Senior SRE - Identity & Directory Services - Hybrid
About The Position
Genesis10 is seeking a Senior SRE - Identity & Directory Services for a hybrid position with a Global Financial Institution. This senior, hands-on role is responsible for ensuring the availability, security, resilience, and operational excellence of enterprise identity platforms. The SRE will act as a subject matter expert for Active Directory and cloud identity services, collaborating with engineering, security, and platform teams to design, operate, and continuously improve identity reliability. The role involves leading efforts to remediate vulnerabilities and embed automation and reliability engineering principles across on-premise and multi-cloud environments.
Requirements
- Deep expertise in Active Directory (AD) architecture, replication, DNS, trusts, GPOs, and security hardening
- Experience with AD backup, recovery, forest/domain restoration, and incident response
- Experience applying SRE principles to infrastructure platforms (availability, resilience, observability) and operating Tier 0 or mission-critical systems
- Strong understanding of Identity & Access Management (IAM), including authentication, authorization, federation, and privileged access
- Hands-on experience with Azure, AWS, and GCP identity and security services
- Experience identifying and remediating identity-related vulnerabilities, misconfigurations, and legacy tools
- Scripting and automation skills (PowerShell, Python, Bash)
- Knowledge of Infrastructure as Code concepts (Terraform or equivalent)
Nice To Haves
- Experience with Identity Threat Detection & Response (ITDR) concepts
- Familiarity with Privileged Access Management (PAM) solutions (e.g., vaulting, session monitoring)
- Knowledge of secrets management and key management systems
- Experience with Policy as Code and configuration compliance frameworks
- Experience integrating identity platforms with CI/CD and platform engineering teams
- Strong background in incident management, root cause analysis, and continuous improvement
- Ability to influence standards and mentor engineers across teams
Responsibilities
- Serve as primary SRE and technical SME for Active Directory, identity services, and supporting tooling
- Design and operate highly available, resilient AD and identity architectures, including backup, restore, and disaster recovery capabilities
- Partner with security and engineering teams to remediate identity vulnerabilities, misconfigurations, and legacy/non-permitted technologies
- Implement site reliability engineering practices for identity platforms, including SLIs/SLOs, error budgets, proactive monitoring, and resiliency testing
- Lead automation efforts for identity operations using Infrastructure as Code and configuration management
- Support multi-cloud identity integrations across Azure, AWS, and GCP, ensuring secure authentication, authorization, and secrets handling
- Provide technical leadership during incidents, root cause analysis, and post-incident remediation
- Establish and enforce engineering standards, patterns, and guardrails for identity platforms
- Act as a trusted advisor to engineering teams on secure identity design and operational reliability
Benefits
- Access to hundreds of clients, most who have been working with Genesis10 for 5-20+ years.
- The opportunity to have a career-home in Genesis10; many of our consultants have been working exclusively with Genesis10 for years.
- Access to an experienced, caring recruiting team (more than 7 years of experience, on average.)
- Behavioral Health Platform
- Medical, Dental, Vision
- Health Savings Account
- Voluntary Hospital Indemnity (Critical Illness & Accident)
- Voluntary Term Life Insurance
- 401K
- Sick Pay (for applicable states/municipalities)
- Commuter Benefits (Dallas, NYC, SF, and Illinois)
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
Education Level
No Education Listed
