Let's begin! Principal Active Directory & Identity Infrastructure Engineer

Moody's Corporation • Charlotte, NC

1d

About The Position

At Moody's, we unite the brightest minds to turn today’s risks into tomorrow’s opportunities. We do this by striving to create an inclusive environment where everyone feels welcome to be who they are—with the freedom to exchange ideas, think innovatively, and listen to each other and customers in meaningful ways. Moody’s is transforming how the world sees risk. As a global leader in ratings and integrated risk assessment, we’re advancing AI to move from insight to action—enabling intelligence that not only understands complexity but responds to it. We decode risk to unlock opportunity, helping our clients navigate uncertainty with clarity, speed, and confidence. If you are excited about this opportunity but do not meet every single requirement, please apply! You still may be a great fit for this role or other open roles. We are seeking candidates who model our values: invest in every relationship, lead with curiosity, champion diverse perspectives, turn inputs into actions, and uphold trust through integrity. Our Cloud Infrastructure & Identity Services team is responsible for securing and modernizing Moody’s global identity ecosystem, enabling seamless and secure access for 14,000+ users across 70 locations. By joining our team, you will contribute to strategic initiatives that leverage automation and AI-driven tools to enhance security, compliance, and operational efficiency. We are passionate about innovation and building identity solutions that empower business agility while maintaining the highest standards of security and governance.

Requirements

• Expert-level knowledge of Microsoft Active Directory architecture, replication, trusts, and forests
• Deep understanding of Group Policy design, implementation, troubleshooting, and security hardening
• Hands-on experience with hybrid identity infrastructure integrating on-premises AD with cloud platforms (Azure AD/Entra ID, AWS Managed Directory Services)
• Proficiency with DNS, DHCP, and network protocols in enterprise environments
• Strong understanding of identity security concepts (PAM, MFA, authentication protocols) and compliance frameworks (NIST, CIS Controls, Zero Trust Architecture)
• Experience with automation using PowerShell, Python, and Infrastructure as Code (Terraform, Ansible)
• Excellent problem-solving and analytical skills with ability to troubleshoot complex technical issues
• Demonstrated proficiency in artificial intelligence concepts, with hands-on experience using AI tools to streamline workflows and enhance operational efficiency. Proven ability to implement AI-powered solutions to solve business challenges. Demonstrates a growing awareness of AI risk management and a commitment to responsible and ethical AI use
• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or related field required

Nice To Haves

• Microsoft Certified: Identity and Access Administrator Associate (SC-300)
• Microsoft Certified: Azure Solutions Architect Expert (AZ-305)
• CISSP or equivalent security certifications

Responsibilities

• Lead identity infrastructure strategy and operations for Moody’s global enterprise environment.
• Own architecture, administration, and continuous improvement of hybrid Active Directory environment supporting 14,000+ users across 70 global locations
• Design and enforce Active Directory tiering, segmentation, and hardening standards aligned with NIST frameworks and zero-trust principles
• Architect and maintain hybrid identity infrastructure spanning on-premises AD and cloud platforms (Azure AD/Entra ID, AWS Managed Directory Services)
• Implement and optimize Azure AD Connect synchronization, federated authentication, and single sign-on (SSO) solutions
• Partner with Identity & Access Management team to integrate identity platforms (e.g., SailPoint) for automated lifecycle management
• Drive automation-first approach using PowerShell, Python, and Infrastructure as Code (Terraform, Ansible)
• Deploy conditional access policies and support passwordless authentication initiatives
• Ensure compliance with SOX, GDPR, ISO 27001, and other regulatory requirements through robust identity governance and audit support

Benefits

• In addition to base salary, this role is eligible for incentive compensation.
• Moody’s also offers a competitive benefits package, including not but limited to medical, dental, vision, parental leave, paid time off, a 401(k) plan with employee and company contribution opportunities, life, disability, and accident insurance, a discounted employee stock purchase plan, and tuition reimbursement.

What This Job Offers

• Job Type: Full-time
• Career Level: Principal
• Number of Employees: 5,001-10,000 employees