Senior Infrastructure Engineer- remote

Project duration: 3 months, with the possibility of extension

Mission

Safely decommission the old domain servers after migrating all remaining dependencies and services.

Responsibilities

• Rehearse a full restore of the old directory in a test environment.
• Move the name-resolution service (DNS) off the old servers.
• Clean up the old directory and take a full backup export before teardown.
• Hand over the special roles of the domain servers and switch the three domain servers off one by one, including FSMO transfer and demotion.
• Move the management servers to a setup that no longer requires the old domain.
• Decide with the client what happens to the 52 unknown server records.
• Move database and service accounts off old Windows logins.

• Strong knowledge of Active Directory Domain Services (AD DS), including:
  • FSMO
  • Replication
  • Metadata cleanup
  • Forest restore
  • Domain Controller demotion
• Experience with DNS migration, including:
  • Zones
  • Conditional forwarders
  • Azure Private Endpoints
• Knowledge of Azure IaaS and server lifecycle.
• Knowledge of SQL Windows authentication and gMSA / Managed Identity.
• Working knowledge of:
  • AD CS
  • DFS / NTFS permissions
  • Entra Domain Services