Active Directory Engineer

About the Role and Team

The Identity & Access Management (IAM) Directory Services team is tasked with creating and managing a secure, standardized, and automated identity foundation across the enterprise. This involves providing authoritative directory platforms that facilitate authentication, authorization, and access governance for both human and non-human identities. The team's core mission is to transition identity governance from manual, reactive workflows to automated, policy-driven enforcement ensuring identities are secure, compliant, and well-maintained throughout their lifecycle. Collaboration with security, infrastructure, and application teams is crucial to eliminate legacy risks, minimize operational burdens, and build modern, cloud-first identity capabilities at enterprise scale.

Key Responsibilities

• Design, strengthen, and maintain enterprise and multidomain Active Directory environments that support vital business operations.
• Lead consolidation and rationalization of Active Directory domains across enterprise, eCommerce, and business unit directories.
• Manage operations and enhancements of RadiantLogic's Virtual Directory System.
• Define and implement security baselines across multiple Active Directory domains.
• Develop and improve RBAC (Role-Based Access Control) access models within Active Directory.
• Integrate Active Directory with Privileged Identity Management (PIM) and Privileged Access Management (PAM) platforms to control elevated access.
• Work towards removing persistent privileges by adopting group-based, time-limited, and just-in-time (JIT) access policies.
• Implement synchronization processes between Active Directory and Entra ID.
• Provide support for cross-tenant identity governance for various business sectors and federated setups.
• Enable automated identity governance for both human and non-human accounts, including monitoring, remediation, and compliance reporting.
• Minimize directory and tool redundancy while ensuring reliability and business continuity of services.
• Mentor junior team members and contribute to developing repeatable engineering practices and documentation.

Required Qualifications and Skills

• Over 8 years of direct experience in engineering and managing large-scale Active Directory infrastructures.
• Deep knowledge of Active Directory architecture including trusts, replication, DNS, and Public Key Infrastructure (PKI).
• Expertise in multi-domain and multi-forest Active Directory designs.
• Experience with security hardening and recovery strategies for Active Directory.
• Familiarity with Radiant Logic's Virtual Directory Services.
• Proven ability in implementing or supporting RBAC, PIM, and PAM systems.
• Understanding of privileged account segregation and Tier 0 security controls.
• Strong troubleshooting capabilities in complex and highly regulated contexts.
• Experience working within large-scale IAM or directory service teams.

Preferred Qualifications

• Familiarity integrating Active Directory with Entra ID/Azure AD in hybrid or cloud-first contexts.
• Knowledge of identity governance automation, especially regarding non-human identity management and ongoing compliance.
• Experience managing cross-tenant or multiple business unit identity architectures.
• Involvement in directory consolidation projects, legacy system decommissioning, or merger and acquisition identity integrations.
• Comfortable working in environments demanding high security, resilience, and audit standards.

Educational Requirements

Possession of a Bachelor’s degree in Computer Science, Information Systems, Software Engineering, Electrical or Electronics Engineering, or a related discipline, or equivalent professional experience.

Why Join Us?

Our company leverages technology to create impactful solutions. Joining this team means contributing to the foundational systems supporting renowned brands and global activities. We promote a collaborative culture, opportunities for career advancement, and value diversity, creativity, and innovation.