Senior Administrator Active Directory Service Interfaces

Job description

We are seeking an experienced Active Directory Administrator/Engineer with approximately 6 years of experience to manage, support, and maintain enterprise identity and directory services. The role will be responsible for the administration, monitoring, troubleshooting, and security of Microsoft Active Directory, including user and group management, Group Policy, DNS, authentication, domain controllers, and access management. The ideal candidate should have strong hands-on experience in enterprise Active Directory environments, Windows Server, PowerShell automation, Microsoft Entra ID, and hybrid identity, along with a good understanding of ITIL-based operational processes and security best practices. Key Responsibilities Administer and support Microsoft Active Directory Domain Services (AD DS), including users, groups, computers, Organizational Units (OUs), and security groups. • Manage user identity lifecycle activities, including account creation, modification, access changes, password-related issues, account disabling, and deprovisioning. • Configure, maintain, and troubleshoot Group Policy Objects (GPOs) and ensure appropriate application of security and configuration policies. • Monitor and troubleshoot domain controllers, AD replication, authentication, DNS, trusts, and related directory services. • Support Microsoft Entra ID and hybrid identity environments, including synchronization-related issues between on-premises Active Directory and cloud identity services. • Perform Active Directory health checks and proactively identify issues affecting authentication, replication, directory availability, and performance. • Use PowerShell to automate routine administration, reporting, health checks, and bulk identity-management activities. • Support security initiatives related to privileged access, least-privilege principles, account governance, access reviews, and inactive/stale account management. • Investigate and resolve L2/L3 incidents and service requests related to login failures, account lockouts, access issues, Group Policy, DNS, and authentication. • Participate in Active Directory upgrades, migrations, domain controller maintenance, patching, and infrastructure improvement activities. • Maintain technical documentation, operational procedures, knowledge articles, and configuration records. • Work closely with Service Desk, Windows/Server, Network, Security, Cloud, and Application teams to resolve identity and access-related issues. • Support incident, problem, change, and request management activities in accordance with established ITIL processes. • Participate in audits and provide required evidence related to user accounts, privileged access, group membership, and directory controls. Skill Requirements Strong hands-on experience with Microsoft Active Directory Domain Services (AD DS). • Strong knowledge of Windows Server administration and Active Directory architecture. • Good understanding of domains, forests, trusts, sites, subnets, OUs, users, computers, and security groups. • Strong knowledge of Group Policy administration and troubleshooting. • Good understanding of DNS, particularly its relationship with Active Directory. • Experience troubleshooting AD replication and authentication issues. • Hands-on experience with PowerShell scripting and automation for Active Directory administration. • Working knowledge of Microsoft Entra ID and hybrid identity environments. • Understanding of authentication technologies and protocols such as Kerberos, NTLM, LDAP, and LDAPS. • Knowledge of Role-Based Access Control (RBAC), least privilege, privileged accounts, and identity security principles. • Familiarity with Microsoft Entra Connect / Cloud Sync in hybrid environments is desirable. • Experience with enterprise ITSM platforms such as ServiceNow for incident, request, problem, and change management. • Good understanding of ITIL practices, SLA-driven support, and enterprise change-control processes. • Familiarity with monitoring, reporting, auditing, and security tools used for identity and directory services. Other Requirements Strong analytical and troubleshooting capabilities. • Ability to perform root cause analysis for recurring Active Directory and authentication issues. • Strong attention to security, compliance, and access-control requirements. • Good written and verbal communication skills. • Ability to work effectively with global infrastructure, cloud, cybersecurity, application, and Service Desk teams. • Strong documentation and knowledge-management skills. • Ability to manage multiple incidents, requests, changes, and project activities based on business priority. • Ability to participate in major incident resolution and communicate technical issues clearly to both technical and non-technical stakeholders. Apply now Information at a Glance Why HCLTech? At HCLTech, you'll supercharge your potential. You'll find your career. And you'll find your spark. All at a place that knows that helping its customers stay on top starts by putting its people first. HCLTech is a global technology company, home to more than 230,000 people across 60 countries, delivering industry-leading capabilities centered around digital, engineering, cloud and AI, powered by a broad portfolio of technology services and products. We work with clients across all major verticals, providing industry solutions for Financial Services, Manufacturing, Life Sciences and Healthcare, Technology and Services, Telecom and Media, Retail and CPG, and Public Services. Consolidated revenues as of 12 months ending September 2026 totaled $14.8 billion. Disclaimer Privacy Statement Terms of use Sitemap Raise a Grievance We use cookies on our site. Please read more about cookies policy here. Opens in a new tab. Opens in a new tab. Opens in a new tab. Opens in a new tab. Opens in a new tab. Opens in a new tab. Copyright © 2026 HCL Technologies Limited Cookie Consent Manager When you visit any website, it may store or retrieve information on your browser, mostly in the form of cookies. Because we respect your right to privacy, you can choose not to allow some types of cookies. However, blocking some types of cookies may impact your experience of the site and the services we are able to offer. Required Cookies These cookies are required to use this website and can't be turned off. Required Cookies Required Cookies Provider Description Enabled SAP as service provider We use the following session cookies, which are all required to enable the website to function: "route" is used for session stickiness "careerSiteCompanyId" is used to send the request to the correct data center "JSESSIONID" is placed on the visitor's device during the session so the server can identify the visitor "Load balancer cookie" (actual cookie name may vary) prevents a visitor from bouncing from one instance to another Cookies from provider SAPasserviceprovider are required and cannot be turned off Functional Cookies These cookies provide a better customer experience on this site, such as by remembering your login details, optimizing video performance, or providing us with information about how our site is used. You may freely choose to accept or decline these cookies at any time. Note that certain functionalities that these third-parties make available may be impacted if you do not accept these cookies. Consent to all Functional Cookies Functional Cookies Provider Description Enabled Vimeo Vimeo is a video hosting, sharing, and services platform focused on the delivery of video. Opting out of Vimeo cookies will disable your ability to watch or interact with Vimeo videos. Cookie Policy Privacy Policy Terms and Conditions Consent to cookies from provider Vimeo YouTube YouTube is a video-sharing service where users can create their own profile, upload videos, watch, like, and comment on videos. Opting out of YouTube cookies will disable your ability to watch or interact with YouTube videos. Cookie Policy Privacy Po