Active Directory Engineer (Identity)

N-iX is seeking an Active Directory Engineer (Identity) to design, implement, and optimize a secure, scalable, and highly available Active Directory and identity infrastructure. This role involves ensuring secure identity lifecycle management, supporting integration with cloud services like Azure AD and ADFS, implementing best practices for operational reliability, security, and compliance, and providing training and documentation for IT administrators and end-users. The engineer will also establish change management processes, configure auditing policies, and collaborate with various stakeholders to align with business objectives.

Must Have

• Knowledge of Windows Server versions (2016, 2019, 2022)
• Proficiency in PowerShell scripting for AD automation
• Experience with Active Directory Certificate Services (AD CS)
• Familiarity with Group Policy Management Console (GPMC)
• Understanding of DNS, DHCP, and TCP/IP fundamentals
• Experience with Azure AD, ADFS, and hybrid identity
• Familiarity with IAM (Identity and Access Management) frameworks

Good to Have

• Experience in hybrid AD and cloud identity integration
• Familiarity with regulatory compliance requirements
• Experience with project management in AD deployment projects

Perks & Benefits

• Flexible working format - remote, office-based or flexible
• A competitive salary and good compensation package
• Personalized career growth
• Professional development tools (mentorship program, tech talks and trainings, centers of excellence, and more)
• Active tech communities with regular knowledge sharing
• Education reimbursement
• Memorable anniversary presents
• Corporate events and team buildings
• Other location-specific benefits

N-iX is a global software development service company that helps businesses across the globe create next-generation software products. Founded in 2002, we unite 2,400+ tech-savvy professionals across 40+ countries, working on impactful projects for industry leaders and Fortune 500 companies. Our expertise spans cloud, data, AI/ML, embedded software, IoT, and more, driving digital transformation across finance, manufacturing, telecom, healthcare, and other industries. Join N-iX and become part of a team where your ideas make a real impact.

Currently, we are looking for an Active Directory Engineer (Identity) to join the team.

Client Overview:

The client is a leading company in digital transaction management and e-signature solutions, helping organizations streamline agreements and accelerate business processes through secure, scalable, and user-friendly platforms.

Key Responsibilities:

• Design, implement, and optimize a secure, scalable, and highly available Active Directory (AD) and identity infrastructure to support centralized authentication, authorization, and resource access control across the organization.
• Ensure secure and streamlined identity lifecycle management (Joiner, Mover, Leaver processes).
• Enable efficient delegation of administrative tasks.
• Support integration with cloud services and applications (Azure AD, ADFS, hybrid identity).
• Implement best practices for operational reliability, security, and compliance.
• Provide training for IT administrators on managing AD components, including GPO administration and troubleshooting.
• Develop user guides and documentation for end-users regarding AD-related processes (e.g., password resets, account access).
• Establish change management processes and provide ongoing support, including patches and version upgrades.
• Configure auditing policies, integrate with SIEM solutions, and perform periodic security assessments to ensure compliance with data protection regulations (GDPR, HIPAA, SOX).
• Collaborate with HR, Security, Compliance, and business stakeholders to define provisioning policies, access control, and policy enforcement.
• Maintain regular project communication, reporting, and status updates to ensure alignment with business objectives.

Requirements:

• Knowledge of Windows Server versions (2016, 2019, 2022)
• Proficiency in PowerShell scripting for AD automation.
• Experience with Active Directory Certificate Services (AD CS).
• Familiarity with Group Policy Management Console (GPMC).
• Understanding of DNS, DHCP, and TCP/IP fundamentals.
• Experience with Azure AD, ADFS, and hybrid identity.
• Familiarity with IAM (Identity and Access Management) frameworks.

Infrastructure Requirements:

• Server infrastructure (physical or virtual) for domain controllers.
• Network connectivity across all AD sites.
• Backup and recovery solutions for AD (e.g., Veeam, Windows Backup).
• Security solutions like firewalls and endpoint protection.

Non-Functional / Organizational Requirements:

• Active participation of business and IT stakeholders for requirements, design reviews, and approvals.
• Understanding of organizational unit (OU) structure, business functions, and geographic needs for AD architecture alignment.
• Delivery of training programs and creation of user guides.
• Formal change management process to track AD environment changes.
• Compliance with data protection regulations and securing privileged account information.
• Auditing and logging of critical AD activities integrated with SIEM.
• Periodic security assessments and vulnerability scans.
• Clear project timeline with milestones and deliverables.
• Regular communication and escalation paths for project progress and issue resolution.

Preferred Skills:

• Experience in hybrid AD and cloud identity integration.
• Familiarity with regulatory compliance requirements.
• Experience with project management in AD deployment projects.

Reporting To:

• Sr. Manager, Identity and Access Management Engineering

We offer\*:

• Flexible working format - remote, office-based or flexible
• A competitive salary and good compensation package
• Personalized career growth
• Professional development tools (mentorship program, tech talks and trainings, centers of excellence, and more)
• Active tech communities with regular knowledge sharing
• Education reimbursement
• Memorable anniversary presents
• Corporate events and team buildings
• Other location-specific benefits

\*not applicable for freelancers