Design, implement, and maintain Active Directory infrastructure across multi-domain and multi-forest environments. Lead migration, consolidation, and modernization projects involving Active Directory and Azure Active Directory. Manage and optimize Group Policies, Organizational Units (OUs), permissions, and access controls. Troubleshoot and resolve complex AD issues such as replication failures, authentication problems, DNS-related issues, and performance bottlenecks. Integrate on-prem AD with Azure AD, Office 365, and various third‑party identity providers. Implement and maintain identity security best practices, including auditing, privileged access management, RBAC, and hardening controls. Work closely with security teams to ensure identity governance, compliance, and alignment with regulatory standards. Automate routine identity and infrastructure tasks using PowerShell scripting and other automation frameworks. Monitor, analyze, and improve the performance and health of AD, ADFS, and related identity components. Support and manage DNS, DHCP, DFS, Certificate Services and other Windows Server roles. Contribute to and maintain documentation including architecture diagrams, standard operating procedures, and troubleshooting guides. Provide technical leadership, training, and mentoring to junior team members. Participate in incident response and root cause analysis for identity-related issues. Ensure reliable operation of SSO, MFA, and identity lifecycle management processes.