Active Directory Analyst

Position Overview

The Tier II Active Directory (AD) Support Analyst is responsible for providing advanced technical support, administration, and troubleshooting for Active Directory environments. This role supports day-to-day AD operations, escalations from Tier I, and contributes to the stability, security, and optimization of identity and access management services. The analyst will work closely with Infrastructure, Security, and Service Desk teams to maintain a reliable, secure, and scalable directory environment.

Key Responsibilities

Active Directory Administration

· Manage and troubleshoot user, group, and computer accounts within Active Directory.

· Perform OU management, group policy troubleshooting, and permissions delegation.

· Maintain AD Sites and Services, DNS records, replication, and domain controller health.

· Assist with AD-related service integrations, such as ADFS, Azure AD Connect, and SSO solutions.

Tier II Support & Incident Management

· Handle escalations from Tier I related to authentication issues, account lockouts, login failures, and access permissions.

· Provide in-depth troubleshooting for GPO application issues, replication failures, and DNS-related problems.

· Participate in root cause analysis (RCA) for recurring identity or directory-related issues.

· Document resolutions, workarounds, and knowledge-base articles to improve Tier I effectiveness.

Security & Compliance

· Implement and maintain role-based access control (RBAC) according to company security policies.

· Support compliance audits by ensuring proper documentation and adherence to identity governance standards.

· Monitor for and remediate security risks such as stale accounts, password policy violations, and unauthorized access.

· Assist with MFA, privileged access workflows, and account lifecycle procedures.

Maintenance & Operational Tasks

· Perform routine health checks on AD Domain Controllers, DNS servers, and associated identity systems.

· Apply changes to Group Policies, login scripts, and AD structures following proper change-control processes.

· Support patching and updates related to AD, identity tools, and supporting infrastructure.

· Assist with user and computer migrations, including domain joins and workstation reassignments.

Project & Enhancement Support

· Participate in AD cleanup initiatives, reorganizations, and modernization efforts.

· Support Azure Active Directory or hybrid identity projects as directed.

· Assist with automation efforts (PowerShell scripting preferred) to streamline AD administration.

Required Qualifications

· 2–4 years of IT support experience, with at least 1–2 years of hands-on Active Directory administration.

· Strong knowledge of:

o Active Directory Users & Computers (ADUC)

o Group Policy Management

o DNS and DHCP fundamentals

o AD Sites & Services / replication

· Experience with account provisioning, access control, and identity lifecycle processes.

· Strong troubleshooting skills, particularly for authentication and GPO issues.

· Familiarity with security best practices within AD environments.

Preferred Qualifications

· Experience with PowerShell scripting for automation and bulk operations.

· Exposure to Azure Active Directory, Entra ID, or hybrid identity environments.

· Knowledge of ADFS, Azure AD Connect, or SSO technologies.

· Experience supporting Windows Server 2016/2019/2022 environments.

· Background working in enterprise, multi-site, or regulated environments.

· Certifications such as Microsoft 365 Certified: Modern Desktop Administrator, Azure Administrator, or Security+

remote position for México