Administer a complex multi-forest Active Directory and hybrid Microsoft Entra ID environment. Responsibilities include domain controller, Group Policy, DNS, replication, PKI, privileged access, security hardening, attack-path reduction, Conditional Access, MFA, PIM, automation, incident support, and forest recovery planning.