Windows System Administrator

Role: Windows Admin

Location: Santa Ana, CA

Remote/ Onsite: Onsite

Start Date: As soon as resource identified

Position type: FTE

Hands on

1. Windows Administration: Expertise in Windows AD, Domains, DNS, DHCP, Forest creation, modification, and integration.

2. Security & Authentication: Knowledge of External DNS, NTLM, Kerberos, Certificate Authority, and SAML SSO.

3. Intune Administration

4. Azure AD & Tenant Configuration

5. O365 Administration: Not an expert-level requirement but should understand and be able to create connectors.

6. Networking Basics: VLAN, VLAN segmentation, Firewalls, Privileged Access Management.

7. Knowledge in SQL Administration – Not an expert level

8. Azure Administration: Experience in deploying Azure resources, managing Resource Groups (RGs), NSGs, tagging, ARM templates, and VPN gateways.

Must-Have Experience in at Least One of the Following Scenarios:

1. Active Directory Forest Trust with Entra Connect Sync

1. Establishing a bidirectional forest trust between two AD forests.

2. Synchronizing both forests to a single Entra tenant using Microsoft Entra Connect Sync.

3. Enabling cross-forest authentication for Entra-integrated and AD-integrated apps.

4. Requires TCP/IP network connectivity between domains and domain controllers.

5. Ideal for legacy AD-integrated apps that require cross-forest access.

2. Synchronizing Both Forests via a Single Entra Connect

1. Using a single Entra Connect server to sync objects from both forests to one tenant, without a forest trust.

2. Enabling authentication for Entra-integrated apps but restricting AD-integrated app access between forests.

3. Requires network access between the Entra Connect server and both domain controllers.

4. Suitable when cross-forest AD app access is not needed.

3. Entra Connect Cloud Sync for a Secondary Forest

1. Utilizing Cloud Sync (lightweight agent) for the secondary forest while keeping the primary Entra Connect setup.

2. Synchronization without full AD connectivity, ideal for geographically distributed networks.

3. Supports hybrid environments, where one forest operates in a cloud-centric model.