Feiszal Hassen

About

Directory Services Lead and IAM Architect with 30+ years of experience designing, securing, modernizing, and operating enterprise directory and identity platforms. Expertise in Active Directory, Microsoft Entra ID, Oracle directory services, Kerberos, hybrid identity, PAM/SSO/MFA, directory security, and business continuity. Proven record supporting global environments with 400+ domain controllers, leading cross-functional initiatives, and applying Active Directory security, replication health, backup and recovery, KRBTGT protection, and operational resilience practices. Core competencies include: Active Directory Design & Deployment / DNS Management / Group Policy Management / Microsoft Azure SSO Design & Deployment / MFA Design & Deployment/Novell Identity Manager Design & Deployment / Quest InTrust/Change Auditor/Quest QMM Design & Deployment / PAM /Windows/Linux Server Design/Deployment/Administration / PKI / PowerShell scripting / BCDR Implementation/ IGA Azure Active Directory/DNS / M365 Design/Deployment/Administration / PIM / Conditional Access / Hybrid Identity Synchronization / Zero Trust Architecture / Auditing & Security Monitoring / Splunk Design and Deployment / CrowdStrike Falcon Identity Protection / Delinea Secret Server / KRBTGT Security / AD System State, DNS & GPO Backups / AD Replication & Time Synchronization / Forest Trusts / DUO / Disaster Recovery Architecture

Experience

• Directory Services Lead
  University of Southern California · Los Angeles, CA
  Jan 2026 – Present

   Lead university directory services engineering and operations, partnering with Identity Governance and Administration (IGA), cybersecurity, and university stakeholders to improve the security, integrity, reliability, and integration of enterprise identity services.  Lead planning and prioritization for directory services initiatives, aligning engineering activities with university security and operational objectives.  Oversee Active Directory, Microsoft Entra ID, Oracle Unified Directory (OUD), and Global Directory Services (GDS) modernization assessments and integration planning.  Assess opportunities to simplify legacy directory dependencies, strengthen directory monitoring, and improve identity lifecycle integration across university applications.  Coordinate with internal engineering teams and external advisory partners on directory architecture, operational risk, and security improvement.  Support secure authentication and enterprise single sign-on integrations, including certificate lifecycle and renewal coordination.  Develop directory security recommendations and risk assessments incorporating backup, recovery, replication monitoring, and authentication resilience.

• Sr. Global Active Directory Engineer
  Interpublic Group of Companies · Los Angeles, CA
  Aug 1996 – Jan 2026

  Plan, implement, and maintain Microsoft Active Directory Services infrastructure for Windows 2016. Charged with administering 400+ Domain Controllers across Forest in North America, Europe/Middle East, Asia Pacific, and Latin America. Promote and demote Domain Controllers worldwide. Propel smooth daily operations within the Global Directory Operations Group to optimize health and replication of the Microsoft Active Directory environment.  Upgrade to the Active Directory Schema to Windows 2025. Upgraded the Active Directory Schema from Windows 2K8R2 to Windows 2016/2019/2025 in the Forest and 4 child-domains.  Upgrade Domain Controllers to Windows 2016/2019/2022/2025. Upgraded 400+ Domain Controllers in North America, Europe/Middle East, Asia Pacific, and Latin America including 50+ Domain Controllers in the Data Canters in Omaha, Chicago, London, and Singapore.  Administer 3,000 Active Directory internal DNS zones across the enterprise network and 2,200 external DNS zones in Microsoft Azure.  Administer Active Directory network topology spanning 2,000 sites/site links and 5,000 subnets.  Operate domain controllers across Azure, AWS, and GCP, including provisioning and decommissioning systems as required.  Administer Entra ID Connect and Cloud Sync to synchronize on-premises Active Directory with Microsoft Entra ID.  Govern approximately 6,000 Group Policy Objects across the enterprise environment.  Engineer and support enterprise SSO infrastructure using PingFederate and Microsoft Entra ID to federate 6,000 SaaS applications using SAML, OAuth, and OpenID Connect.  Engineer and support enterprise MFA services using Duo and Microsoft MFA, providing multi-factor authentication for approximately 1,600 applications.  Maintain Active Directory replication and SYSVOL health across the global forest.  Led onboarding and directory integration for 66 company acquisitions using Microsoft ADMT and Quest Migration Manager.  Admini

Skills

Tools / apps / platforms