Must have 7+ years of experience in core Active Directory 2 Years exp in Windows 2008 2012 2016 2019 Active Directory working knowledge Installation and configuration of Active Directory domain controllers/ server core. Work closely with desktop and server administrators to define and execute appropriate Group Policy scripting related to directory hierarchy objects and structure. Perform AD server configuration as per customer standard Deployment of MS security hotfixes To perform upgrade of Active Directory environment apply change management process Manage the system properties system policies and services on active directory top level domain structure and to delegate control administration on active directory lower level domain structure Work closely with desktop and server administrators to define and execute appropriate Group Policy scripting related to directory hierarchy objects and structure. ? Continually monitor environment to ensure best practices and Federal guidelines are being followed. ? Generate usage reports of components of AD like LDAP NTLM Kerberos etc. ? Provide point in time audit reports of different types of AD objects. ? Create and maintain support documentation asset inventory and tracking of the enterprise infrastructure. ? Be available to all information technology groups of a large enterprise both within IT operations as well as in other IT divisions to help and facilitate the integration or support of the Active Directory and Microsoft Enterprise Services. ? Configuring Active Directory Site and Services according to Microsoft and industry best practices. ? Test and verify AD Domain Controllers disaster recovery procedures. ? Execute monitoring strategies for monitoring and reporting health of Active Directory components. Vendor coordination to troubleshoot the issue and get it resolve Strong knowledge on AD Architecture and maintenance Installation configuration management and demotion of domain controller and DNS. Knowledge on Active Directory Sites and services Knowledge on LDAP ADLDS Deep experience on DNS DHCP SMTP Knowledge of health check monitoring of Active directory user issue troubleshooting log validation patching Good to have ? Good understanding and administrative knowledge of ADLDS Design implement manage and maintain AD LDS servers Practice of Working with AD LDS Instances. Practice Using AD LDS Administration Tools Managing AD LDS Organizational Units Groups and Users Managing schema updates Management of Active Directory domain controller FSMO roles Managing of Group Policy objects GPO Add remove and configure Active Directory sites sitelinks and subnets Knowledge on Microsoft PKI Technologies SSL Certificates keys etc Knowledge on building Managing Upgrading Certificate Authorities Knowledge of Implementing Managing Upgrading ADFS SSL certification renewal revocation and retire.