Senior Lead System Engineer

Manage and maintain Active Directory infrastructure including domain controllers, forests, trusts, and replication

Administer and troubleshoot DNS and DHCP services to ensure high availability and consistent performance

Design, implement, and manage Group Policies (GPOs) to enforce security and operational standards across the environment

Deploy and manage Public Key Infrastructure (PKI) and Microsoft Certificate Services throughout the certificate lifecycle

Administer and support Distributed File System (DFS) for data replication and access management

Manage Microsoft Key Management Services (KMS) to ensure licensing compliance

Perform root cause analysis and advanced troubleshooting for complex infrastructure-related issues

Automate administrative tasks and operational workflows using PowerShell scripting

Monitor system performance, availability, and capacity to ensure proactive infrastructure health

Ensure adherence to security best practices and regulatory compliance standards

Collaborate with cross-functional teams on migrations, upgrades, and enterprise transformation initiatives

Support planned change activities to minimise risk and operational disruption

Contribute to documentation, SOPs, and knowledge base maintenance

Act as the technical lead and go-to SME for the team on all Active Directory, Domain Controller and identity-related matters

Provide guidance and mentorship to junior and senior engineers

Engage with stakeholders at all levels with clarity, confidence, and ownership

Active Directory (ADDS) — Architecture, design, upgrade, and migration

DNS & DHCP — Configuration, troubleshooting, and optimisation

Group Policy (GPO) — Design, implementation, and troubleshooting

PKI & Certificate Services — Deployment and full lifecycle management

DFS — Namespaces and replication

Microsoft KMS — Setup and ongoing maintenance

PowerShell — Advanced scripting and automation

Windows Server — 2016 / 2019 / 2022 /2025 administration

Knowledge on SCCM, MECM, INTUNE will plus

Experience with Azure AD and Hybrid Identity environments

Knowledge of Active Directory security hardening and auditing tools

Exposure to ITIL processes — Incident, Change, and Problem Management

Hands-on experience in migration, consolidation, or infrastructure transformation projects

Microsoft Certified: Identity and Access Administrator Associate

Microsoft Certified: Windows Server Hybrid Administrator Associate

MCSE or equivalent

10–15 years of progressive experience in enterprise Active Directory and Windows infrastructure environments

Strong problem-solving and analytical capabilities with a structured approach to troubleshooting

Excellent communication and stakeholder management skills

Ability to lead with authority and collaborate with humility in a fast-paced enterprise setting

A disciplined, security-conscious mindset with a commitment to operational excellence