• Diagnose and rectify any problems related to AD, GPO, Windows servers and services.
  
• Manage users and administrators accounts in AD.
  
• Manage MFA and SSO (Azure AD, ADFS).
  
• Manage Identities components (AAD Connect, PKI, Privilege Access Management).
  
• Manage security groups and group policies in AD.
  
• Install, Promote/demote, and maintain Domain Controllers.
  
• Modern Management: Passwordless, Intune Management, Conditional Access Policy, Manage Windows servers: DNS, DHCP, Print & File Server Manage external DNS.
  
• Assist SCCM Specialist with Windows server and client patching.
  
• Install and manage all on-prem Hyper-V servers onshore and offshore.
  
• Provision/Decommission VM in Hyper-V.
  
• Manage PAM solution (PAM server, administrator accounts, password vault).
  
• Manage and troubleshoot LAPS.
  
• Monitor the server infrastructure on all aspects, i.e. availability, performance, capacity, security, as well as AD DS health status.
  
• Create and maintain system documentation and SOPs.
  
• Manage and/or participate in major incident resolution.
• If assigned to projects, you will be expected to ensure managed system changes/tasks are completed to meet business requirements. Identify opportunities to improve our overall operational performance & saving.

Process Delivery:

• Quarterly user/computer AD account review
  
• Admin account and Service account request and management
  
• File Share permission request and management
  

System ownership & reporting:

• Microsoft AD DS
  
• Windows Server infrastructure
  
• Privileged Access Management
  
• Azure