Specialist - Technology Services

Location

Noida | India

Job description

Specialist - Technology Services

Position Summary

The Directory Services (DS) Engineer is responsible for managing, securing, and updating Active Directory Domain Services, Group Policy Administration, Active Directory Certificate Services, Active Directory Federation Services, Microsoft LDS, and Azure Active Directory. Additionally, DS Operations Team is responsible for supporting automated user provisioning, authentication (i.e., Kerberos, ADFS) This hands-on position requires an experienced candidate with strong collaboration skills to work with cross functional teams to ensure the design of technology solutions complies with MetLife's information security policies and regulatory obligations.

The DS Engineer must be an adaptable, pragmatic, and positive professional, who is comfortable in delivering clear and concise information at technical level. We are seeking a dynamic individual for this role that will execute MetLife's transformation in digital and mobile space and accelerate customer centricity initiatives.

• Facilitate Active Directory administrative tasks, integration needs, and business requirements.
• Creation, migration, consolidation, and retirement of Domain Controllers into sites and domains.
• Collaborate with Information Security Division to mitigate vulnerabilities, define and implement security policies, and support internal PKI/certificate management process.
• Configuring Active Directory Site and Services according to Microsoft and industry best practices.
• Test and verify AD Domain Controllers disaster recovery procedures.
• Execute monitoring strategies for monitoring and reporting health of Active Directory components.
• Be available to all information technology groups of a large enterprise, both within IT operations as well as in other IT divisions to help and facilitate the integration or support of the Active Directory and Microsoft Enterprise Services.
• Continually monitor environment to ensure best practices and Federal guidelines are being followed.
• Generate usage reports of components of AD like LDAP, NTLM, Kerberos, etc.
• Provide point in time audit reports of different types of AD objects.
• Create and maintain support documentation, asset inventory, and tracking of the enterprise infrastructure.
• Work closely with desktop and server administrators to define and execute appropriate Group Policy, scripting, related to directory hierarchy, objects, and structure.

Job Responsibilities

• Build and deploy Microsoft Active Directory Domain Controllers, consolidate Sites and Domains, and monitor the health of existing systems
• Provide ongoing Level 1 and Level 2 support for MetLife's directory services, which includes: upgrades, tuning, monitoring, problem resolution and identification of root cause.
• Establish collaborative working relationships with the businesses, functions, and regions to ensure that MetLife's directory services align with MetLife's security architecture and business strategy.
• Work with global partners to migrate end users from mergers & acquisitions into MetLife's directories.
• Responsible for day-to-day administration duties including Windows Active Directory object maintenance, troubleshooting and repair tasks on Active Directory, Windows Server 2019, Domain Controllers, DNS, user authentication and other operational systems as needed.
• Implement, monitor, and maintain Active Directory DC design, Schema, OU design, AD replication topology, and DC backup/restore procedures
• Develop and maintain backup and recovery practices and procedures
• Perform Active Directory Services administration and management to include design, cleanup and routine maintenance and configuration
• Handle requests via thru Incident/Problem Management tool
• Ability to coordinate and perform Disaster Recovery exercises.
• Active Directory Federation Services (ADFS), SAML, web Single Sign-on (SSO), OAuth and related authentication technologies
• Break/Fix response for all supported services.

Knowledge, Skills and Abilities

• Bachelor's Degree in Computer Science, Information Systems, or related field.

• 5+ years of Domain Controller deployment, promotion, and demotion experience
• 5+ years of Active Directory design migration or consolidation experience
• 5+ years of scripting skills in PowerShell or other modern scripting language
• 3+ years of experience with Azure
• 2+ years of Linux Operating system experience
• Advanced Microsoft certification with 5+ years' experience as a Windows 2012/2016/2019 and Active Directory services administrator.
• Hands-on experience in supporting Microsoft Windows 2012/2016/2019 core systems, Active Directory, ADFS, MS PKI, DFS, and GPO validation and design.
• Deep understanding of Group policy management, troubleshooting and management.
• Understanding of the inner working of Active Directory and its components.
• Working experience of lightweight Directory Access Protocol (LDAP).
• Good understanding of Active Directory Federation Services.
• Experience with Azure Cloud Services.

• Prior experience with other directory technologies like Ping, OUD, Open DJ
• 5+ years engineering experience working in an enterprise infrastructure with a minimum of 20,000 end users
• Experience in developing and supporting system management automation tools to deploy, configure and monitor servers and services.
• Thorough understanding of monitoring best practices for Active Directory and related services.
• Ability to translate technical issues into understandable business language for end users and other technical support personnel.
• Must possess excellent communication, presentation, and writing skills.

• Power Shell, VB Script is a plus.
• ITIL, MCP, MCSE, MCSA, Azure Certification will be preferred.

Working Relationships

• MetLife internal partners

• MetLife external partners

Job tags

Salary