Description

You will design and maintain the enterprise identity infrastructure for the Commonwealth of Kentucky, supporting a large-scale hybrid environment.

Responsibilities

• Design, implement, and maintain multi-forest/multi-domain Active Directory infrastructures.
• Architect and manage Microsoft hybrid identity solutions including Entra ID, Azure AD Connect, and Microsoft Identity Manager.
• Research and implement best practices for Active Directory, Entra ID, ADFS, and Single Sign-On technologies.
• Develop technical documentation, processes, and procedures for directory and IAM services.
• Provide guidance to internal teams on directory services and Identity and Access Management standards.

Required Skills

• 6+ years of experience in enterprise identity management for large-scale (5,000-10,000+ users) hybrid infrastructures.
• 4+ years designing and implementing Microsoft hybrid identity solutions (Entra ID, Azure AD Connect, MIM, ADFS).
• 8+ years designing and maintaining multi-forest/multi-domain Active Directory, including DNS, DFS, GPO, and Sites and Services.
• Experience designing and maintaining Public Key Infrastructure (PKI) and certificate lifecycle management solutions.
• Strong skills in federating services and applications using SAML, OIDC, and OAuth.
• Proficient in PowerShell scripting and automation.
• Familiarity with ITIL standards and processes.

Preferred Skills

• Microsoft Certified: Identity and Access Administrator Associate, Azure Security Engineer Associate, or Azure Administrator Associate.
• CompTIA Security+ certification.

Key Skills

Education

Not specified