The Opportunity: The
Engineer II role is responsible for the administration, maintenance, and ongoing support of the Microsoft Active Directory environment within Ensemble Health Partners (EHP). This includes design, implementation, upgrades, troubleshooting, and documentation of Active Directory and related services. This role supports day-to-day AD operations, including provisioning, scripting, monitoring, and maintenance. The Engineer II will analyze user and business requirements and develop solutions to enhance and improve existing systems. The role also includes support of AD-integrated services such as DNS and Group Policy.
Key responsibilities include:- Managing and maintaining Active Directory, including domains, trusts, replication, schema, and sites/services
- Supporting Azure Active Directory (Microsoft Entra ID) and hybrid environments
- Creating and managing Group Policy Objects (GPOs) and enforcing AD security best practices
- Troubleshooting and resolving complex AD-related issues
- Developing automation using PowerShell and/or Windows scripting
- Supporting authentication and authorization processes
- Managing supporting services such as DNS, PKI/Certificate Services, and backup/recovery
- Participating in project planning, including risk assessments, solution design, and implementation tracking
- Providing Tier III support for advanced system issues and partnering with cross-functional IT teams
- Offering guidance and support to less experienced team members
- This role requires strong experience with Active Directory and domain controller environments, along with a solid understanding of enterprise identity and access management. Occasional after-hours and weekend support may be required.
Job Duties & Responsibilities- Manage and maintain Windows and Linux server environments, ensuring systems are stable, secure, and operating efficiently
- Administer and support Active Directory and Microsoft Entra ID (Azure AD), including DNS, Group Policy, AD Sites and Services, domain/forest trusts, PKI/Certificate Services, and user/computer/group provisioning
- Apply industry best practices to maintain and enhance AD security, performance, and reliability; implement updates, patches, and upgrades as needed
- Support and maintain associated technologies and third-party tools; evaluate and recommend improvements to increase efficiency and automation
- Develop and maintain scripts (primarily PowerShell) to automate routine tasks and improve operational effectiveness
- Create and maintain clear, accurate documentation, including procedures, troubleshooting guides, and training materials
- Partner with Security teams to remediate findings from audits and assessments; perform AD-related security reviews and implement recommended controls (e.g., HITRUST and other standards)
- Provide customer support by collaborating with internal users and IT teams to resolve issues, answer questions, and support planned or unplanned changes
- Lead and support technical projects, including research, planning, risk assessment, implementation, and on-time delivery
- Provide technical guidance and mentorship to less experienced team members
- Perform other duties as assigned
Knowledge, Skills & Abilities- Strong knowledge of Active Directory and Microsoft Entra ID (Azure AD)
- Experience with Linux system administration (virtual environments and associated technologies)
- Familiarity with DNS, Group Policy, and related AD services
- Strong verbal and written communication skills across technical and non-technical audiences
- Ability to provide a high level of customer service
- Strong analytical and problem-solving skills with attention to detail
- Ability to manage multiple priorities and work effectively in a fast-paced environment
Requirements- Bachelor's degree or equivalent experience
- 5+ years of experience in Windows and Linux system administration
- 3+ years of experience supporting Microsoft Entra ID (Azure AD)
- Experience with scripting languages such as PowerShell, Bash, JSON, or Python
Preferred- Microsoft Active Directory or Azure certifications
- Experience managing VPNs, firewalls, and/or ServiceNow
- Experience with multiple Linux distributions (e.g., Ubuntu, RHEL, Arch, NixOS)
Additional Information- This position pays between $84,000 - 126,000 based on experience and geographical location.
- Must be inquisitive and demonstrate openness to innovation including AI to explore better processes and ways to alleviate friction and improve patient and client experiences.
- This is a remote position; however, candidates must be willing and able to travel to and work onsite at client, temporary, or corporate office locations as business needs require.
#LI-RL1
#LI-REMOTE
