San Francisco, CA · On-site
$62.25 - $81.25/hr
Job Role: L3 Active Directory Engineer / AD SME Location: SFO, CA (Hybrid) Type: Fulltime L3 ... Perform AD migration, consolidation, restructuring, and domain/forest trust design. * DNS, DHCP ...
San Francisco, CA · On-site
$62.25 - $81.25/hr
Job Role: L3 Active Directory Engineer / AD SME Location: SFO, CA (Hybrid) Type: Fulltime L3 ... Perform AD migration, consolidation, restructuring, and domain/forest trust design. * DNS, DHCP ...
San Francisco, CA · On-site
$62.25 - $81.25/hr
L3 Engineer / SME - Active Directory (On‑Premise) Role Title: L3 Active Directory Engineer / AD ... Perform AD migration, consolidation, restructuring, and domain/forest trust design. 3. DNS, DHCP ...
Quick apply
San Francisco, CA · On-site
$62.25 - $81.25/hr
L3 Engineer / SME - Active Directory (On‑Premise) Role Title: L3 Active Directory Engineer / AD ... Perform AD migration, consolidation, restructuring, and domain/forest trust design. 3. DNS, DHCP ...
Culver City, CA · On-site
$57.75 - $75.50/hr
Sony Active Directory Engineer Location: Culver City, CA (Onsite 3 times a week Who you are: You are a strong, well-rounded Windows Engineer seeking a new, exciting opportunity. Your greatest areas ...
Quick apply
Culver City, CA · On-site
$57.75 - $75.50/hr
Sony Active Directory Engineer Location: Culver City, CA (Onsite 3 times a week Who you are: You are a strong, well-rounded Windows Engineer seeking a new, exciting opportunity. Your greatest areas ...
Orange, CA · On-site
$56.25 - $73.75/hr
Senior SCCM / Active Directory Engineers Location: Orange County, CA Duration: 6+ Months * Senior SCCM / Active Directory Engineers * candidates must have excellent communication and be willing to ...
Orange, CA · On-site
$56.25 - $73.75/hr
Senior SCCM / Active Directory Engineers Location: Orange County, CA Duration: 6+ Months * Senior SCCM / Active Directory Engineers * candidates must have excellent communication and be willing to ...
San Francisco, CA · On-site
$134K - $185K/yr
... Engineering Management Specialist on the Deloitte Cyber team, you will be responsible for: * Leading Active Directory and identity infrastructure engagements across assessment, design, migration ...
San Francisco, CA · On-site
$134K - $185K/yr
... Engineering Management Specialist on the Deloitte Cyber team, you will be responsible for: * Leading Active Directory and identity infrastructure engagements across assessment, design, migration ...
Costa Mesa, CA · On-site
$122K - $168K/yr
... Engineering Management Specialist on the Deloitte Cyber team, you will be responsible for: * Leading Active Directory and identity infrastructure engagements across assessment, design, migration ...
Costa Mesa, CA · On-site
$122K - $168K/yr
... Engineering Management Specialist on the Deloitte Cyber team, you will be responsible for: * Leading Active Directory and identity infrastructure engagements across assessment, design, migration ...
Los Angeles, CA · On-site
$123K - $169K/yr
... Engineering Management Specialist on the Deloitte Cyber team, you will be responsible for: * Leading Active Directory and identity infrastructure engagements across assessment, design, migration ...
Los Angeles, CA · On-site
$123K - $169K/yr
... Engineering Management Specialist on the Deloitte Cyber team, you will be responsible for: * Leading Active Directory and identity infrastructure engagements across assessment, design, migration ...
Inglewood, CA · On-site
$55 - $71.75/hr
Schedule: Full Time What You'll Do Job Profile Summary The Systems Engineer (Active Directory & Microsoft 365) supports and enhances the organization's identity and access management infrastructure ...
Inglewood, CA · On-site
$55 - $71.75/hr
Schedule: Full Time What You'll Do Job Profile Summary The Systems Engineer (Active Directory & Microsoft 365) supports and enhances the organization's identity and access management infrastructure ...
Downey, CA · On-site
Active Directory Consultant Downey, CA 12+ months Required Skills: The AD Systems Administrator ... Requires the possession of a bachelor's degree in an IT-related or Engineering field or a closely ...
Downey, CA · On-site
Active Directory Consultant Downey, CA 12+ months Required Skills: The AD Systems Administrator ... Requires the possession of a bachelor's degree in an IT-related or Engineering field or a closely ...
$55 - $71.75/hr
Schedule: Full Time What You'll Do Job Profile Summary The Systems Engineer (Active Directory & Microsoft 365) supports and enhances the organization's identity and access management infrastructure ...
$55 - $71.75/hr
Schedule: Full Time What You'll Do Job Profile Summary The Systems Engineer (Active Directory & Microsoft 365) supports and enhances the organization's identity and access management infrastructure ...
Newport Beach, CA · Hybrid
$56.50 - $74/hr
Serve as an Active Directory and Entra ID Operations Engineer for the IAM department * Deliver and support the multi-year plan incorporating on-premise, cloud-based, and hybrid directory services ...
Newport Beach, CA · Hybrid
$56.50 - $74/hr
Serve as an Active Directory and Entra ID Operations Engineer for the IAM department * Deliver and support the multi-year plan incorporating on-premise, cloud-based, and hybrid directory services ...
Newport Beach, CA · On-site
$56.50 - $74/hr
Serve as an Active Directory and Entra ID Operations Engineer for the IAM department * Deliver and support the multi-year plan incorporating on-premise, cloud-based, and hybrid directory services ...
Newport Beach, CA · On-site
$56.50 - $74/hr
Serve as an Active Directory and Entra ID Operations Engineer for the IAM department * Deliver and support the multi-year plan incorporating on-premise, cloud-based, and hybrid directory services ...
Newport Beach, CA · Hybrid
$56.50 - $74/hr
Serve as an Active Directory and Entra ID Operations Engineer for the IAM department * Deliver and support the multi-year plan incorporating on-premise, cloud-based, and hybrid directory services ...
Newport Beach, CA · Hybrid
$56.50 - $74/hr
Serve as an Active Directory and Entra ID Operations Engineer for the IAM department * Deliver and support the multi-year plan incorporating on-premise, cloud-based, and hybrid directory services ...
Culver City, CA · On-site
$57.75 - $75.50/hr
Seeking a highly skilled Subject Matter Expert - Active Directory & Entra ID Services to work along a team of engineers responsible for delivering and supporting enterprise-level identity and access ...
Quick apply
Culver City, CA · On-site
$57.75 - $75.50/hr
Seeking a highly skilled Subject Matter Expert - Active Directory & Entra ID Services to work along a team of engineers responsible for delivering and supporting enterprise-level identity and access ...
We are a multiple service provider in the Information Technology, Scientific, Engineering and ... Instant Messaging Flow and troubleshooting Migration Support: * Incident Reporting * Issues ...
We are a multiple service provider in the Information Technology, Scientific, Engineering and ... Instant Messaging Flow and troubleshooting Migration Support: * Incident Reporting * Issues ...
We are a multiple service provider in the Information Technology, Scientific, Engineering and ... Instant Messaging Flow and troubleshooting Migration Support: * Incident Reporting * Issues ...
We are a multiple service provider in the Information Technology, Scientific, Engineering and ... Instant Messaging Flow and troubleshooting Migration Support: * Incident Reporting * Issues ...
Plan, schedule, and execute device migration waves from on-premises Active Directory / hybrid ... Entra ID Engineering Support (Primary Focus):Provide engineering-level administration and ...
Quick apply
Plan, schedule, and execute device migration waves from on-premises Active Directory / hybrid ... Entra ID Engineering Support (Primary Focus):Provide engineering-level administration and ...
Irvine, CA · On-site
$127K - $216K/yr
Plan, schedule, and execute device migration waves from on-premises Active Directory / hybrid ... Entra ID Engineering Support (Primary Focus): * Provide engineering-level administration and ...
Irvine, CA · On-site
$127K - $216K/yr
Plan, schedule, and execute device migration waves from on-premises Active Directory / hybrid ... Entra ID Engineering Support (Primary Focus): * Provide engineering-level administration and ...
Plan, schedule, and execute device migration waves from on-premises Active Directory / hybrid ... Entra ID Engineering Support (Primary Focus): * Provide engineering-level administration and ...
Plan, schedule, and execute device migration waves from on-premises Active Directory / hybrid ... Entra ID Engineering Support (Primary Focus): * Provide engineering-level administration and ...
Rancho Cordova, CA · On-site
... Active Directory migration for the Department of Human Assistance. Candidate should have the ability to: * Operate, maintain, and perform repairs on information technology equipment and software.
Quick apply
Rancho Cordova, CA · On-site
... Active Directory migration for the Department of Human Assistance. Candidate should have the ability to: * Operate, maintain, and perform repairs on information technology equipment and software.
| Aspect | Active Directory Migration Engineer | Active Directory Administrator |
|---|---|---|
| Primary Focus | Planning and executing Active Directory migrations and upgrades | Managing and maintaining Active Directory environments daily |
| Required Skills | Migration tools, scripting, troubleshooting migration issues | User account management, group policies, security settings |
| Certifications | Microsoft Certified: Windows Server, MCSE | Microsoft Certified: Windows Server, MCSA |
| Work Environment | Project-based, migration-specific tasks | Operational, ongoing management of AD |
While both roles require strong Windows Server and Active Directory knowledge, the Active Directory Migration Engineer specializes in migration projects, whereas the Active Directory Administrator focuses on daily management and support of AD environments.
$62.25 - $81.25/hr
Other
Posted 19 days ago
Job Role: L3 Active Directory Engineer / AD SME
Location: SFO, CA (Hybrid)
Type: Fulltime
Job Description: L3 Engineer / SME Active Directory (OnPremise)
Experience: 7 12+ years
Domain: Identity & Access Management, Windows Infrastructure
Role Summary
We are looking for a highly skilled L3 Active Directory (OnPremise) SME with deep experience in designing, managing, and troubleshooting complex AD environments. The candidate will be the highest escalation point for AD issues, lead architectural improvements, perform RCA, and ensure AD security, availability, and performance in a large enterprise environment.
Key Responsibilities
Serve as the toptier escalation for Active Directory and Windows infrastructure issues.
Troubleshoot complex authentication, replication, DNS, GPO, policy processing, and trust issues.
Perform advanced RCA, log analysis, and performance debugging.
Develop L3 SOPs, KB articles, scripts, and automation for operations teams.
Manage and maintain large multidomain, multiforest onprem AD environments.
Oversee FSMO roles, domain controllers (DC health), AD sites, replication topology.
Install, upgrade, and harden domain controllers (physical/virtual).
Implement AD schema updates, forest/domain functional level upgrades.
Perform AD migration, consolidation, restructuring, and domain/forest trust design.
Troubleshoot AD-integrated DNS issues (zones, scavenging, forwarding, delegation).
Manage and secure DHCP scopes, reservations, failover.
Deep understanding of Kerberos, NTLM, LDAP, LDAPS, SPNs, tickets, token bloat.
Ensure GPO performance tuning, inheritance control, WMI filters, controlled rollouts.
Implement AD security baselines, CIS benchmarks, and Microsoft security best practices.
Periodically audit domain controllers, replication, delegations, privileged groups.
Manage tiered admin model, least privilege, JustInTime (JIT) & JustEnoughAdministration (JEA).
Enforce password policies, PAM/Privileged Identity controls, and secure service account management.
Perform logs and event analysis through SIEM (Splunk, Sentinel, QRadar).
Build and validate disaster recovery procedures for AD, DNS, and DHCP.
Maintain backup/restore strategies using tools like AD Recycle Bin, Authoritative Restore, System State, VM snapshots.
Ensure site resiliency, replication health, and multisite availability.
Automate AD operations using PowerShell (mandatory).
Build scripts for:
User provisioning/deprovisioning
Group management
GPO backup/restore
ACL/permissions
Health monitoring & reporting
Expertise integrating AD with:
ADFS
Azure AD Connect (Sync rules, writeback, filtering)
SSO solutions
LDAPbased applications
PKI/Certification Services
Understand hybrid identity dependencies (even though this role is onprem focused).
Required Skills & Qualifications
7 12+ years handson experience in enterprise Active Directory environments.
Deep knowledge of:
AD architecture, design & security
DNS, DHCP, Sites & Services
Kerberos, LDAP, GPO, trusts, replication
Experience troubleshooting large, distributed Windows Server infrastructures.
Strong PowerShell automation skills.
Experience implementing AD hardening, security baselines, RBAC delegation.
Knowledge of backup/restore and DR strategies for domain controllers.
Strong understanding of networking fundamentals (TCP/IP, firewall rules, ports).
Preferred Skills
Microsoft certifications (AZ800, AZ801, MS100/101, SC300, MCSA/MCSE).
Experience with Azure AD and hybrid identity models.
Experience with IAM/PAM tools (Delinea, CyberArk, BeyondTrust).
Familiarity with virtualization (VMware/HyperV).
Experience with enterprise SIEM and security monitoring tools.
Sourced by ZipRecruiter
It services
10,000+ Employees
Sunnyvale, CA, US
