The opportunityWe currently have an opportunity for a Senior Active Directory Technical Specialist to join our IT team based in our Canton, MA; Boston, MA; Farmington, CT or Raleigh, NC offices on a hybrid schedule. The Senior Active Directory Technical Specialist is responsible for installation, configuration and maintenance of Active Directory Domain Controllers, Site Links and Subnets. This role will be responsible for driving improvements of directory services, improving security, making our services work better and more efficiently. Ultimately the focus will be to ensure that the environment is protected and reduce the risk of leveraging AD in a cyber security attack. Candidates should be passionate about delivering a highly secure and stable environment with an eye for continuous improvement. Some of the Senior Active Directory Technical Specialist responsibilities include but are not limited to:
- Supporting AD Services (and Azure Active Directory) at a multi-forest enterprise scale,
- Install, configure and maintain Active Directory Domain Controllers, site links and subnets.
- Design, test deploy and troubleshoot Group policies for Enterprise customers.
- Monitor Active Directory health and proactively fix issues.
- Troubleshoot AD authentication and authorization related issues
- Install, configure and maintain AD Integrated and Non-AD integrated DNS Zones
- Install, Configure and Maintain DFSR and Namespace
- Responsible for Active Directory backup and restore
- Troubleshoot trust related issues
- Monitor and maintain SYSVOL health
- Configure and maintain NTP for Enterprise Infrastructure
- Configure and manage Azure Active Directory (managed domain, MFA, Enterprise App, Registration, Conditional Access Policies, Azure AD Sync issue, B2B, B2C, User and Group Management)
- Troubleshoot related issues from monitoring or highlighted from colleagues outside of team via incidents
- Support during major service outages at AD or business services end help troubleshooting on coordinated major incident calls.
- Supporting application teams to find flaws in their design that would affect resiliency and similar aspects
- Managing and maintaining PKI environment
- Monitor and maintain DHCP
The expertise you bring- 5+ years of experience in supporting Active Directory services in a multi-forest environment with key focus on LDAP, Group Policy
- Experience with Windows Server Operating System (2012/2016/2019/2022) configuration, performance management, troubleshooting on physical and virtual environments.
- Microsoft certification in the Windows Server OS or Active Directory Space a plus
- Insurance industry experience helpful but not required.
- Bachelor's Degree in Computer Science, Information Systems, or equivalent work experience
- Working knowledge on DNS aging and Scavenging
- LDAP / LDAPS integration of customer applications
- Strong knowledge of FSMO roles (Transfer / Seizure)
- Experience with PowerShell; had applied scripting to solve IT Admin challenges.
- Experience on single object / multiple objects restore from AD Recycle bin
- Good understanding and hands on experience of Domain Controllers upgrade process and migrations.
- Experience extending active directory to cloud (Azure / AWS)
- Experience with AWS Cloud Infrastructure management and Directory services a plus
- Experience with Single Sign-On (SSO)/MFA - Ping, Okta, or similar platform
- Hands on experience on Azure AD connect tool, support and troubleshooting.
Our salary ranges are determined by many factors including location, role, experience and skillset of the candidate. The following ranges displayed reflect the target base salary for new hires; however, your recruiter will provide more specific compensation details during the hiring process. The typical base salary range for this position is: $97,000 - $136,000 based on the factors aforementioned. For candidates located in San Francisco, CA; Washington DC; our Massachusetts based offices and the New York City metro area, the base salary range is $122,000 - $142,000. In addition to base salary, full time Intact employees are also eligible for bonus potential and a full range of benefits to include but not limited to:
- Comprehensive medical, dental and vision insurance with no waiting period
- Competitive paid time off programs
- 401(k) savings and annual contributions of up to 12% of annual salary
- Mental health support programs, life and disability insurance, paid parental leave and a variety of additional voluntary benefits
This position will remain posted until a final candidate is selected. Once the role is filled, this job posting will be removed.
