Senior Active Directory Engineer

About the role

Alnafitha is looking for a Senior Active Directory Engineer to lead the stability, security and modernization of a major banking client’s AD environment in Saudi Arabia. The role acts as the on‑site technical liaison between the client and Alnafitha’s global AD team, ensuring daily operations run smoothly while delivering large‑scale change projects.

Key responsibilities

• Monitor AD health (replication, FSMO roles, SYSVOL, event logs, DC performance) and perform daily checks with DCDIAG, REPADMIN and NETDIAG.
• Maintain DNS hygiene, time synchronization, backups and apply OS/security updates during approved windows.
• Plan and execute forest consolidation, domain migrations, schema upgrades, GPO redesign and site topology changes using ADMT, PowerShell and Quest tools.
• Restructure OUs, move objects, migrate service accounts to gMSA and enforce security baselines aligned with CIS, NIST and banking regulations (FFIEC, PCI, SWIFT CSP).
• Manage privileged groups, clean stale accounts, enforce Kerberos AES, disable NTLM, enable LDAP signing and channel binding.
• Coordinate with the global AD team, attend weekly design/status calls and act as the primary technical point of contact on‑site.

Required profile

• Senior‑level experience managing large Active Directory environments.
• Proven track record delivering AD modernization projects (forest consolidation, domain migration, schema upgrades).
• Familiarity with banking‑sector compliance requirements (FFIEC, PCI, SWIFT CSP).
• Ability to work on‑site in Saudi Arabia and collaborate with global technical teams.

Required skills

• Active Directory design, implementation and troubleshooting.
• DNS, NTP and time‑service management.
• PowerShell scripting and automation.
• ADMT and Quest migration tools.
• Group Policy Objects (GPO) creation and refactoring.
• gMSA, LAPS and service‑account management.
• DCDIAG, REPADMIN, NETDIAG utilities.
• Kerberos AES encryption, LDAP signing, NTLM restriction.
• SIEM integration (Splunk, Microsoft Sentinel, QRadar).