L2 Active Dir +MS Exchange

JOB PURPOSE

• Provide expert L2 administration and support for Microsoft Active Directory (AD) and MS Exchange environments supporting enterprise BSS users and application authentication.
• Ensure high availability, security, and performance of directory services and email infrastructure.

DUTIES AND RESPONSIBILITIES

• Administer Microsoft Active Directory (AD DS): domain controllers, OU structure, GPO, Sites and Services.
• Manage AD user accounts, groups, security policies, and role-based access control.
• Administer Microsoft Exchange Server (2016/2019) or Exchange Online for enterprise email services.
• Troubleshoot and resolve AD incidents: login failures, replication issues, GPO application errors, trust relationship failures.
• Troubleshoot Exchange incidents: mail flow failures, mailbox issues, transport queue backlogs, spam filtering.
• Manage AD Federation Services (ADFS) or cloud directory synchronization services for SSO and hybrid identity.
• Perform AD schema maintenance, forest/domain health checks, and FSMO role management.
• Administer Exchange DAG (Database Availability Group) for high availability.
• Manage Exchange transport rules, mail flow connectors, and anti-spam policies.
• Coordinate BSS application authentication integration with Active Directory/LDAP.
• Perform AD and Exchange patching and upgrades per Change Management.
• Maintain AD/Exchange documentation, configuration records, and disaster recovery procedures.

SKILLS & EXPERIENCE

• 5–10 years of experience in Active Directory and Exchange administration.
• Microsoft Certified: Identity and Access Administrator or equivalent.
• Expert knowledge of Active Directory: AD DS, GPO, ADFS, directory synchronization, Kerberos, LDAP.
• Strong Exchange Server administration skills: DAG, transport, mailbox, compliance.
• Experience with PowerShell for AD and Exchange automation.
• Knowledge of hybrid AD scenarios: on-premises AD + cloud directory services.
• Understanding of BSS application LDAP/AD integration.
• ITIL incident and change management awareness.
• English skills – oral and written.

TECHNICAL SKILLS – SYSTEM & PLATFORM COVERAGE

• Active Directory – Primary platform – Microsoft Active Directory (AD DS) domain controller administration, OU structure, Group Policy Objects (GPO), ADFS for SSO, directory synchronization for hybrid identity, and Kerberos/LDAP authentication services.

• MS Exchange – Primary platform – Exchange Server (2016/2019) or Exchange Online administration: mailbox management, DAG configuration, mail flow connectors, transport rules, anti-spam policies, and enterprise email service operations.

• CRM – AD/LDAP authentication for CRM – CRM user account management, AD-integrated role assignment, and SSO configuration for enterprise CRM applications.

• DMS – AD-integrated document management authentication – Document management user account management, AD group-based access control, and service account administration.

• ITSM – ITSM authentication via AD – ITSM platform AD integration; Exchange-based ITSM email notification routing and incident communication.

• IAM/PAM/Security Tools – AD-integrated privileged access management – PAM tool integration with AD, LAPS deployment, privileged account governance, ADFS security policies, and identity compliance reporting.

• Unified Communications – AD-integrated unified communications – User provisioning, AD-linked presence, and unified communications service management.

• Monitoring – AD replication monitoring, domain controller health, Exchange mail flow, and mailbox quota alerts integrated into the enterprise monitoring and centralized logging platform.

• ITSM – Change management for AD schema changes, GPO deployments, Exchange configuration updates, and identity platform patching.

EDUCATION

• University degree in Computer Science, Information Technology, or equivalent. Microsoft certification preferred.