Engineer - Active Directory Infrastructure

About the role

Join the newly created Active Directory Infrastructure Team at Sysco LABS Sri Lanka. As an Active Directory Administrator you will support enterprise identity services across multiple global domains, ensuring secure authentication for a worldwide workforce.

Key responsibilities

• Manage AD objects, OUs, and service accounts while enforcing best‑practice policies.
• Troubleshoot authentication, domain‑join, and Kerberos/NTLM issues on Windows and Linux endpoints.
• Maintain Domain Controllers on Windows Server Core using RSAT, Windows Admin Center and command‑line tools.
• Create, deploy and debug Group Policy Objects to enforce security baselines.
• Monitor replication health, run dcdiag/repadmin checks and generate audit reports via PowerShell.
• Support hybrid identity operations, including AAD Connect sync and Azure AD join scenarios.
• Assist with Linux domain integration using SSSD and Realmd.
• Handle AD Certificate Services tasks, DNS zone management and migration planning for multi‑forest environments.

Required profile

• Bachelor’s degree in Computer Science, IT or equivalent experience.
• 1‑3 years of hands‑on experience with Active Directory architecture and administration.
• Strong logical troubleshooting skills focused on identity, permissions and access rights.
• Excellent communication for collaborating with global remote teams.
• Willingness to work rotational shifts and on‑call duties.

Required skills

• Active Directory, ADUC, DNS, Group Policy Management Console.
• PowerShell (Active Directory module) for scripting and automation.
• Windows Server Core administration, RSAT, Windows Admin Center.
• Kerberos, LDAP, NTLM authentication protocols.
• Azure AD (Microsoft Entra ID), AAD Connect, hybrid join scenarios.
• Linux domain integration tools (SSSD, Realmd).
• PKI concepts and AD Certificate Services.
• Monitoring tools such as dcdiag, repadmin.

What we offer

• Performance‑based annual bonus and rewards.
• Special allowances for health, wellness and academic purposes.
• Paid birthday leave and team engagement allowance.
• Comprehensive health and life insurance covering dependents.
• Hybrid work arrangement.