Senior Active Directory & Hybrid Identity Engineer

TEKsystems • Wilmington, DE

11d • $72 - $82 • Hybrid

About The Position

The Senior Active Directory & Hybrid Identity Engineer is the enterprise subject matter expert responsible for designing, implementing, securing, and managing enterprise-wide Active Directory and Entra hybrid identity infrastructure. This is a senior-level engineering position, not an administrator role, with responsibility for scalable, secure, and resilient AD architecture and for maintaining Active Directory as the identity Source of Truth. The Platform Identity Management team also supports Entra and Auth0 identity services, AD CS PKI, and identity authentication and authorization.

The role supports locations in Wilmington, Delaware; Manassas, Virginia; or Urbandale, Iowa, with a hybrid schedule of four days onsite and one day remote. The engineer provides domain controller engineering and troubleshooting, AD security hardening, hybrid AD/Entra support, and preparation for future AD expansion into Azure. The position requires participation in the team's on-call rotation and adherence to ITIL incident, request, and change-management standards. Team members are expected to use AI tools as a regular part of their work.

This is a contract-to-hire position based in Wilmington, Delaware. The listed hourly pay range is $72.00–$82.00. The posting also lists a base salary range of $107,000–$198,000 and describes a competitive compensation plan and benefits for eligible employees.

Requirements

• At least 5 years of hands-on experience designing, implementing, and managing large, complex, multi-forest Active Directory environments.
• Deep expertise in Active Directory DNS, domain controllers, Group Policies, Sites and Services, and trusts.
• Experience implementing, configuring, and managing Netwrix Directory Manager or similar products for policy-based delegated AD administration and governance within a least-privilege security framework.
• In-depth knowledge of Windows Server 2016, 2019, 2022, and 2025 and their roles in an enterprise environment.
• Strong understanding of Active Directory security practices, including privileged access management, role-based access control, and security hardening.
• Ability to integrate Active Directory with IAM solutions aligned with Zero Trust, identity governance, and adaptive authentication concepts.
• Excellent written and verbal communication skills, including the ability to document and explain complex technical concepts to technical and non-technical audiences.
• Experience with disaster recovery and business continuity planning for Active Directory and its role in organizational technology stacks.
• Comfort using AI-assisted tools professionally as a standard part of a modern workflow.
• Bachelor's degree in Computer Science, Information Technology, Information Systems, or a related discipline; equivalent experience or alternative qualifications will be considered.

Nice To Haves

• Previous experience with server hardening in an Active Directory environment.
• Previous experience with Okta or Auth0, Microsoft Entra ID, multifactor authentication, or LDAPS.

Responsibilities

• Serve as the enterprise subject matter expert for Active Directory architectural designs, aligning them with business needs and security requirements.
• Develop, implement, and maintain Active Directory architecture, including forests, domains, organizational units, and Group Policies.
• Perform advanced troubleshooting and root-cause analysis for Active Directory infrastructure issues involving replication, DNS, and authentication.
• Use DevOps and Platform Engineering principles to automate administrative tasks across Active Directory and Entra.
• Ensure critical Active Directory roles and Entra identity services have health monitoring and alerting.
• Implement authentication, authorization, and auditing best practices, and periodically harden domain controllers.
• Develop and maintain architectural designs, configuration standards, and standard operating procedures.
• Lead projects and work with project management, account management, and customer teams.
• Collaborate with security, networking, and application development teams to support integration and operational efficiency.
• Mentor and cross-train technical staff, peers, and subordinate team members in AD/IAM technologies and practices.
• Participate in and follow ITIL incident, request, and change-management standards.
• Participate in the Platform Identity Management team's on-call rotation.

Benefits

• Health insurance
• Dental insurance
• Vision insurance
• Life insurance
• Disability coverage
• Wellness benefits
• Paid time off
• 401(k) retirement plan
• Profit-sharing plan
• Critical illness, accident, and hospital coverage may be available for eligible temporary-role employees.
• Health Savings Account may be available.
• Transportation benefits may be available.
• Employee Assistance Program may be available.
• PTO, vacation, or sick leave may be available, subject to eligibility and plan terms.

What This Job Offers

• Career Level: Senior