AD Engineer L3 - IN

Summary You will join a team of engineers deep in the first phase of complex on-prem to cloud delivery. With deadlines looming, it's all hands to the pump. The second phase moves to a manage and operate mode where you'll be required to deliver highly detailed documentation and in-depth handover to our support teams around the world. Required technical skills Deep understanding and practical experience with Microsoft Active Directory (+8 years), including: • Group Policy configuration & implementation for servers & workstations. • Item-level targeting, scopes, permissions and WMI filtering. • Group Policy Modelling and Analysis. • Security hardening of environments adhering to Microsoft & CIS benchmarks. • Formulating LDAP queries. • AD Sites and replication topology. • Service account administrating, including Managed Service Accounts (MSA). • Advanced Group Policy Management (AGPM). Version Control. • undefined • Experience implementing Distributed File System (DFS). • undefined • Experience implementing Active Directory Federation Services (ADFS). • undefined • Working knowledge of foundational topics, including: TCP/IP, DNS, DHCP, Server Virtualisation & PowerShell. • Strong hands-on experience managing AD-integrated DNS and public DNS records using third-party DNS management platforms such as GoDaddy or equivalent tools. • Proven experience administering and troubleshooting complex Active Directory environments involving multiple domains and multi forests environment. • Hands-on experience with AD–Microsoft Entra ID integration, directory synchronization configuration and customization, synchronization troubleshooting, and resolving identity synchronization issues. • Strong understanding and hands-on experience with Azure-based SSO implementations using SAML 2.0 and OpenID Connect (OIDC) protocols. • Public key infrastructure (PKI), including SSH. Key management and rotation, certificate life cycle management. Stand-alone and AD integrated CA infrastructure. Operating an offline root CA. • The target environment is hosted in Microsoft Azure, therefore, the ability to confidently navigate the Azure Portal is essential. Advantageous skills (In order of preference): AD Migration and Forest Consolidation: Experience using Quest migration tools or equivalent third-party migration solutions for multi-forest consolidation, Active Directory migration, and cross-forest integration will be an added advantage. Azure: • Active Directory (AAD) (Entra): Intune, Management Groups, IAM, Apps, SPNs, etc. • Key vaults. • Storage accounts. • Virtual machine: Creation and management. • DevOps: Pipelines and Boards. • Compute Gallery. • Terraform.· OS Image management automation (Hashicorp Packer). Required soft skills · Self-starter and comfortable taking the lead. · Comfortable working in a fast passed production environment. · Excellent communication skills and comfortable challenging decisions. · Comfortable interfacing with the customer's lead engineers. · Excellent documentation skills with obsessive attention to detail. · Desire and ability to inform and educate others based on your deep technical experiences. 

 About Rackspace Technology Rackspace Technology is the trusted operator of the full enterprise AI stack, from governed private cloud to AI inference and agents in production. From edge to core to cloud, we operate the infrastructure, data layer, and software integration to deliver business outcomes with the predictable cost, reliability, security, and compliance that regulated and mission-critical environments demand. We support customers in more than 120 countries with AI capabilities spanning private cloud, public cloud, applications, data and cyber resilience. More on Rackspace Technology Though we’re all different, Rackers thrive through our connection to a central goal: to be a valued member of a winning team on an inspiring mission. We bring our whole selves to work every day. And we embrace the notion that unique perspectives fuel innovation and enable us to best serve our customers and communities around the globe. We welcome you to apply today and want you to know that we are committed to offering equal employment opportunity without regard to age, color, disability, gender reassignment or identity or expression, genetic information, marital or civil partner status, pregnancy or maternity status, military or veteran status, nationality, ethnic or national origin, race, religion or belief, sexual orientation, or any legally protected characteristic. If you have a disability or special need that requires accommodation, please let us know.