Consultant, IT Infrastructure

Travel + Leisure Co.•Florida, USA (work from home), FL

About The Position

Travel + Leisure Co. is hiring an IT infrastructure consultant who serves as the hands-on subject matter expert for enterprise Active Directory, DDI (DNS, DHCP, and IP address management), and Certificate Services (PKI). The role engineers and operates a secure, highly available environment aligned with enterprise architecture and standards, and drives automation to reduce manual effort and improve consistency. It partners with the Technical Architect and Infrastructure, Security, Network, Application, and Project Management teams. The position may also support other WINTEL infrastructure, including Windows Server, virtualization, storage, or endpoint platforms, as assigned. The role has no direct people-management responsibility, but it sets technical direction and standards, mentors engineers, and acts as the final internal escalation point for complex Active Directory, DDI, and PKI issues. Responsibilities include day-to-day engineering and administration, project leadership, automation, root-cause analysis, incident response, and support for security, access governance, compliance, and audit activities. Participation in the on-call rotation is expected. Occasional travel may be required for datacenter activities, vendor engagements, or enterprise infrastructure projects; expected travel is 0% to 15%.

Requirements

At least 15 years of experience in enterprise IT infrastructure engineering or administration in a mid-size to large environment.
At least 11 years of hands-on experience designing, administering, and securing Active Directory environments, including multi-forest and multi-domain architectures.
At least 8 years of hands-on experience designing and administering enterprise DNS, DHCP, and IPAM services.
At least 8 years of hands-on experience designing and administering enterprise PKI or Certificate Services, including certificate authority hierarchy and certificate lifecycle management.
Experience automating Active Directory, DDI, and PKI administration using scripting, APIs, or orchestration tools.
Working proficiency with scripting and automation tools such as PowerShell, Python, or Ansible.
Expert knowledge of Active Directory architecture, DDI design and administration, and enterprise PKI and certificate lifecycle management.
Ability to design, secure, and troubleshoot enterprise-scale directory, DDI, and certificate services, including complex cross-domain issues and dependencies with identity, network, and applications.
Working knowledge of broader WINTEL infrastructure, such as Windows Server, virtualization, storage, or endpoint platforms, sufficient to support assigned work.
Experience leading enterprise Active Directory, DDI, or Certificate Services projects, such as upgrades, migrations, consolidations, modernization, or certificate authority modernization.
Experience mentoring engineers and setting technical standards across an infrastructure engineering team.
Experience supporting compliance and audit requirements such as SOX, PCI, and PII.
Experience working in a multiple-site, multiple-vendor team environment.
Ability to troubleshoot critical incidents, lead technical resolution, anticipate potential problems, and implement preventive solutions.
Ability to define and enforce infrastructure engineering standards, security hardening practices, and documentation.
Excellent written and verbal communication skills and ability to collaborate with technical teams, vendors, and business stakeholders.
At least one current or previously held certification, formal training credential, or equivalent demonstrated expert-level experience in Active Directory, DDI, enterprise PKI/certificate services, or enterprise IT infrastructure engineering.
A bachelor's degree in Computer Science, Information Technology, Information Systems, Engineering, or a related technical field is preferred; equivalent professional experience may be accepted instead.

Nice To Haves

Microsoft Certified: Windows Server Hybrid Administrator Associate or equivalent Windows Server/Active Directory credential.
Microsoft Certified: Identity and Access Administrator Associate.
Vendor certification in DDI/IPAM platforms such as Infoblox, BlueCat, or Microsoft IPAM.
Training or formal certification in enterprise PKI or certificate lifecycle management.
ITIL 4 Foundation or higher ITIL certification.
Microsoft Certified: Azure Administrator Associate.
VMware Certified Professional - Data Center Virtualization (VCP-DCV).
Certification or formal training in scripting or automation tooling such as PowerShell, Python, or Ansible.

Responsibilities

Engineer, administer, and support enterprise Active Directory, including multi-forest and multi-domain topologies, trust relationships, Group Policy, replication, authentication, and directory security.
Automate routine Active Directory administration, including account and group lifecycle management, Group Policy deployment, and health checks.
Plan and lead Active Directory projects such as domain upgrades, migrations, and consolidations.
Engineer, administer, and support enterprise DNS, DHCP, and IPAM services.
Automate DNS record management, DHCP scope provisioning, and IPAM workflows using scripting, APIs, or orchestration tools.
Plan and lead DDI projects, including DNS, DHCP, and IPAM modernization initiatives.
Engineer, administer, and support enterprise PKI, including certificate authority hierarchies, certificate templates, and certificate lifecycle management.
Automate certificate issuance, renewal, and expiration monitoring, and establish certificate issuance, renewal, and revocation standards.
Plan and lead PKI projects, including certificate authority upgrades and cipher or algorithm modernization.
Serve as the senior technical escalation point for complex Active Directory, DDI, and Certificate Services incidents; lead root-cause analysis and remediation.
Build automated diagnostics and health checks to improve detection and resolution of issues.
Participate in the on-call rotation for business-critical incidents.
Mentor engineers through design discussions, troubleshooting, peer reviews, and knowledge-sharing sessions; set technical direction and infrastructure standards.
Support security posture, access governance, and compliance and audit activities, including SOX, PCI, and PII requirements.
Support broader WINTEL infrastructure as assigned, including Windows Server, VMware ESXi/vSphere, storage, and endpoint management (SCCM).
Collaborate with cross-functional teams, outsourced vendors, and business stakeholders on project planning and issue resolution.