Active Directory Engineer – Infrastructure Support

About the role

Alcon is seeking an experienced Active Directory Engineer to lead the design, implementation, and optimization of its enterprise identity infrastructure in Mexico City. You will work within a hybrid environment, supporting both on‑premises and cloud‑based identity services.

Key responsibilities

• Maintain complex Active Directory environments, including multi‑domain forests, trusts, replication, and domain controller placement.
• Design and deploy hybrid identity solutions integrating Azure AD, Intune, and on‑prem AD.
• Promote, decommission, and monitor the health of domain controllers.
• Develop and enforce Group Policy Objects to meet security and configuration standards.
• Manage and troubleshoot DNS, DHCP, Kerberos, and authentication protocols.
• Configure Azure AD and Azure AD Connect for hybrid cloud scenarios.

Required profile

• Bachelor’s degree in Computer Science, Information Systems, or equivalent practical experience.
• 5+ years administering enterprise Microsoft Active Directory (5k+ users, multi‑site).
• Advanced English proficiency, both written and spoken.

Required skills

• Microsoft Active Directory (multi‑domain, forest, trusts).
• Azure AD, Azure AD Connect, Entra ID, Conditional Access, ADFS/SSO.
• PowerShell scripting for automation and troubleshooting.
• PKI (AD CS), certificate templates, auto‑enrollment, CRL/OCSP.
• Group Policy Objects (GPO) design and implementation.
• DNS, DHCP, Kerberos, TCP/IP networking.
• Windows Server 2016+ administration.

What we offer

• Meaningful work with opportunities for learning and internal mobility.
• Hybrid work model supporting work‑life balance and inclusion.
• Market‑aligned compensation and comprehensive benefits package.