<ul> <li>Covestic is seeking a full-time Active Directory Engineer to join our Infrastructure team. We are looking for team members who are passionate about working on-premises and helping shape our cloud infrastructure journey, willing to learn new technologies, interested in working in a dynamic environment that emphasizes team success and belonging, and ready to hit the ground running. </li><li>Design, deploy, maintain, and troubleshoot multi-domain Active Directory Forest </li><li>Design, deploy, maintain, and troubleshoot Microsoft Azure Active Directory environment </li><li>Design, deploy, maintain, and troubleshoot PKI/Certificate infrastructure </li><li>Manage internal and external DNS servers hosted on-premises and in the cloud </li><li>Manage Active directory integrated and standalone </li><li>Architect, deploy, maintain, and troubleshoot Group Policies. </li><li>Maintain architectural diagrams and documentation </li><li>Work collaboratively with, Security, and Development teams </li><li>Maintain backup and disaster recovery strategies and operations for the Legislative environment </li><li>Support SSO, RBAC implementation </li><li>Final escalation points for DBMS and data issues </li><li>Provide mentorship to staff, growing the future of the organization </li><li>Provide incident support through timely response and resolution </li><li>This position may require periods of long hours or weekend work during the legislative session. </li><li>Other duties as assigned </li></ul> <p>Required Skills:</p> <ul> <li> <p>Minimum of 5 years of experience as an infrastructure engineer (Patching, troubleshooting, monitoring, design)</p> </li><li> <p>Minimum 3+ years of working experience with Active Directory (AD, ADFS) and Azure Active Directory</p> </li><li> <p>Role-based access via tiered admin AD groups</p> </li><li> <p>Maintain and troubleshoot Azure Conditional Access Policies</p> </li><li> <p>Establishing SSO Applications</p> </li><li> <p>User Provisioning</p> </li><li> <p>Troubleshooting</p> </li><li> <p>Azure DevOps and on-premises TFS</p> </li><li> <p>Permissions</p> </li><li> <p>Pipeline Troubleshooting</p> </li><li> <p>Maintain Building infrastructure (build components and integrations like SonarQube)</p> </li><li> <p>Experience implementing and maintaining physical and virtual server systems</p> </li><li> <p>Experience managing and supporting PKI/certificate infrastructure Customer focused and uses customer expectations to define what success looks like for their systems. Makes clear commitments. Sets goals and strives to be accurate and timely in how to achieve them. Challenges the status quo to add customer value to all we do. Strives to "get to yes."</p> </li><li> <p>Will display a strong sense of ownership in the systems and are responsible for providing expert-level guidance. This engineer will also communicate with confidence about those systems and offers solutions, identify recommendations and impacts, and hold themselves and others accountable for the performance of their domains.</p> </li><li> <p>Is big-picture oriented, a strategic thinker, and willing to be accountable for system performance and reliability.</p> </li><li> <p>Will proactively create plans for updates, migrations, root cause analysis, and all other activities related to their systems.</p> </li></ul> <p>Preferred Skill:</p> <ul> <li>Experience managing enterprise backup and recovery systems </li><li>Experience supporting and configuring storage solutions (SAN, NAS, DAS) </li><li>Experience managing, configuring, and troubleshooting domain controllers and load balancers </li><li>Experience with scripting and automation </li><li>Experience with hyper-converged infrastructure </li></ul> <p>Education & Certifications:</p> <ul> <li>4-year degree </li></ul>