Active Directory Administrator/Engineer

About This Opportunity

CTI Staffing is partnering with a leading global technology and media organization to find an Active Directory Administrator/Engineer for their IT Infrastructure team based in New York, NY (onsite, multiple Manhattan office locations).

This team manages the directory services backbone supporting thousands of users and devices across the organization. You'll own critical infrastructure that every other IT and security function depends on, with real visibility and ownership from day one.

What You'll Do

• Design, deploy, and manage Active Directory infrastructure across domains, forests, and trust relationships
  
• Administer user/computer accounts, group policies, organizational units, and security groups
  
• Implement AD security best practices and compliance standards
  
• Manage identity and access management (IAM) solutions and directory synchronization
  
• Monitor AD performance, health, and replication across multiple sites
  
• Troubleshoot and resolve complex AD issues and escalations
  
• Collaborate with network, security, and application teams on integration
  
• Document configurations and maintain technical runbooks
  

Requirements

What You Bring

Must-Have:

• 5+ years hands-on experience administering Active Directory in enterprise environments
  
• Strong knowledge of AD architecture, replication, and group policy management
  
• Experience with Windows Server (2016, 2019, 2022 or newer)
  
• Proficiency in PowerShell scripting for automation and administration
  
• Working knowledge of DNS, DHCP, and core network protocols
  
• Experience with directory synchronization tools (Azure AD Connect, Okta, or similar)
  
• Understanding of least-privilege access and compliance principles
  
• Strong troubleshooting, communication, and documentation skills
  
• Able to work fully onsite in New York, NY, across multiple office locations
  

Nice-to-Have:

• Microsoft Certified: Enterprise Administrator Expert or similar advanced certification
  
• Hybrid cloud identity experience (Azure AD/Entra ID)
  
• Knowledge of LDAP, Kerberos, and SAML
  
• Experience with privileged access management (PAM) solutions
  
• Background in finance, healthcare, or other regulated industries
  

Technical Environment:

• Windows Server, Active Directory, Group Policy, PowerShell, Azure AD Connect/Entra ID, DNS/DHCP, LDAP/Kerberos/SAML
  

What Success Looks Like:

• Stable, well-documented AD environment with clean multi-site replication
  
• Demonstrated ownership of escalations without client-side hand-holding
  
• Strong cross-team collaboration with network and security functions