SME Active Directory Service Interfaces

Job description

We are seeking an experienced Senior Active Directory Engineer / SME with approximately 10 years of experience to design, administer, secure, and optimize enterprise identity and directory services. The role will provide L3/SME-level support for complex Active Directory environments and take technical ownership of Active Directory Domain Services, Group Policy, DNS, authentication, replication, domain controllers, and hybrid identity services. The ideal candidate should have extensive hands-on experience with Microsoft Active Directory, Windows Server, PowerShell, Microsoft Entra ID, hybrid identity, security hardening, and identity lifecycle management. The role will also contribute to architecture decisions, migrations, automation, major incident resolution, security remediation, and continuous improvement of directory services. Key Responsibilities Provide L3/SME-level administration and technical support for enterprise Microsoft Active Directory environments. • Manage and maintain Active Directory Domain Services (AD DS), including forests, domains, domain controllers, sites, trusts, Organizational Units, users, computers, and security groups. • Design, implement, review, and troubleshoot Group Policy Objects (GPOs) across enterprise environments. • Monitor and troubleshoot Active Directory replication, authentication, DNS, domain controller health, SYSVOL, trusts, and directory-service performance. • Support and optimize hybrid identity environments, including integration between on-premises Active Directory and Microsoft Entra ID. • Provide technical leadership for Active Directory migrations, domain consolidations, upgrades, domain controller deployments, decommissioning, and infrastructure modernization. • Develop and maintain PowerShell automation for administration, health monitoring, reporting, account management, bulk operations, and repetitive operational activities. • Strengthen Active Directory security through least-privilege access, privileged account controls, security hardening, service-account governance, stale-account remediation, and periodic access reviews. • Troubleshoot complex authentication issues involving technologies such as Kerberos, NTLM, LDAP/LDAPS, DNS, and Windows authentication. • Lead technical investigation and root cause analysis for major incidents and recurring directory-service problems, ensuring corrective and preventive actions are documented. • Perform regular Active Directory health checks, capacity reviews, vulnerability remediation, and configuration reviews. • Work closely with Cybersecurity, IAM, Cloud, Windows Server, Network, Application, Service Desk, and Endpoint Management teams to resolve cross-platform identity issues. • Support audit and compliance requirements by providing evidence related to privileged access, account lifecycle, group memberships, authentication controls, and administrative activities. • Review complex changes and provide technical guidance to junior engineers during implementation, troubleshooting, and major incidents. • Develop and maintain technical documentation, architecture diagrams, SOPs, operational runbooks, troubleshooting guides, and knowledge articles. • Identify opportunities for automation, standardization, security improvement, and operational efficiency across directory services. • Participate in disaster recovery and business continuity exercises relating to identity and directory infrastructure. Skill Requirements Extensive hands-on expertise in Microsoft Active Directory Domain Services (AD DS). • Strong knowledge of Windows Server and enterprise domain environments. • Advanced understanding of AD forests, domains, trusts, sites, subnets, OUs, domain controllers, FSMO roles, users, groups, and computer objects. • Strong knowledge of Group Policy design, administration, security, and troubleshooting. • Advanced troubleshooting capability across Active Directory replication, DNS, authentication, trusts, and domain controller issues. • Strong understanding of Kerberos, NTLM, LDAP, LDAPS, and Windows authentication mechanisms. • Hands-on experience with Microsoft Entra ID and hybrid identity architectures. • Knowledge of Microsoft Entra Connect / Cloud Sync and identity synchronization concepts. • Strong PowerShell scripting and automation skills. • Good knowledge of Privileged Access Management, Role-Based Access Control (RBAC), least privilege, service accounts, and identity security principles. • Experience performing Active Directory migrations, upgrades, consolidation, and domain controller lifecycle activities. • Understanding of Active Directory security hardening and vulnerability remediation. • Experience with monitoring, auditing, and reporting solutions for Active Directory environments. • Familiarity with enterprise ITSM solutions such as ServiceNow and ITIL-based Incident, Problem, Request, and Change Management processes. • Working understanding of disaster recovery, backup, restoration, and business continuity principles for directory services. Other Requirement : • Excellent analytical and advanced troubleshooting skills. • Strong capability in problem management and root cause analysis. • Ability to handle critical incidents and provide technical leadership during major service disruptions. • Strong stakeholder-management and communication skills. • Ability to translate complex technical issues into clear updates for management and non-technical stakeholders. • Experience mentoring and providing technical guidance to L1/L2 engineers and infrastructure operations teams. • Strong documentation and knowledge-management capabilities. • Ability to manage multiple operational, security, change, and project priorities in a global enterprise environment. • Strong focus on security, compliance, service availability, and operational excellence. Other Requirements NA Apply now Information at a Glance Why HCLTech? At HCLTech, you'll supercharge your potential. You'll find your career. And you'll find your spark. All at a place that knows that helping its customers stay on top starts by putting its people first. HCLTech is a global technology company, home to more than 230,000 people across 60 countries, delivering industry-leading capabilities centered around digital, engineering, cloud and AI, powered by a broad portfolio of technology services and products. We work with clients across all major verticals, providing industry solutions for Financial Services, Manufacturing, Life Sciences and Healthcare, Technology and Services, Telecom and Media, Retail and CPG, and Public Services. Consolidated revenues as of 12 months ending September 2026 totaled $14.8 billion. Disclaimer Privacy Statement Terms of use Sitemap Raise a Grievance We use cookies on our site. Please read more about cookies policy here. Opens in a new tab. Opens in a new tab. Opens in a new tab. Opens in a new tab. Opens in a new tab. Opens in a new tab. Copyright © 2026 HCL Technologies Limited Cookie Consent Manager When you visit any website, it may store or retrieve information on your browser, mostly in the form of cookies. Because we respect your right to privacy, you can choose not to allow some types of cookies. However, blocking some types of cookies may impact your experience of the site and the services we are able to offer. Required Cookies These cookies are required to use this website and can't be turned off. Required Cookies Required Cookies Provider Description Enabled SAP as service provider We use the following session cookies, which are all required to enable the website to function: "route" is used for session stickiness "careerSiteCompanyId" is used to send the request to the correct data center "JSESSIONID" is placed on the visitor's device during the session so the server can identify the visitor "Load balancer cookie" (actual cookie name may vary) prevents a visitor from bouncing from one instance to another Cookies from provider SAPasserviceprovider are required a