Serve as the technical expert and escalation point for all Active Directory-related incidents and requests. Design, implement, and manage complex AD environments including forests, domains, trusts, and replication. Maintain and enforce Group Policy Objects (GPOs), including creation, auditing, and lifecycle management. Ensure the security and compliance of AD environments through regular reviews, hardening, and monitoring. Maintain and test GPOs, create, test, deploy, document. Design, manage, and troubleshoot AD Sites and Services. Plan and implement site topology, subnet mapping, replication schedules and bridgehead server configuration. Ensure DNS and AD environments are secure, highly available, and compliant. Support hybrid identity solutions such as Azure AD Connect and ADFS. Troubleshoot and resolve replication issues, authentication failures and DNS-related problems. Collaborate with InfoSec and IAM teams to implement RBAC, privileged access manag...