Senior Windows & Active Directory Engineer (Identity & Infrastructure Support)

Ampcus Inc. is a certified global provider of a broad range of Technology and Business consulting services. We are in search of a highly motivated candidate to join our talented Team.

Job Title: Senior Windows & Active Directory Engineer (Identity & Infrastructure Support)

Location(s): Chicago, IL
(Remote)

Role Summary
We are seeking a Senior Windows & Active Directory Engineer to provide Tier 3 operational support and engineering expertise across Active Directory Domain Services (AD DS), Group Policy, and identity lifecycle management. This role serves as the primary escalation point for complex AD and Windows Server issues, including Domain Controller (DC) migrations and identity governance platforms such as SailPoint IdentityNow and Microsoft Identity Manager (MIM).

The role also provides secondary support for AWS (EC2, RDS) environments and moderate support for VMware platforms.

Key Responsibilities
Primary Responsibilities
Active Directory Domain Administration

• Provide Tier 3 support for AD DS, including replication, DNS integration, authentication/authorization, trusts, sites and services, and domain health monitoring.
• Support and troubleshoot Domain Controller migrations (OS upgrades, domain functional level changes, DC build/decommission, replication cutovers).
• Administer and troubleshoot Group Policy Objects (GPOs), including design, deployment, conflict resolution, and impact analysis.
• Perform root cause analysis (RCA) for AD incidents and implement preventive measures and SOPs.

Identity & Access / Lifecycle Management

• Manage identity lifecycle processes: joiner/mover/leaver workflows, provisioning/deprovisioning, role/group assignments, and entitlement reviews.
• Support and troubleshoot identity platforms:
  • SailPoint IdentityNow (IGA).
  • Microsoft Identity Manager (MIM) - sync rules, connectors, workflows, and services.
• Resolve complex issues involving identity synchronization, account correlation, role governance, and downstream provisioning.

Windows Server Administration (2012 R2 - 2025)

• Provide Tier 3 support for Windows Server environments, including patching, performance tuning, event log analysis, and recovery.
• Troubleshoot authentication issues (Kerberos, NTLM), certificate-related issues, and system reliability concerns.
• Contribute to server lifecycle management, system hardening, and operational standards.

Secondary Responsibilities (High Priority)
AWS (EC2, RDS)

• Support AWS infrastructure, focusing on EC2 and RDS.
• Troubleshoot connectivity, IAM permissions, security groups, patching, backup/restore, and monitoring alerts.
• Collaborate with cloud teams on operational improvements and documentation.

Secondary Responsibilities (Medium Priority)
VMware (vSphere / ESXi)

• Support VM lifecycle management, snapshots, and basic performance troubleshooting.
• Assist with guest OS integration issues.
• Collaborate with virtualization teams on capacity planning and stability.

Required Qualifications

• Strong hands-on experience with Active Directory in enterprise environments.
• Proven Tier 3 troubleshooting expertise (replication, GPO, authentication, domain services).
• Experience with identity lifecycle management and IAM/IGA platforms:
  • SailPoint IdentityNow.
  • Microsoft Identity Manager (MIM).
• Extensive experience with Windows Server (2012 R2-2025).
• Strong documentation, incident management, and RCA capabilities.

Preferred Qualifications

• Working knowledge of AWS EC2 and RDS.
• Familiarity with VMware vSphere/ESXi.
• Experience with DC migrations, modernization, or hybrid identity environments.
• PowerShell scripting/automation experience.
• ITIL knowledge (Incident, Problem, Change Management).

Core Competencies

• Advanced troubleshooting and analytical thinking.
• Strong communication across technical and non-technical audiences.
• Ownership and prioritization in high-severity incidents.
• Cross-functional collaboration (Identity, Security, Cloud, Network, Applications).

Success Metrics

• Reduction in recurring AD/identity incidents through RCA and prevention.
• Improved reliability and performance of AD/Windows environments.
• Timely resolution of Tier 3 escalations.
• High-quality documentation and repeatable processes.
• Effective coordination during migrations and major incidents.

Work Schedule

• 40 hours per week.
• Primary coverage aligned to Eastern Time (7 AM-6 PM shifts).
• Participation in on-call rotation for high-severity incidents.

Ampcus is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, protected veterans or individuals with disabilities.