Active Directory SME
We are seeking an experienced Active Directory Subject Matter Expert (SME) to serve as the senior technical authority for enterprise-scale Microsoft Active Directory and hybrid identity environments. This individual will lead technical strategy, architecture, security hardening, migrations, and advanced troubleshooting while providing guidance to a team of engineers supporting a large, complex infrastructure.
This is a highly visible role supporting ongoing growth initiatives, mergers, acquisitions, and enterprise identity modernization efforts.
Required Skills
- 8+ years of hands-on Active Directory experience
- Strong Active Directory architecture and design expertise
- Active Directory migration and consolidation experience
- Multi-domain and multi-forest environment management
- Advanced Group Policy (GPO) administration and troubleshooting
- Kerberos, LDAP, and SPN troubleshooting
- Microsoft Entra ID (Azure AD) integration experience
- PowerShell automation and scripting
- Tier 3 support experience within large enterprise environments
- Leadership or team mentoring experience
Key Responsibilities
- Design, implement, and maintain enterprise-scale Active Directory environments across multiple domains, forests, and sites.
- Lead architecture and engineering initiatives supporting highly available and secure directory services.
- Enforce Tier 0 administration models and Active Directory security baselines.
- Manage and support PKI/ADCS infrastructure and certificate services.
- Administer hybrid identity integrations between on-premises Active Directory and cloud platforms including Microsoft Entra ID and AWS Managed Microsoft AD.
- Design and troubleshoot complex Group Policies.
- Resolve advanced authentication, replication, and directory service issues involving Kerberos, LDAP, and SPNs.
- Develop PowerShell automation and Infrastructure-as-Code solutions using tools such as Terraform or Ansible.
- Lead large-scale domain migrations, consolidations, and legacy environment decommissioning efforts.
- Create and maintain disaster recovery strategies for Active Directory environments.
- Provide Tier 3 escalation support and conduct root cause analysis for critical incidents.
- Mentor junior engineers and establish technical best practices.
Preferred Qualifications
- Experience with AWS Managed Microsoft AD
- Terraform and/or Ansible experience
- Microsoft Exchange and Office 365 support experience
- ServiceNow experience
- Experience within large enterprise environments supporting thousands of users
- Strong documentation and technical leadership skills
Work Environment
- 100% remote position
- Occasional travel to the Houston-area Global Support Center for quarterly meetings, team events, and strategic planning sessions
- Fast-paced, enterprise environment focused on security, reliability, and continuous improvement
Why Join?
Sysco offers a collaborative, people-first culture focused on integrity, inclusion, excellence, and professional growth. This opportunity provides exposure to large-scale enterprise identity initiatives, cloud transformation projects, and ongoing acquisition-driven infrastructure modernization efforts.