Description

You will design, implement, and secure Microsoft Active Directory forests, domains, and trusts across enterprise environments.

This role is on-site.

Responsibilities

• Engineer enterprise IAM solutions supporting secure authentication and authorization across business applications.
• Partner with IAM and PAM teams to implement privileged access controls and delegated administration models.
• Monitor, troubleshoot, and resolve Active Directory issues related to authentication, replication, DNS, and domain controller availability.
• Integrate Active Directory with Identity Governance and Access Management platforms, including AWS Managed AD.
• Maintain operational documentation, standards, and runbooks for Active Directory services.

Required Skills

• 10+ years of Identity & Access Management (IAM) experience.
• Expertise in Microsoft Active Directory administration, including forests, domains, trusts, OUs, and Group Policies.
• Strong understanding of Active Directory security, delegation models, and account lifecycle management.
• Experience with Identity Governance and Privileged Access Management (PAM) solutions.
• Proficiency in LDAP and Kerberos authentication standards and integration patterns.
• Ability to troubleshoot authentication, replication, and DNS issues in global multi-domain environments.
• Experience integrating Active Directory with AWS (Managed AD or Self-Hosted).

Preferred Skills

• Experience with cloud security and enterprise security initiatives.
• Strong analytical and problem-solving skills for complex identity infrastructure.

Key Skills

Education

Bachelor's degree