Senior Windows/Active Directory Administrator - Splunk/Netskope CASB

Description :

Job Overview :

We are looking for a highly skilled Active Directory Administrator with a security-first and proactive mindset. This role goes beyond ticket-based support and focuses on preventive administration, automation, platform hardening, and reliability across enterprise-scale Windows, Active Directory, and Splunk environments.

The ideal candidate will have strong hands-on expertise in Microsoft Active Directory, Windows infrastructure, automation using PowerShell, and Splunk Enterprise administration in distributed environments.

Key Responsibilities :

Active Directory & Windows Administration :

- Administer and support enterprise-scale Microsoft Active Directory environments, including GPOs, DNS, DHCP, PKI, and Windows Server/Client systems.

- Ensure secure directory operations, including access hygiene, group design, and identity lifecycle management.

- Manage LDAP operations, directory replication, and schema changes with a strong focus on safety, standards, and documentation.

- Proactively monitor, identify, and remediate issues before they impact business operations.

- Apply and enforce security best practices across Windows and AD infrastructure.

Automation & Scripting :

- Automate routine administrative and operational tasks using PowerShell (preferred) or other scripting languages.

- Develop scripts for monitoring, diagnostics, reporting, and remediation.

- Continuously improve operational efficiency through automation and tooling.

Troubleshooting & Operations :

- Perform methodical troubleshooting under pressure, prioritizing incidents based on impact and risk.

- Collaborate effectively with cross-functional teams and communicate clearly during incidents and change activities.

- Maintain accurate documentation, procedures, and operational runbooks.

Splunk Administration Responsibilities :

- Administer and harden Splunk Enterprise in multi-site deployments, including :

1. Indexer clustering and Search Head clustering

2. Deployer and Deployment Server management

3. Role-Based Access Control (RBAC), app lifecycle, and license management

- Own platform performance and reliability, including ingestion and search optimization :

1. RF/SF validation

2. Queue tuning and bucket health

3. Data retention policies

4. Disaster recovery and failover testing

- Lead clean, compliant data onboarding using forwarders, syslog, and HEC.

- Manage source types, props/transforms, timestamping, line breaking, and field extractions.

- Build and optimize SPL queries, dashboards, and alerts.

- Coach users and teams on Splunk best practices and efficient usage.

Required Skills & Experience :

Core Skills (Mandatory) :

- 5- 10 years of hands-on experience administering Microsoft Active Directory in large enterprise environments.

- Strong expertise in Windows Server and Client administration, GPO, DNS, DHCP, and PKI.

- Solid understanding of LDAP, AD replication, and schema change management.

- Strong PowerShell scripting skills for automation and diagnostics.

- Proven ability to troubleshoot complex issues methodically under pressure.

Splunk Expertise :

- Hands-on experience administering Splunk Enterprise, including clustering and multi-site setups.

- Strong understanding of Splunk data ingestion, performance tuning, and security hardening.

- Experience building dashboards, alerts, and optimized SPL queries.

Soft Skills :

- Security-first, proactive mindset with strong attention to detail.

- Excellent communication and documentation skills.

- Fast learner with a strong growth mindset.

- Ability to work independently and take ownership in a contract role.