Active Directory Engineer

Job Summary

We are seeking a Senior Active Directory Infrastructure Engineer with deep expertise in Microsoft Active Directory administration to support and enhance enterprise identity infrastructure. The ideal candidate will have extensive experience managing large-scale Active Directory environments, Group Policy, DNS/DHCP, and Windows Server infrastructure. Experience with Citrix Virtual Apps & Desktops (CVAD) and related virtualization technologies is required, while cloud experience is considered a plus.

This role is heavily focused on Active Directory, with Citrix administration as a secondary responsibility.

Active Directory Administration

• Administer and maintain enterprise Active Directory environments across multiple domains and forests.
• Manage Organizational Units (OUs), Group Policy Objects (GPOs), security groups, and user/computer accounts.
• Configure and troubleshoot Active Directory replication, Sites & Services, FSMO roles, and Domain Controllers.
• Manage DNS, DHCP, LDAP, Kerberos, and authentication services.
• Support Active Directory migrations, upgrades, and infrastructure modernization initiatives.
• Implement and maintain Azure AD / Microsoft Entra ID hybrid identity solutions.
• Configure and support RBAC, MFA, ADFS, PKI, and identity management solutions.
• Perform Active Directory health checks, monitoring, performance tuning, and troubleshooting.

Citrix Administration

• Administer and support Citrix Virtual Apps & Desktops (CVAD) environments.
• Manage Citrix DaaS, StoreFront, Delivery Controllers, Citrix Studio, and Director.
• Support Citrix Gateway / NetScaler ADC configurations and authentication policies.
• Manage Machine Creation Services (MCS), Provisioning Services (PVS), and gold image lifecycle.
• Troubleshoot user sessions, published applications, and virtual desktop performance.

Windows Infrastructure

• Administer Windows Server 2016/2019/2022 environments.
• Manage VMware ESXi/vSphere virtual infrastructure supporting Windows workloads.
• Perform server builds, upgrades, patching, and lifecycle management.
• Support disaster recovery, business continuity, backup, and high availability initiatives.

Automation & Operations

• Develop and maintain PowerShell scripts to automate Active Directory and Windows administration tasks.
• Participate in incident management, root cause analysis, change management, and problem resolution.
• Create and maintain technical documentation, operational runbooks, and standard operating procedures.
• Collaborate with infrastructure, security, networking, and application teams to support enterprise operations.

Required Qualifications

• 10+ years of experience administering enterprise Microsoft Active Directory environments.
• Strong hands-on experience with: Active Directory Domains & Forests, Group Policy (GPO), Organizational Units (OU), DNS & DHCP, Active Directory Sites & Services, Domain Controllers, AD Replication, FSMO Roles, LDAP / Kerberos, Azure AD / Microsoft Entra ID, ADFS, PKI / Certificate Services.
• Strong Windows Server administration experience (2016/2019/2022).
• Hands-on experience with PowerShell scripting and automation.
• Experience administering Citrix Virtual Apps & Desktops (CVAD), Citrix DaaS, and Citrix Cloud.
• Experience with Citrix Gateway / NetScaler, StoreFront, Director, Studio, PVS, and MCS.
• Experience supporting enterprise virtualization using VMware ESXi/vSphere.
• Excellent troubleshooting, analytical, and documentation skills.
• Strong communication and stakeholder management skills.

Preferred Qualifications

• Azure Virtual Desktop (AVD) experience.
• AWS infrastructure (EC2) administration.
• Microsoft Intune / MECM (SCCM).
• Terraform or Infrastructure as Code (IaC).
• Experience supporting large enterprise migrations and hybrid cloud environments.
• Knowledge of Zero Trust security principles and Identity & Access Management (IAM).

Preferred Certifications

• Microsoft Certified: Identity and Access Administrator (SC-300)
• Microsoft Certified: Azure Administrator Associate (AZ-104)
• Microsoft Certified: Windows Server Hybrid Administrator
• Citrix CCA-V / CCP-V / CCE-V
• VMware Certified Professional (VCP)

Key Technologies

Identity & Directory Services: Active Directory, Azure AD (Entra ID), Group Policy, DNS, DHCP, LDAP, Kerberos, ADFS, PKI, RBAC, MFA

Citrix: Citrix CVAD, Citrix DaaS, Citrix Cloud, StoreFront, Director, Studio, NetScaler ADC/Gateway, PVS, MCS, WEM, FSLogix

Windows & Virtualization: Windows Server 2016/2019/2022, VMware ESXi, vSphere

Automation: PowerShell, PowerShell DSC

Cloud (Preferred): Azure, AWS EC2

This version mirrors the structure of a typical enterprise JD while reflecting the hiring manager's priorities: Active Directory first, Citrix second, and cloud as a nice-to-have.