Description

You will design, secure, and automate Microsoft Active Directory environments, integrating them with cloud identity providers.

This role is remote.

Responsibilities

• Redesign OU structures and enforce standardized security group governance using AGDLP or RBAC models.
• Engineer, audit, and maintain Group Policy Objects to enforce security baselines and disable legacy protocols.
• Implement Privileged Access Management (PAM) with Just-In-Time access and remediate AD vulnerabilities.
• Configure Entra ID Connect and Okta integration for seamless hybrid identity and Single Sign-On.
• Automate user lifecycle management via PowerShell, bridging HRIS data with directory services.

Required Skills

• 10+ years of experience in enterprise Active Directory architecture and management.
• Advanced PowerShell scripting for bulk operations, auditing, and automation.
• Deep expertise in Kerberos, LDAP/S, SAML, and OIDC protocols.
• Hands-on experience with Okta AD Agents, IWA, and Entra ID Connect.
• Proven ability to implement security hardening, including LAPS and Fine-Grained Password Policies.
• Familiarity with ITIL change management processes and technical runbook maintenance.
• Experience deploying Secure Admin Workstations (SAWs) or Jump Servers.

Preferred Skills

• Experience operating independently in governed enterprise environments with minimal supervision.

Key Skills

Education

Any Graduate