Job Titlle: Active Directory Engineer AON IS IN THE BUSINESS OF BETTER DECISIONS At Aon, we shape decisions for the better to protect and enrich the lives of people around the world. As an organization, we are committed as one firm to our purpose, united through trust as one inclusive, diverse team and we are passionate about helping our colleagues and clients succeed. GENERAL DESCRIPTION OF ROLE: This Active Directory engineering role is heavily involved in solving technical and operational issues with the team. Daily activities for this role include engineering support for directory services, support of operations team, capacity management, coordination with other teams, metrics development, and team development. Job Responsibilities: + Assist the Active Directory (AD) Services Architect in support of: Inter-Forest User Migrations, Account Management and Provisioning, and AD Infrastructure & Enterprise Solutions + Support all Active Directory services and management tools, automations, and backups. + Demonstrate strong analytical, troubleshooting, and problem-solving skills related to Application remediation. + Create and maintain system documentation for domain technologies, including installation, configuration, and appropriate troubleshooting steps. + Maintain a solid understanding of business issues and technical solutions encountered during the migration of single forest or multi-forest Active Directory environments. + Ability to manage multiple priorities, commitments, and projects and interact daily with System Administrators + Maintain a strong learning aptitude and ability to learn new technologies independently. + Excellent interpersonal skills and the ability to work in a team environment and interact with all levels of management as well as customers. + Identify opportunities to innovate, extend and enhance service delivery everywhere possible. Required Skills: + 8+ years of experience in Active Directory support, migrations, design, and implementations + Solid experience working with large, complex Active Directory migrations for customers, prospects, or clients. + Advanced knowledge in AD architecture and infrastructure (LDAP, Directory Replication, group policy, security, schema changes, domain controllers’ management) + Advanced knowledge of DNS, Kerberos, Windows Authentication and Single Sign On (SSO) + Advanced knowledge of Microsoft Identity Manager, Microsoft Azure AD, Office 365, Azure AD Connect, and Azure AD Conditional Access. Knowledge of Microsoft Certificate Services/PKI infrastructure + Advanced knowledge of Windows Server 2012, 2016, 2019, and 2022 + Strong TCP/IP networking knowledge + Knowledge of identity life cycle onboarding and offboarding processes + Inter-Forest User Migrations: Strong understanding of AD Attributes, LDAP Queries, Sid History, PowerShell Scripting to Modify AD Attributes, Group Policy Analysis, GPO Preference Configuration, Workstation Configurations, and Browser Configuration Settings + Account Management and Provisioning: Strong knowledge of permissions that are granted natively to various Microsoft Built-In Groups to perform Active Directory Administrative Functions. Knowledge of native permissions granted when building AD objects. Knowledge of permissions granted natively to Built-In Groups via GPOs and/or Local Policies + Active Directory Infrastructure & Enterprise Solutions: Ability to read product documentation to conceptualize and implement solutions, build Domain Controllers and Member Servers to support Enterprise Solutions + Thorough functional understanding and ability to configure Active Directory Server Roles (CAs, IIS, File/Print, DNS) + Working knowledge of GPOs, AD Sites, Replication Topology, and native AD troubleshooting tools How we support our colleagues In addition to our comprehensive benefits package, we encourage a diverse workforce. Plus, our agile, inclusive environment allows you to manage your wellbeing and work/life balance, ensuring you can be your best self at Aon. Furthermore, all colleagues enjoy two “Global Wellbeing Days” each year, encouraging you to take time to focus on yourself. We offer a variety of working style solutions, but we also recognise that flexibility goes beyond just the place of work... and we are all for it. We call this Smart Working! Our continuous learning culture inspires and equips you to learn, share and grow, helping you achieve your fullest potential. As a result, at Aon, you are more connected, more relevant, and more valued. Aon values an innovative, diverse workplace where all colleagues feel empowered to be their authentic selves. Aon is proud to be an equal opportunity workplace. Aon provides equal employment opportunities to all employees and applicants for employment without regard to race, color, religion, creed, sex, sexual orientation, gender identity, national origin, age, disability, veteran, marital, domestic partner status, or other legally protected status. We welcome applications from all and provide individuals with disabilities with reasonable adjustments to participate in the job application, interview process and to perform essential job functions once onboard. If you would like to learn more about the reasonable accommodations we provide, email ReasonableAccommodations@Aon.com #LI-RK2 2552585 Job Titlle: Active Directory Engineer AON IS IN THE BUSINESS OF BETTER DECISIONS At Aon, we shape decisions for the better to protect and enrich the lives of people around the world. As an organization, we are committed as one firm to our purpose, united through trust as one inclusive, diverse team and we are passionate about helping our colleagues and clients succeed. GENERAL DESCRIPTION OF ROLE: This Active Directory engineering role is heavily involved in solving technical and operational issues with the team. Daily activities for this role include engineering support for directory services, support of operations team, capacity management, coordination with other teams, metrics development, and team development. Job Responsibilities: + Assist the Active Directory (AD) Services Architect in support of: Inter-Forest User Migrations, Account Management and Provisioning, and AD Infrastructure & Enterprise Solutions + Support all Active Directory services and management tools, automations, and backups. + Demonstrate strong analytical, troubleshooting, and problem-solving skills related to Application remediation. + Create and maintain system documentation for domain technologies, including installation, configuration, and appropriate troubleshooting steps. + Maintain a solid understanding of business issues and technical solutions encountered during the migration of single forest or multi-forest Active Directory environments. + Ability to manage multiple priorities, commitments, and projects and interact daily with System Administrators + Maintain a strong learning aptitude and ability to learn new technologies independently. + Excellent interpersonal skills and the ability to work in a team environment and interact with all levels of management as well as customers. + Identify opportunities to innovate, extend and enhance service delivery everywhere possible. Required Skills: + 8+ years of experience in Active Directory support, migrations, design, and implementations + Solid experience working with large, complex Active Directory migrations for customers, prospects, or clients. + Advanced knowledge in AD architecture and infrastructure (LDAP, Directory Replication, group policy, security, schema changes, domain controllers’ management) + Advanced knowledge of DNS, Kerberos, Windows Authentication and Single Sign On (SSO) + Advanced knowledge of Microsoft Identity Manager, Microsoft Azure AD, Office 365, Azure AD Connect, and Azure AD Conditional Access. Knowledge of Microsoft Certificate Services/PKI infrastructure + Advanced knowledge of Windows Server 2012, 2016, 2019, and 2022 + Strong TCP/IP networking knowledge + Knowledge of identity life cycle onboarding and offboarding processes + Inter-Forest User Migrations: Strong understanding of AD Attributes, LDAP Queries, Sid History, PowerShell Scripting to Modify AD Attributes, Group Policy Analysis, GPO Preference Configuration, Workstation Configurations, and Browser Configuration Settings + Account Management and Provisioning: Strong knowledge of permissions that are granted natively to various Microsoft Built-In Groups to perform Active Directory Administrative Functions. Knowledge of native permissions granted when building AD objects. Knowledge of permissions granted natively to Built-In Groups via GPOs and/or Local Policies + Active Directory Infrastructure & Enterprise Solutions: Ability to read product documentation to conceptualize and implement solutions, build Domain Controllers and Member Servers to support Enterprise Solutions + Thorough functional understanding and ability to configure Active Directory Server Roles (CAs, IIS, File/Print, DNS) + Working knowledge of GPOs, AD Sites, Replication Topology, and native AD troubleshooting tools How we support our colleagues In addition to our comprehensive benefits package, we encourage a diverse workforce. Plus, our agile, inclusive environment allows you to manage your wellbeing and work/life balance, ensuring you can be your best self at Aon. Furthermore, all colleagues enjoy two “Global Wellbeing Days” each year, encouraging you to take time to focus on yourself. We offer a variety of working style solutions, but we also recognise that flexibility goes beyond just the place of work... and we are all for it. We call this Smart Working! Our continuous learning culture inspires and equips you to learn, share and grow, helping you achieve your fullest potential. As a result, at Aon, you are more connected, more relevant, and more valued. Aon values an innovative, diverse workplace where all colleagues feel empowered to be their authentic selves. Aon is proud to be an equal opportunity workplace. Aon provides equal employment opportunities to all employees and applicants for employment without regard to race, color, religion, creed, sex, sexual orientation, gender identity, national origin, age, disability, veteran, marital, domestic partner status, or other legally protected status. We welcome applications from all and provide individuals with disabilities with reasonable adjustments to participate in the job application, interview process and to perform essential job functions once onboard. If you would like to learn more about the reasonable accommodations we provide, email ReasonableAccommodations@Aon.com #LI-RK2