Cloud Engineer
About The Position
The Active Directory Engineer is responsible for engineering, administering, maintaining, modernizing, and ensuring the operational resiliency of enterprise Active Directory and Microsoft identity infrastructure. The role partners with Infrastructure, Security, IAM, Platform Engineering, Application Teams, and Architecture to provide secure, reliable directory services for authentication, authorization, privileged access, identity lifecycle management, and Zero Trust initiatives. The engineer serves as a subject matter expert in Active Directory Domain Services (AD DS), Entra ID integration, Group Policy, LDAP services, Active Directory Certificate Services (AD CS), and identity-related automation. The role supports modernization, operational excellence, platform resiliency, and identity security initiatives aligned with the organization’s IAM strategy and Platform Engineering objectives.
Requirements
- 4–8 years of experience, preferred.
- Bachelor’s degree in a related field, or equivalent work experience, preferred.
- Advanced PowerShell skills and experience with Microsoft Graph APIs, REST APIs, JSON/XML, infrastructure automation, and workflow automation.
Nice To Haves
- ServiceNow Developer experience.
Responsibilities
- Install, configure, administer, and maintain AD DS, AD LDS, Microsoft Entra ID integration, AD CS, Group Policy infrastructure, DNS and DHCP services supporting AD, and hybrid identity synchronization services.
- Perform platform upgrades, migrations, patch management, and lifecycle management.
- Monitor Active Directory health, replication, authentication services, and directory performance.
- Manage domain controllers, forests, domains, trusts, sites, and services.
- Support directory consolidation, modernization, and cloud identity initiatives.
- Develop standards for directory services architecture and operational support.
- Administer users, groups, organizational units, and directory permissions.
- Design and implement Group Policy Objects and maintain Active Directory delegation models.
- Support enterprise authentication services relying on LDAP, Kerberos, NTLM, and SAML.
- Administer service accounts and managed service accounts.
- Support certificate-based authentication and PKI integrations.
- Maintain naming standards, OU structures, and directory governance.
- Develop PowerShell-based automation solutions for user lifecycle management, group management, service account governance, GPO deployment, AD health monitoring, and certificate lifecycle management.
- Develop integrations using PowerShell, REST APIs, LDAP, and Microsoft Graph APIs.
- Support Infrastructure-as-Code and platform automation initiatives where applicable.
- Support SOX, HIPAA, PCI, NIST, and internal security controls; assist with audit evidence collection and compliance reviews.
- Maintain technical documentation, standards, and operational procedures.
- Participate in risk assessments and remediation efforts and support policy enforcement through Group Policy and directory controls.
- Support Zero Trust identity initiatives, passwordless authentication, Entra ID modernization, and cloud identity transformation.
- Enhance directory-operations automation and support identity telemetry, security analytics, operational reporting, and Non-Human Identity governance where directory services are involved.
- Support AD integration with Okta, SailPoint, CyberArk, and enterprise applications.
Benefits
- Medical, dental, and vision coverage
- Paid time off plan
- Health savings account (HSA)
- 401(k) savings plan
- Access to wages before payday with myFlexPay
- Flexible spending accounts (FSAs)
- Short- and long-term disability coverage
- Work-Life resources
- Paid parental leave
- Healthy lifestyle programs
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
