MSP - Active Directory & Entra ID - Contract - L2 Engineer

Minimum Experience
4
Maximum Experience
6
Mandatory Skills
Active Directory, Entra ID administration, Windows Server OS, DNS, PKI, authentication concepts, PowerShell scripting ,networking fundamentals and cloud identity concepts
Skill to Evaluate
Active-Directory,-Entra-ID-administration,-Windows-Server-OS,-DNS,-PKI,-authentication-concepts,-PowerShell-scripting-,networking-fundamentals-and-cloud-identity-concepts
Experience
4 to 6 Years
Job Description
4-6 years of hands-on experience in Active Directory and Entra ID administration.
Strong understanding of Windows Server OS, DNS, PKI, and authentication concepts.
Working knowledge of PowerShell scripting for identity and server management.
Familiarity with IAM tools (OKTA, Ping, or similar) is a plus.
Good understanding of networking fundamentals and cloud identity concepts.
Excellent troubleshooting, communication, and documentation skills.
Ability to work independently and collaborate effectively in a team environment.
Preferred Certifications
Microsoft Certified: Windows Server Hybrid Administrator Associate
Microsoft Certified: Identity and Access Administrator (SC-300)
Microsoft Certified: Azure Administrator Associate (AZ-104)
ITIL Foundation Certification (preferred)
Education Qualificaiton
BE
Roles & Responsibilities
Support and maintain enterprise identity and access management services.
The role involves managing day-to-day operations of Active Directory, Entra ID (Azure AD), and related identity services, ensuring availability, security, and compliance across the environment.
The candidate will be experienced in AD/Entra administration, troubleshooting, and automation, with the ability to work independently while collaborating closely with L3 engineers and the Team Lead.
Active Directory Administration
Administer, manage, and support Domain Controllers across multiple domains and forests.
Perform promotion and demotion of domain controllers as required.
Manage domain and forest trusts, and functional levels.
Configure and maintain Active Directory Sites and Services for optimized replication and authentication.
Perform regular AD health checks, database maintenance, and replication remediations.
Manage SYSVOL, Global Catalog servers, FSMO roles, and Windows Time Services.
Build, configure, and troubleshoot Windows domain controllers (physical and virtual).
Ensure vulnerability management and patch compliance for AD infrastructure.
Install and configure support tools and monitoring agents on domain controllers.
Manage Certificate Services and provide advanced support for PKI environments.
Administer user, group, and service accounts in Active Directory.
Manage roaming profiles, folder redirection, and cloud storage access controls (Azure storage accounts).
Hybrid Identity & Entra ID (Azure AD)
Manage Entra Connect / Entra Sync servers.
Manage synchronization rules, process, and resolve sync errors between AD and Entra ID.
Administer Azure roles, Administrative Units, and RBAC in Entra ID.
Manage Entra ID Application Registrations (OIDC and SAML-based).
Manage custom domains, service principals, privileged accounts, and dynamic groups in Entra ID.
Operational Excellence & Support
Act as first point of support for identity-related incidents and service requests.
Troubleshoot and resolve AD/Entra connectivity, authentication, and access issues.
Follow incident, problem, and change management processes.
Document issues, root causes, and resolutions in ticketing systems.
Develop and maintain standard operating procedures (SOPs).
Participate in on-call rotation and after-hours support as needed.
Escalate complex issues to L3 engineers or Team Lead with appropriate diagnostics.
Automation, Reporting & Documentation
Use PowerShell and other scripting tools for routine automation and reporting.
Maintain and update system configurations, health reports, and service dashboards.
Assist in developing automation scripts for account management and environment maintenance.
Ensure technical documentation and knowledge base articles are accurate and up to date.

Requirements