Senior Analyst / SME / Consultant - Active Directory & Azure

We are hiring! Your future starts here! Are you ready to make history with your talent? #LeaveYourMark with Bureau Veritas . We are seeking a highly experienced Senior Analyst / SME / Consultant – Active Directory & Azure to join our team. This role is responsible for the administration, governance, security, and optimization of the enterprise Active Directory infrastructure. The successful candidate will work closely with IAM, Security, Infrastructure, Windows Server, Cloud, and Application teams to ensure the availability, integrity, and security of identity services across the enterprise. What Are the Key Responsibilities? Active Directory Infrastructure & Administration • Manage and support multi-domain Active Directory environments, including AD forests, domains, trusts, sites, and services. • Administer Active Directory Domain Services (AD DS), AD-integrated DNS, user and group management, service accounts, and delegation models. • Ensure directory health, stability, and operational excellence. • Manage and troubleshoot Group Policy Objects (GPOs). • Administer and support Kerberos authentication, LDAP/LDAPS, AD replication (DFS-R, SYSVOL), FSMO roles, Organizational Units (OUs), delegation models, and Active Directory Certificate Services (AD CS/PKI). • Manage backup, restore, and disaster recovery processes. • Develop and maintain PowerShell automation scripts. Group Policy Management • Design, maintain, and troubleshoot Group Policy Objects (GPOs). • Govern GPO structure, inheritance, filtering, and delegation models. • Implement security baselines and policy standards. • Partner with Endpoint and Infrastructure teams for policy deployment. Security & Compliance • Implement Active Directory security hardening and industry best practices. • Support Tier 0 and Tier 1 administrative security controls. • Review privileged access and administrative group memberships. • Investigate suspicious AD activities and support security incident response. • Participate in audit assessments and compliance activities. Identity Integrations and Azure • Integrate Active Directory with Microsoft Entra ID (Azure AD), LDAP directories, and IAM platforms (Saviynt, OneLogin, etc.). • Manage hybrid identity environments using Microsoft Entra Connect. • Support synchronization methods, including Password Hash Synchronization, Pass-Through Authentication, and Federation. • Manage user and group lifecycle processes, Conditional Access, Multi-Factor Authentication (MFA), and Identity Protection. • Manage enterprise application integrations using SAML, OIDC, and OAuth. • Administer Privileged Identity Management (PIM) and RBAC. • Monitor and troubleshoot synchronization issues. Incident & Problem Management • Act as the L3 escalation point for complex Active Directory incidents. • Perform root cause analysis and problem management activities. • Lead troubleshooting bridges during Priority 1 incidents. • Support change management processes and risk assessments. Documentation & Knowledge Management • Develop runbooks, SOPs, knowledge base articles, and technical documentation. • Maintain AD standards, governance documents, and operational procedures. • Deliver knowledge transfer sessions and mentor L2 and L1 support teams. • Drive process standardization and documentation improvemen Required Qualifications • Bachelor's or Master's degree in Cybersecurity, Computer Science, Information Technology, Engineering, or a related discipline. • Minimum 6 years of experience in Active Directory administration, identity management, or related infrastructure roles. • Experience with Saviynt, OneLogin, Delinea, CyberArk, or similar IAM/PAM tools is considered an advantage. • Experience with Microsoft Azure, AWS Managed Microsoft AD, and hybrid identity environments. • Experience in enterprise-scale Active Directory transformation projects. • Familiarity with ITIL Incident, Change, and Problem Management processes. • Experience working in multinational and multicultural environments. Required Skills Fluent in English (written and spoken). Core Technologies • Microsoft Active Directory Domain Services (AD DS), Windows Server, Active Directory Sites and Services, AD Replication, DNS, DHCP, and Group Policy Management. Identity & Security • Kerberos Authentication, LDAP/LDAPS, Microsoft Entra ID (Azure AD), Active Directory Federation Services (AD FS), Privileged Access Management (PAM), and Multi-Factor Authentication (MFA). Infrastructure Knowledge • PKI/Certificate Services, Windows Clustering, Hybrid Identity Architecture, Backup Solutions, and Disaster Recovery Solutions. What Do We Offer? Remote work modality (availability to attend in-person meetings when required). Location: Bogotá, Colombia. Monday to Friday schedule (no work on Colombian public holidays). Join an inclusive, flexible, and diverse company where you can thrive while contributing to positively transforming the world we live in. #BuildingAWorldOfTrust #BuildingABetterWorld #BureauVeritasColombia #LeaveYourMark