Senior Infrastructure Engineer - Active Directory and Server Domain Migration

Specialist - System Management Job Title Active Directory Domain Migration Job Summary We are seeking a highly skilled and experienced Senior Infrastructure Engineer specializing in Active Directory AD and Server Domain Migrations In this role you will lead the architecture planning and execution of complex domain consolidation and server migration projects You will be responsible for ensuring seamless identity migration minimal business downtime and strict adherence to security and compliance frameworks The ideal candidate will have extensive handson experience with Microsoft Windows Server ecosystems enterprise migration tools and hybrid cloud identity environments Key Responsibilities 1 Migration Strategy Execution Architecture Planning Design test and implement Active Directory migration strategies intraforest and crossforest migrations domain consolidations and greenfield forest deployments Tool Management Configure and operate enterprise migration tools eg Quest Migration ManagerMigrator Pro Binary Tree or Microsoft ADMT to migrate users computers service accounts and security groups FSMO Domain Controller Lifecycle Manage the promotion and demotion of Domain Controllers transfer FSMO roles and handle postmigration metadata cleanup Server Migration Execute Windows Server OS upgrades and migrations eg migrating workloads to Windows Server 20222025 while preserving permissions share configurations and data integrity 2 Active Directory Core Infrastructure Management Identity Directory Services Maintain and optimize AD DS Group Policy Objects GPOs OU structures and Active Directory Sites and Services Core Network Services Manage and troubleshoot DNS resolution replication topologies DHCP and integrated PKICertificate Services during transitional migration states Trust Management Establish configure and troubleshoot secure Forest and Domain trusts across distinct corporate environments 3 Security Hardening Compliance Security Baseline Enforcement Ensure migrated and newly established environments comply with cyber security policies modern TLS defaults and strong cryptographic standards SidHistory Remediation Manage sIDHistory cleaning and ensure proper access control translation during object migration phases Health Validation Perform ongoing directory health checks using tools like dcdiag repadmin and SYSVOL verification via DFSR to address replication or structural errors promptly 4 Collaboration Documentation Technical Writing Produce detailed Standard Operating Procedures SOPs fallbackrollback plans and architectural diagrams CrossFunctional Support Coordinate with network security and cloud engineering teams to ensure application compatibility and minimal impact on enduser authentication Qualifications Technical Skills Education Bachelors degree in Computer Science Information Technology Cyber Security or equivalent practical experience Experience 6 years of dedicated experience in enterprisescale Active Directory administration and complex domain migration projects Technical Proficiencies Operating Systems Deep expertise in Windows Server 2012R2 through Windows Server 20222025 Automation Advanced scripting proficiency in PowerShell for directory manipulation object modifications and automated migration tasks eg MoveADDirectoryServerOperationMasterRole SetADForestMode Migration Utilities Handson experience with Quest Software suites Directory Sync Pro or ADMT Hybrid Identity Preferred Familiarity with Microsoft Entra ID Azure AD Azure AD ConnectCloud Sync and configuring custom B2CB2B identity policies or hybrid joins Soft Skills Strong analytical and troubleshooting mindset under timesensitive deployment windows Exceptional communication skills to convey complex technical risks to project stakeholders Proven ability to work independently during night or weekend maintenance windows