123pracovat

Pracovní nabídka

Senior Microsoft Active Directory Engineer

Ultra Clean Holdings (UCT) is a leading provider of critical subsystems, components, and ultra-high-purity cleaning services for the semiconductor industry — helping the world's top chipmakers build the technology behind everything from smartphones to AI. Headquartered in Hayward, California.

The Opportunity

We're looking for a Senior Active Directory Engineer to serve as the technical authority behind our entire identity backbone. This is a role for someone who thinks in trusts and forests, not just accounts — you'll architect resilience into the systems everyone else depends on without thinking twice, spanning multi-domain, multi-forest, and hybrid cloud environments.

If you want ownership over something foundational — where every design decision ripples across the whole organization — and you're ready to mentor the next wave of engineers along the way, this is your seat.

What You'll Own

Active Directory Architecture & Operations

Act as senior technical owner of AD DS across multiple domains and forests — designing domain controllers, managing trusts, replication topology, and Global Catalog placement, and leading the full domain controller lifecycle.

Hybrid Identity & Cloud Integration

Design and operate hybrid identity configurations, bridging on-prem AD with Microsoft Entra ID / Azure AD Connect, and partner with cloud engineering to extend identity into IaaS and hybrid environments.

Group Policy, DNS & Core Services

Architect GPOs that enforce security baselines, maintain AD-integrated DNS, and be the Tier 3/4 escalation point for the gnarliest Kerberos, LDAP, and replication issues.

Security, Resilience & Governance

Strengthen AD security through least-privilege models and auditing, design backup/DR procedures, and partner with security teams to stay ahead of identity-based threats.

Automation & Leadership

Build PowerShell automation that scales operations, mentor junior engineers, and own the architecture diagrams and standards that keep everyone aligned.

What You Bring:

5–8+ years engineering Active Directory in enterprise environments, with proven multi-domain/multi-forest experience
Hands-on production experience with Windows Server domain controllers
Deep knowledge of AD DS, DNS, Group Policy, and replication
Solid grasp of hybrid identity and directory synchronization
Strong PowerShell skills for automation

Nice to have: hybrid cloud AD architecture experience, identity federation/SSO/modern IAM familiarity, Microsoft certifications in Windows Server or identity technologies, and background in large, distributed enterprise environments.

3 days a week on site in Liberec is there normal work expectations

Interview process: (2 total interviews)

1 hour with the manager and one engineer who are in Liberec

30-minute final interview with the VP who runs the department who's here in the US