Description

You will engineer, deploy, and maintain directory services across a large global enterprise environment.

This role is remote.

Responsibilities

• Architect and engineer global AD domain consolidation projects and directory service disaster recovery plans.
• Design, deploy, and operationalize tools associated with AD and Entra ID.
• Lead technology evaluations, proof of concepts, and solution design discussions.
• Collaborate with application owners to troubleshoot AD service and integration issues.
• Provide technical leadership, conduct knowledge transfers, and support operational teams.

Required Skills

• 7+ years of experience as an AD and Entra ID Engineer in a large, global enterprise.
• Deep expertise in on-prem Active Directory services including Authentication, DFS, GPO, and LDAP.
• Strong understanding of AD security, vulnerabilities, Tier-0 security boundaries, and safeguards.
• Experience with domain consolidation for large enterprise AD forests.
• Proficiency with AWS EC2 and Azure environments to build and support services.
• Working knowledge of modern authentication protocols: OIDC, SAML, and Kerberos.
• Understanding of IAM, RBAC, PBAC, and ABAC frameworks.
• Experience with privileged access management for directory services.

Preferred Skills

• Experience using machine learning or AI for technology evaluations and enhancements.

Key Skills

Education

Bachelor's degree