 Global Windows Active Directory services across multiple domains and forests, including governance, availability, security, replication health, Group Policy, and privileged access controls.

 Azure Entra ID, Azure AD Connect, hybrid identity synchronization, conditional access, MFA, single signon, identity lifecycle, and access management operations.

 Knowledge and skills to continuously improve Microsoft 365 services including Exchange Online, Teams, SharePoint Online, OneDrive, licensing, mail flow, retention, security, compliance, and collaboration governance.

 Citrix Virtual Apps and Desktops infrastructure, ensuring performance, availability, capacity, access control, image management, and user experience optimization.

 Oversee endpoint protection and detection platforms such as Trend Micro Vision One XDR and Palo Alto Cortex XDR Pro, including policy governance, incident response support, remediation coordination, and reporting.

 Drive endpoint encryption, endpoint lifecycle management, enterprise patch management, vulnerability remediation coordination, and endpoint compliance reporting.

 DNS, DHCP, SMTP, Windows and Linux-based infrastructure services, including service availability, resiliency, monitoring, configuration standards, and operational documentation.

 Own DNS zones, SSL certificate provisioning, certificate renewals, Microsoft PKI/Internal Certificate Authority infrastructure, and certificate lifecycle management.

 Active Directory audit logging, log retention, monitoring, alerting, and integration with security and compliance requirements.

 Microsoft SCOM, Windows log auditing, infrastructure monitoring, alert tuning, availability reporting, and operational dashboards.

 Own user self-service capabilities including password reset, account unlock, access workflows, and improvements to end-user support experience.

 Lead incident, problem, change, release, capacity, and availability management processes with strong focus on root cause analysis, corrective actions, and service stability.

 Develop technology roadmaps, modernization plans, automation initiatives, operational standards, SOPs, knowledge base articles, and service improvement plans.

 Partner with Information Security, Infrastructure, Service Desk, Application, Compliance, Audit, and business stakeholders to deliver secure and reliable technology services.

 Ensure compliance with ISO 27001, SOC, GDPR, HIPAA, internal security policies, audit requirements, and customer security expectations.

 Deep understanding of enterprise core technology operations, infrastructure support models, hybrid identity, messaging, collaboration, endpoint, monitoring, and security operations.

 Strong knowledge of Microsoft ecosystem technologies including Windows Server, Active Directory, Azure Entra ID, Microsoft 365, Exchange Online, Teams, SharePoint Online, OneDrive, Group Policy, DNS, DHCP, PKI, and PowerShell.

 Working knowledge of endpoint security, XDR/EDR, encryption, vulnerability remediation, patch governance, privileged access, MFA, identity protection, and secure configuration management.

 Understanding Citrix architecture, virtualization concepts, profile management, application delivery, image management, capacity planning, and user experience troubleshooting.

 Knowledge of IT service management practices including incident, problem, change, release, asset, configuration, capacity, and availability management.

 Awareness of regulatory and audit expectations including ISO 27001, SOC, GDPR, HIPAA, customer audits, evidence management, access reviews, and control validation.

 Ability to translate business, audit, and security requirements into practical technology controls, operational processes, and measurable service outcomes.