Lead - Active Directory Infrastructure

JOB DESCRIPTION

Lead - Active Directory Infrastructure     

The Big Picture      

Sysco LABS is the Global In-House Center of Sysco Corporation (NYSE: SYY), the world’s largest foodservice company. Sysco ranks 56th in the Fortune 500 list and is the global leader in the trillion-dollar foodservice industry .         

Sysco employs over 75,000 associates, has 337 smart distribution facilities worldwide and over 14,000 IoT-enabled trucks serving 730,000 customer locations. For fiscal year 2025 that ended June 29, 2025, the company generated sales of more than $81.4 billion .         

Sysco LABS Sri Lanka delivers the technology that powers Sysco’s end-to-end operations .         

Sysco LABS’ enterprise technology is present in the end-to-end foodservice journey, enabling the sourcing of food products, merchandising, storage and warehouse operations, order placement and pricing algorithms, the delivery of food and supplies to Sysco’s global network and the in-restaurant dining experience of the end-customer.      

Location:  Sri Lanka  
Employment Type:  Ful l -Time  

Title :   Lead - Active Directory Infrastructure  
Experience Level:    6+ Years

About the Role  

Join our newly established Active Directory   Infrastructure   Team as   a     T eam   L ead .   You'll   be part of a 5-member team dedicated to managing and supporting our enterprise identity and directory services across multiple global domains. You will play a crucial role in ensuring secure and seamless authentication for our global workforce.  

We are   seeking   a highly motivated and experienced Team Lead to join our   Active Directory   Infrastructure   Team . The successful candidate will   be responsible for   leading and developing a team   of Active Directory Support Engineers , providing coaching, mentorship, and technical guidance while ensuring the effective delivery of   Active Directory management services   across the enterprise.    

This role involves providing technical leadership, overseeing day-to-day operations,   driving process improvements and automating workflows   and ensuring compliance with security and operational standards  

The ideal candidate will combine strong technical   expertise   in Microsoft Active Directory environments   with proven leadership capabilities, driving continuous improvement, operational efficiency, and a culture of accountability within the team.  

Note: This role provides 16 hours of daily support (8 hours on-desk, 5 days a week, and 8 hours on-call on a rotational roster).  

Our Identity   Environment:  

• Hybrid Directory Services:  Global On-Premises Active Directory forests integrated with Microsoft Entra ID (formerly Azure AD).  

• Authentication & Access:  Kerberos, NTLM, LDAP/S, SAML, and   Oauth   integrations across Windows, Linux, and multi-cloud platforms (Azure, AWS, GCP).  

• Endpoint Integration:  Windows and Linux endpoints (workstations, laptops, mobile) domain-joined or hybrid-joined globally.  

• Collaborative Support Model:  Working closely as the Identity Subject Matter Experts (SME) alongside local IT and Field Support teams worldwide.  

Key Responsibilities:

• Directory Administration:  Manage Active Directory objects (Users, Computers, Groups, Service Accounts) and Organizational Units (OUs) following best practices.  

• Authentication Support:  Troubleshoot complex authentication and domain-join issues for endpoints (Windows/Linux) and applications   utilizing   Kerberos, NTLM, and LDAP.  

• Server Core Administration:   Support and troubleshoot Domain Controllers deployed on Windows Server Core,   utilizing   Remote Server Administration Tools (RSAT), Windows Admin Center, and command-line interfaces for daily maintenance.  

• Group Policy Management:   Assist   in the creation, deployment, and troubleshooting of Group Policy Objects (GPOs) to enforce security baselines and configure endpoints.  

• AD Health & Monitoring:  Monitor AD replication, Domain Controller   health , and Directory Services event logs (using tools like  dcdiag  and  repadmin ).  

• Directory Automation & Reporting:   Utilize   PowerShell scripting to automate routine identity tasks, execute bulk object updates (users, groups, computers), and generate directory audit reports.  

• Hybrid Identity Operations:  Support Entra ID (Azure AD) sync operations (AAD Connect) and troubleshoot hybrid-join device scenarios.  

• Cross-Platform Auth:  Assist with Linux domain integration (SSSD,   Realmd ) and authentication troubleshooting for cross-platform endpoints.  

• PKI & Certificate Management:   Support Active Directory Certificate Services (AD CS) operations, including processing Certificate Signing Requests (CSRs), managing certificate templates, and troubleshooting client auto-enrollment issues for endpoints and servers.  

• DNS & DHCP:  Manage and troubleshoot DNS records and zones, as they relate to domain health and client connectivity.  

• Migrations :   Lead multi-domain and multi-forest Active   Directory   migration planning, execution, troubleshooting, identity integration, trust management, and post-migration support.  

• Documentation:   Maintain   runbooks, standard operating procedures (SOPs), and knowledge base articles for AD support and administration.  

Required Skills & Experience  

• Bachelor's degree in Computer Science , IT, or related field (or equivalent experience).  

• Proven experience leading technical teams and managing day-to-day operations.  

• Demonstrated ability to manage priorities,   allocate   resources, and deliver projects within agreed timelines.   

• Experience with incident management, problem management, change management, and service delivery processes.    

• Strong analytical and troubleshooting skills with the ability to make sound decisions under pressure.   

• Excellent communication, stakeholder management, and interpersonal skills.   

• Solid foundational understanding of Active Directory architecture (Domains, Forests, OUs, Sites and Services , Domian Migrations ).  

• Experience with Active Directory Users and Computers (ADUC), DNS, and Group Policy Management Console (GPMC).  

• Familiarity with navigating and managing GUI-less environments (Windows Server Core) using command-line tools and PowerShell.  

• Foundational understanding of Public Key Infrastructure (PKI) concepts, including Certificate Authorities (CAs), digital certificates, and encryption basics.  

• Understanding of   core authentication protocols (Kerberos, LDAP, NTLM).  

• Intermediate   experience using PowerShell (specifically the Active   Directory module) to query directory objects, parse event logs, and execute administrative commands.  

• Strong logical troubleshooting skills with a focus on identity, permissions, and access rights.  

• Excellent communication skills for collaborating with global remote teams and guiding Field Support.  

• Willingness to work in rotational shifts/ on-call .  

Preferred:  

• Familiarity with Microsoft Entra ID (Azure AD), AD Connect, and Hybrid Azure AD join scenarios.  

• Knowledge of enterprise identity integration with cloud platforms (AWS Directory Service, GCP Cloud Identity, SSO).  

• Relevant Microsoft certifications (e.g., SC-300: Identity and Access Administrator, AZ-800, or foundational MS-900/SC-900).  

• Familiarity with Privileged Access Management (PAM) or Just-in-Time (JIT) access concepts.  

• Experience with IT service management (ITSM) tools like ServiceNow.  

• ITIL Foundation certification.  

Benefits     

• Performance-based annual bonus     

• Performance rewards and recognition     

• Agile Benefits - special allowances for Health, Wellness & Academic purposes     

• Paid birthday leave Team engagement allowance     

• Comprehensive Health & Life Insurance Cover - extendable to parents and in-laws     

• Hybrid work arrangement     

Sysco LABS is an Equal Opportunity Employer.