Job description

Job :

About the position

As part of strengthening our Identity & Access Management team, we are looking for a Level 2 (L2) Active Directory Administrator to ensure the operation, administration, and maintenance of Active Directory services.

You will play a key role in the daily management of the AD environment, while applying the architecture, security, and governance standards defined by the Level 3 (L3) teams.

Your main responsibilities

Active Directory Administration

• Manage the lifecycle of Active Directory objects (users, groups, computers).
• Administer group memberships, including sensitive and privileged groups.
• Ensure compliance with naming conventions, directory consistency, and cleanup operations.
• Execute standard requests via ITSM tools.
• Apply validated permissions, policies, and workflows.

Operational Management of GPOs

• Create, modify, delete, and link Group Policies (GPOs).
• Monitor and validate their correct application on workstations.
• Ensure the operational consistency of GPOs.
• Perform diagnostics and resolution of common incidents related to GPOs.
• Implement deployments approved by L3 teams.

Operation of Tier 0 environments

• Administer domain controllers, DNS, PKI, and Entra ID Connect in compliance with security rules.
• Perform system updates, health checks, service restarts, and log analysis.
• Monitor the performance and availability of Domain Controllers.
• Execute backup and restore operations.
• Participate in delegated DNS administration operations.

Incident Management and Level 2 Support

• Resolve incidents related to:
o authentication and account lockouts;
o group membership propagation;
o DNS issues;
o common AD replications;
o GPO incidents;
o Entra ID Connect synchronizations;
o domain join problems;
RODC Infrastructures

• Perform root cause analysis and escalate complex incidents to L3 teams.

Compliance, Security, and Governance

• Ensure compliance with IAM governance rules and change procedures.
• Ensure adherence to security principles, separation of privileges, and Tier 0 access.
• Document interventions, incidents, and changes made.
• Contribute to the continuous improvement of operational procedures.
 

Profile sought

Technical skills:

• Solid expertise in Microsoft Active Directory administration.

• Proficiency with tools:
o Active Directory Users and Computers (ADUC)
o Active Directory Administration Center (ADAC)
o Group Policy Management Console (GPMC)
o DNS Manager
o PowerShell

• Good knowledge of authentication protocols: Kerberos, LDAP, NTLM.
• Experience in diagnosing authentication, replication, and DNS issues.
• Operational knowledge of Domain Controller services.
• Proficiency in operating and troubleshooting GPOs.
• Experience with Microsoft Entra ID Connect.

Personal qualities:

• Rigor and organizational skills.
• Strict adherence to procedures and security requirements.
• Excellent analytical and incident resolution skills.
• Good communication and teamwork spirit.
• Ability to work under pressure and manage priorities.
• Strong awareness of cybersecurity and identity management issues.