Senior Active Directory Engineer

Cognizant is a leading technology company, and they are seeking a Senior Active Directory Engineer to enhance the stability, security, and performance of enterprise Active Directory environments. The role involves managing AD environments, supporting migrations, and driving security initiatives in collaboration with business teams.

Responsibilities:

• Manage and support multiple enterprise Active Directory environments, ensuring stability, performance, and availability
• Review, investigate, and remediate AD performance issues and unusual activity using monitoring and diagnostic tools
• Strengthen AD security by addressing identified vulnerabilities and maintaining compliance with baseline security standards
• Collaborate with business and application teams to support migrations to core and cloud AD environments
• Lead and support AD domain consolidation initiatives, including work related to mergers and acquisitions
• Participate in AD audits, compliance reviews, security assessments, and root-cause analyses
• Create and maintain technical documentation, SOPs, and operational reports
• Participate in a 24×7 on-call rotation and contribute to team initiatives, occasionally leading small technical workstreams

Requirements:

• Hands-on and strategic experience across multi-domain environments, migration projects, and enterprise security standards
• Extensive experience collaborating with business and application teams to strengthen Active Directory security and support migrations to Optum core AD or cloud environments
• Strong expertise in Active Directory infrastructure engineering
• Proficient with AD performance tuning and optimization
• Knowledge of server hardware management
• Hands-on experience with VMware ESX or Hyper‑V engineering and operations
• Experience automating AD operations with PowerShell, with additional scripting experience in VBScript or Batch
• Familiarity with SCOM and SCCM/MECM
• Experience with Quest tools: InTrust, Change Auditor, Enterprise Reporter, GPO Admin, RMAD
• Exposure to BloodHound Enterprise and Microsoft RAP
• Strong understanding of DNS, networking fundamentals, and firewall operations