared Services
Job Title: Lead Engineer, Active Directory
Reports to: Manager, Technology Infrastructure
Job Grade:
Assigned by Comp.
Job Code:
FLSA Status: Exempt
FLSA Category, if Exempt:
Assigned by Comp.
EEO Category:
Assigned by Comp
Prepared By: Mark Sobczak
Date Approved:
Entered by Comp.
Approved By:
Entered by Comp.
GENERAL DESCRIPTION:
The Lead Engineer, Active Directory provides strategic and technical leadership in the design, implementation, and optimization of the enterprise Active Directory environment. This senior:level role ensures the stability, scalability, and security of the identity and access management services, aligning directory architecture with business needs and industry best practices. Responsibilities include review design of existing Active Directory environments, collaborating with cross:functional teams to deliver scalable and resilient identity solutions, leveraging automation and scripting, evaluating system performance, resolving complex issues, performing large:scale domain consolidations, and contributing to continuous improvement initiatives aligned with business needs.
ESSENTIAL DUTIES AND RESPONSIBILITIES:
stylelist:style:type:square;margin:bottom:0.0in;margin:top:0.0px:
:
Design and maintain a highly available, secure, and scalable Active Directory systems, including forests, domains, and trusts
:
Develop long:term strategies for AD modernization, including cloud and hybrid identity integration (e.g., Azure AD, Entra ID)
:
Define and enforce Group Policy Objects (GPO) standards for authentication, password policies, and privileged access management
:
Implement and maintain AD:based activation, robust security controls for AD, including delegation models, RBAC, and auditing
:
Collaborate with security teams to ensure compliance with regulatory frameworks (e.g., SOX, HIPAA, PCI DSS)
:
Lead large:scale AD migrations, consolidations, and upgrades (e.g., forest/domain redesign, Windows Server upgrades)
:
Serve as the highest:level escalation point for complex directory issues and outages
:
Produce and maintain comprehensive architecture diagrams, policies, and operational documentation
:
Mentor and guide engineers and administrators on best practices for AD operations
SUPERVISORY RESPONSIBILITIES:
stylelist:style:type:square;margin:bottom:0.0in;margin:top:0.0px:
:This Job has no supervisory responsibilities.
DECISION:MAKING RESPONSIBILITIES:
stylelist:style:type:square;margin:bottom:0.0in;margin:top:0.0px:
:This Job has no decision:making responsibilities.
EDUCATION/EXPERIENCE:
stylelist:style:type:square;margin:bottom:0.0in;margin:top:0.0px:
:Minimum Required Education: Bachelor 's degree or equivalent related work or military experience
:Minimum Required Experience: 5 years of experience managing Active Directory environments
:Desirable Education/Experience:
stylelist:style:type:square;margin:bottom:0.0in;margin:top:0.0px:
:
stylelist:style:type:circle;margin:bottom:0.0in;margin:top:0.0px:
:In:depth understanding of: AD Site component topology; Forest/Inter:Forest Operations and Topology; AADConnect; AD and Azure Environment Security; strong knowledge and experience with Group Policy management
:Expert Knowledge of AD on Windows Server 2016 and newer
:Strong experience with DNS management
:Strong experience with AD security policies and service accounts management
:Experience with CyberArk
:Experience with Saviynt Identity Manager
:Experience with VMWare environments
:Experience with Citrix Environments
CERTIFICATES AND LICENSES:
Desireable Certifications
stylelist:style:type:square;margin:bottom:0.0in;margin:top:0.0px:
:Microsoft Certified: Identity and Access Administrator Associate
:Microsoft Certified: Windows Server Hybrid Adminstrator Associate
:Microsoft Certified Solutions Expert (MCSE) or legacy MCSA
JOB RELATED COMPETENCIES:
To
Job Type: Permanent