LEAD ADMINISTRATOR L1

Senior Active Directory Engineer

Infrastructure Engineering and Design

Position Summary

We are seeking an experienced and motivated Senior Active Directory Engineer to join the Infrastructure Engineering and Design team. This role requires strong expertise in identity and access services, Microsoft Active Directory Domain Services (AD DS), Microsoft Entra ID, federation, directory synchronization, Group Policy, authentication, and related Windows Server technologies. The engineer will translate business, security, and technical requirements into reliable, supportable, and deployable solutions across on-premises and cloud-connected identity environments.

The successful candidate will partner with Infrastructure, Security, Server Engineering, subsidiary technology teams, and other stakeholders. The role may provide technical leadership for focused project efforts and must effectively manage multiple concurrent priorities in a highly matrixed organization.

Primary Responsibilities

Directory Services Engineering and Operations

Provide enterprise operational and engineering support for Microsoft Active Directory and Microsoft Entra ID environments.

Design, implement, maintain, and document Active Directory forests, domains, organizational units, sites, subnets, domain controllers, and replication topology.

Monitor and assess the health, availability, capacity, performance, and configuration of directory servers and supporting services.

Troubleshoot complex replication, domain controller location, name resolution, federation, authentication, authorization, and directory synchronization issues.

Monitor and troubleshoot Kerberos authentication, including service principal name, delegation, ticketing, and time-synchronization dependencies.

Group Policy, Privileged Access, and Security

Partner with Server Engineering teams to validate and verify Group Policy settings and their intended outcomes.

Administer Group Policy lifecycle controls in Advanced Group Policy Management (AGPM), including policy check-in, approval, deployment, and production locking.

Support group managed service accounts (gMSAs), managed service accounts (MSAs), service identities, and related Active Directory configurations.

Collaborate extensively with Security Engineering teams to identify and remediate privilege-escalation paths, chainable vulnerabilities, and other directory security risks.

Apply least-privilege, separation-of-duties, privileged-access, and Tier 0 security principles to the administration of directory services.

Design, maintain, and execute Active Directory backup, recovery, and disaster recovery procedures.

Validate directory service resiliency through documented recovery testing and remediation of identified gaps.

Use monitoring, metrics, event data, and diagnostic tools to identify service degradation and drive preventive improvements.

Capture and analyze server memory dumps when required to troubleshoot complex Windows Server or directory service issues.

Automate repeatable administration, validation, reporting, and operational tasks through scripting and available management interfaces.

Perform other Windows Server, Active Directory, Microsoft Entra ID, AD FS, and identity infrastructure responsibilities as needed.

Microsoft Entra ID, Synchronization, and Federation

Manage and deliver Microsoft Entra Connect services, including synchronization health, configuration, troubleshooting, and lifecycle maintenance.

Administer Active Directory Federation Services (AD FS) and Web Application Proxy (WAP) infrastructure.

Manage AD FS and WAP certificates, including expiration monitoring, renewal coordination, deployment, and validation.

Partner with application and security teams to implement and maintain relying party trusts, claims, and related federation integrations.

Work with subsidiary Active Directory teams to consolidate, standardize, and integrate directory environments.

Required Experience and Qualifications

Experience managing enterprise identity and access management operations.

Strong knowledge of Microsoft Entra ID tenant environments and traditional on-premises Active Directory configurations.

Hands-on experience supporting Active Directory Domain Services, Microsoft Entra Connect, AD FS, WAP, Kerberos, Group Policy, and enterprise authentication services.

Experience troubleshooting complex directory, synchronization, federation, replication, and authentication problems with minimal guidance.

Knowledge of scripting and data analysis using PowerShell, SQL, Microsoft Access, Microsoft Excel, and data-mapping techniques.

Experience designing and executing Active Directory backup and recovery processes.

Experience capturing server memory dumps for advanced troubleshooting.

Excellent analytical skills, attention to detail, and ability to translate technical findings into clear actions.

Excellent written, verbal, and presentation skills, including proficiency with Microsoft PowerPoint and Excel.

Ability to prioritize work independently and provide clear, documented status updates and metrics to management.

Ability to learn and adapt quickly to new concepts, capabilities, tools, and changing business requirements.

Ability to pass a federal clearance or background check to support dedicated United States Government environments.

Mandatory Skills: Microsoft Active Directory Admin.

Experience: 5-8 Years.

The expected compensation for this role ranges from $60,000 to $135,000.

Final compensation will depend on various factors, including your geographical location, minimum wage obligations, skills, and relevant experience. Based on the position, the role is also eligible for Wipro's standard benefits including a full range of medical and dental benefits options, disability insurance, paid time off (inclusive of sick leave), other paid and unpaid leave options.

Applicants are advised that employment in some roles may be conditioned on successful completion of a post-offer drug screening, subject to applicable state law.

Wipro provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state, or local laws. Applications from veterans and people with disabilities are explicitly welcome.

Reinvent your world. We are building a modern Wipro. We are an end-to-end digital transformation partner with the boldest ambitions. To realize them, we need people inspired by reinvention. Of yourself, your career, and your skills. We want to see the constant evolution of our business and our industry. It has always been in our DNA - as the world around us changes, so do we. Join a business powered by purpose and a place that empowers you to design your own reinvention.