Senior Active Directory Engineer

About the role

Sysco is seeking a Senior Active Directory Engineer to design, implement, secure, and maintain enterprise‑level Active Directory Domain Services and hybrid Microsoft Entra ID environments. The role ensures identity infrastructure is available, performant, and resilient across complex multi‑domain and multi‑forest landscapes.

Key responsibilities

• Design, install, configure and maintain AD forests, domains, OUs, trusts, sites, subnets and domain controllers.
• Administer AD DS, including replication topology, FSMO roles, schema, global catalog and overall directory health.
• Create, implement and enforce Group Policy Objects to meet security and configuration standards.
• Harden AD environments with security baselines, privileged access controls, tiered administration and regular auditing.
• Manage hybrid identity synchronization between on‑prem AD and Microsoft Entra ID using Azure AD Connect.
• Troubleshoot complex authentication, authorization, replication, DNS, Kerberos, NTLM, LDAP and performance issues.
• Develop and maintain advanced PowerShell scripts for automation of provisioning, reporting and health checks.
• Plan and execute AD upgrades, domain/forest migrations, consolidations and decommissioning projects.
• Develop, test and maintain disaster recovery procedures for critical identity services.
• Monitor capacity, availability, security events and service health, identifying trends and implementing improvements.

Required profile

• Proven senior‑level experience with enterprise Active Directory design, implementation and operations.
• Strong background in hybrid identity solutions using Microsoft Entra ID/Azure AD Connect.
• Demonstrated ability to resolve advanced Kerberos, NTLM, DNS and replication issues.
• Experience leading AD upgrades, migrations and forest consolidation projects.

Required skills

• Active Directory Domain Services (AD DS)
• Group Policy Objects (GPO)
• Microsoft Entra ID / Azure AD Connect
• PowerShell scripting
• Kerberos, NTLM, DNS, LDAP
• Directory replication and trust management
• Disaster recovery planning for identity services

What we offer

• Opportunity to work with a global leader in food distribution.
• Complex, multi‑forest environment providing challenging technical problems.
• Collaboration with cybersecurity, IAM, cloud and network teams.