Senior Active Directory Engineer (Riyadh)

About the role

Alnafitha is looking for a Senior Active Directory Engineer to act as the on‑site technical liaison for a major banking client in Saudi Arabia. You will ensure the stability, security, and compliance of the client’s AD environment while driving large‑scale modernization projects.

Key responsibilities

• Monitor AD health daily (replication, FSMO roles, SYSVOL, event logs, DC performance) and perform proactive remediation.
• Manage DNS hygiene, time synchronization, backups, and apply OS/AD updates during approved windows.
• Lead forest consolidation, domain migrations, schema upgrades, and security hardening initiatives in parallel with BAU activities.
• Deploy and upgrade domain controllers, restructure OUs, and move objects using ADMT, PowerShell, and Quest tools.
• Implement and refactor GPOs, configure trusts, and migrate service accounts to gMSA.
• Maintain AD security baseline aligned with CIS/NIST and banking regulations (FFIEC, PCI, SWIFT CSP).
• Monitor privileged groups, clean up stale objects, enforce Kerberos AES, restrict NTLM, and enable LDAP signing.
• Integrate audit logs with SIEM platforms (Splunk, Azure Sentinel, QRadar) and investigate anomalies.
• Collaborate with global AD team and local bank operations, participating in weekly design and status calls.

Required profile

• Senior‑level professional with extensive experience managing enterprise Active Directory environments.
• Proven ability to plan and execute large‑scale AD change projects while maintaining day‑to‑day operations.
• Strong understanding of banking security and compliance requirements.

Required skills

• Active Directory, DNS, SYSVOL, FSMO roles
• PowerShell scripting
• ADMT and Quest Migration Manager
• Group Policy Objects (GPO) design and implementation
• Windows Server administration and patch management
• gMSA, LAPS, Kerberos AES encryption, LDAP signing
• SIEM integration (Splunk, Azure Sentinel, QRadar)
• NTP configuration and time synchronization