Active Directory Specialist, L2

**General Information**:

- Req #- WD00071273- Career area:
- Information Technology- Country/Region:
- Singapore- State:
- Central Singapore- City:
- SINGAPORE- Date:
- Monday, September 9, 2024- Working time:
- Full-time**Additional Locations**:

- Singapore - Central Singapore - Singapore
- Singapore - Central Singapore - SINGAPORE

**Why Work at Lenovo**:
We are Lenovo. We do what we say. We own what we do. We WOW our customers.

Lenovo is a US$62 billion revenue global technology powerhouse, ranked #217 in the Fortune Global 500, employing 77,000 people around the world, and serving millions of customers every day in 180 markets. Focused on a bold vision to deliver smarter technology for all, Lenovo has built on its success as the world’s largest PC company by further expanding into growth areas that fuel the advancement of ‘New IT’ technologies (client, edge, cloud, network, and intelligence) including server, storage, mobile, software, solutions, and services.

**Description and Requirements**:
**_Job Responsibilities_**
- Administration and troubleshooting of Windows Servers (Preferably Windows 2008 R2, Windows 2012, Windows server 2003).
- Able to Install of windows servers and has good troubleshooting skills for Wintel systems, knowledge in hardening and securing of Wintel systems.
- Advanced level of Administration of Windows server with active directory, DNS, DHCP and High Availability.
- Understanding of RAID, pros and cons of various RAID levels and decision making on the same in a given situation
- Microsoft cluster configuration, administration and troubleshooting.
- Working experience with various storages, precisely for cluster configurations is good to have.
- Working knowledge in SAN environment and storage space management from systems side is good to have.
- File system and quota management.
- Experience and knowledge on FTP and SFTP Client and Server Model.
- Experience and knowledge with installing and implementing VMware ESX server, VMware virtual Center, setting up V-Motion, HA, DRS, and related VMware products such as VM Workstation, VMware converter VM Backup products and other products for virtualization would be advantages.
- Experience provisioning, operating, and maintaining systems running on AZure

**_ Technical Requirements_**
Active Directory Concepts:

- Understand and explain Domain & Forest structures, Organizational Units (OUs), Schema, and Global Catalog.
- Use tools like nltest, dsquery, and netdom for AD troubleshooting.

AD Infrastructure Components:

- Manage Domain Controllers including recovery methods (authoritative and non-authoritative restore, 3rd party tools).
- Diagnose and troubleshoot replication issues using repadmin and dcdiag.
- Understand and manage FSMO Roles, including their purposes and recovery procedures.
- Configure and manage DHCP, including scopes, SuperScopes, Failover, Static IPs, Reservations, Exclusions, and DNS settings.
- Utilize DNS tools such as Nslookup, Test-DnsServer, ipconfig, tracert, and DNS Query.
- Support and troubleshoot Active Directory Federation Services (AD FS) for SSO.
- Address time synchronization issues using NTP.
- Create and troubleshoot gSMA Accounts.

Authentication and Authorization:

- Manage Kerberos authentication for both Windows and non-Windows (Linux) systems.
- Maintain and resolve LDAP authentication issues.
- Implement and manage Access Control Lists (ACLs) effectively.

Group Policies:

- Enforce configurations on users and computers through Group Policy Objects (GPOs).
- Use GPOs to manage security settings, software installations, and scripts.

AD Management Tools:

- Proficient in Active Directory Users and Computers (ADUC).
- Intermediate to expert skills in PowerShell.
- Knowledge of AD Administrative Center (ADAC) is a plus.

Integration with Other Services:

- Support AD FS onboarding and troubleshooting for SSO solutions.

Troubleshooting and Diagnostics:

- Review and analyze event logs to identify and resolve issues.

Tech Refresh:

- Study and propose improvements for AD design best practices.
- Implement and upgrade DC, DHCP, and DNS roles on newer OS versions.
- Understand and manage AD functional levels and raise them as necessary.

Windows Patching:

- Enroll new servers with WSUS & SCCM, manage monthly patches, and troubleshoot patching issues.

Business-As-Usual (BAU) Duties:

- Take ownership of and resolve assigned tickets within SLA.
- Create and improve Standard Operating Procedures (SOPs).
- Collaborate with team members and mentor junior engineers.
- Exhibit flexibility with working hours and maintain professionalism in customer interactions.

**_
You Bring_**
- Ability to identify and gather requirements to define a solution to be built and operated on Azure
- Capabilities to provide AZure operations and deployment guidance and best practices throughout the lifecycle of a project
- Understanding about the ITIL process
- 5 - 8 Years of System Administration Experience is m