•Leading a team of AD professionals for a European based leading building material company.• Handling day to day BAU operations of Active Directory, DNS, DHCP, PKI, MFA, Radius services.• Managing 50+ domain controllers in a multi forest multi domain environment.• Interacting with client on technical discussion for SOW (scope of work) agreement.• Risk assessment & remediation planning to patch DCs.• Manage & plan the migration related activities wherein other competencies like Citrix, Azure, Onprem Wintel are involved.• Intensive engagement in Group Policy management.• Domain controller, Radius server OS upgrade & DC demotion, metadata cleanup. • Manage NTFS permission for Citrix profiles & user home/share folders.• Account creation, group creation & role assignment in Entra AD.• Provide access on recourse group & create application in Azure• Handling P1/P2 ticket, drafting RCA and runbook, technical SOPs.

I was managing Directory services environments for leading European Bank.• Looking after the Active Directory architecture and infrastructure (Directory Replication, Group policy, Security, Schema changes, Kerberos and Windows Authentication). • Secure remote administration of the DCs by maintaining OU Tiering concept which enables another layer of validation before reaching to Domain Controller. • Enabling the concept of PAW (privilege access workstation) to get connect to any domain controller. • DNS record changes on ADSIEDIT by reviewing hexadecimal value. • Review domain controller & domain admin usages on Azure Threat Protection portal (ATP) & taking corrective action for each suspicious activity. • AES encryption enabling on each domain which has trust with different ABN domains. • Participating in proactive approach of DC demotion (2008 OS), Identify the possible threat after 2008 DC demotion, preparation to minimize them. • Identify the Direct DC calls of different application by creating a GPO, hide all 2008 DC from DNS to track Direct DC calls. • Group Policy Object (GPO) creation, troubleshooting, and management. • AD housekeeping like DNS records, GPOs, OU & Group membership. • Create and maintain AD environment management documentation on as-necessary basis. • Incident, change Or task assignment on Service Now, Jira & IBM Bluesight tool.

• Datacenter admininistration which has 100+ virtual/physical servers, Synology NAS, HyperV & O365 hybrid infrastructure• Management of directory infrastructure which Includes FSMO roles, trusts, replication topology, GPO creation & giving appropriate permissions on the created objects and linking of default GPOs.• Monitoring connectivity, synchronization, replication, net logon, time services, GC, FSMO roles, schema, NTDS database partitions, DNS settings, SRV records and trust relationships.• Physical to Virtual DC migration using Microsoft P2V tool.• File server, VPN, SharePoint, SQL Database & Application server administration.• Windows server, client OS patching through WSUS & Atera tool• RAID Configuration & troubleshooting. File server backup using Vembu BDR suite.• O365 Email license, mail flows rule, monthly/quarterly O365 & Microsoft software audit.• Handling day to day incidents with RCA & Remote/On-call support to users.• Managing SuperMicro, IBM & HP physical server & Regular interactions with Microsoft, Sophos, Dell, HP, IBM to get technical support.

Managing remotely client data center infrastructure based in Netherlands & having 2300+ virtual/physical machines. Responsible for provisioning/decommission windows 2008/2012 physical/virtual servers.AD replication issues.Managed Group / User permissions in AD.AD migration from 2003 to 2008.RAID Configuration.Email licensing administration in O365 infrastructure.TSM (Tivoli Storage Manager), AVAMAR & Veaam tool for backup solution.Handling incidents with providing RCA if required. Group policy object management in domain.Creating and Managing virtual machine template. Performing daily checklist of PR & development servers which includes DNS, Domain Replications, essential services, disk space, processor, memory utilization, event logsPatching Windows servers through WSUSMonthly/Quarterly review of IT security Audit.Performing technical analysis of virtual/physical server prior to decommission them.Responsible for build/decommission windows 2003/2008/2012 physical & virtual both.Working in ITIL framework, handling incidents, problem & change tickets on ServiceNow tool.

Day to day windows servers administration & Monitoring the health status of critical server.Verify scheduled batch jobs.Maintenance of ERP.Making plan for maintenance window for production & DR servers.Managed Print & File server.Looked after Active directory replication issues, Group policy, access rights and permissions to user & user quota.Server commissioning & decommissioning.Windows server & workstation patching through WSUS.Access management for in-house ERP application.Managed Symantec End Point Protection Antivirus.Worked on Moatis & HPSM ticketing tool.IT security Audit.

Managing RSA Secure ID & Nortel VPN.Maintaining web application, IIS server, SSL certificate.AD object creation & administration.Access rights review (ACL log) with respect to Web application & AD.Technical support to Lotus Notes v8.5 mail server & Microsoft exchange.ID creation, deletion in Lotus Notes.Blackberry mail server administration.Looked after network share & permission issues.Worked on HP Service Manager ticketing tool.